Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          ViMl9Zumb7j3eaA3EJTOElBQWqdGgF8DWmzgcuffm9E=
Subject key identifier:   32:AD:27:30:FB:2D:3E:C5:EA:83:6D:EC:C7:46:83:92:EC:A7:DA:A5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       01987599394013E4B0D5C5F95F8A9E9B9DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          0202
Signing time:             Mon 04 Aug 2025 15:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 15:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 15:00:32 +0000
Files and hashes:         1: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=)
                          2: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=)
                          3: 8KCDPH2JrV05Zx7K2dBzU8WT0Hc.roa (hash: PmEeSgYpSMCgiJRPeD668IqZ2t3da6aT6doTbOtD5kI=)
                          4: BP6xc-GRow7em9LhzOxLgjKVYus.roa (hash: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=)
                          5: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=)
                          6: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=)
                          7: Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa (hash: 71OLxleyHa71qzZb4OKazZRwmp0vQUFo/BqOXzVQbBI=)
                          8: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=)
                          9: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=)
                          10: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 9NHX6z1O6AUQzLjr667MuM7IJUiPs3yu/NzgPZjt42w=)
                          11: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (hash: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=)
                          12: _abBv2Z4ueQE7wSnfYxgydB_BM0.roa (hash: 3IOCdjYObJ5KJJCmqqgmbhfx51pvGE0eK742ZYfwGCI=)
                          13: b5MC2G9gfifDOdjy6C8MLfgBcQA.roa (hash: o6vD4Gp4Mae4yiPr18V+Pjs9nO1iI0pHfiXFAFd7bkA=)
                          14: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=)
                          15: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=)
                          16: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (hash: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=)
                          17: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=)
                          18: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=)
                          19: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (hash: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=)
                          20: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=)
                          21: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:99:39:40:13:e4:b0:d5:c5:f9:5f:8a:9e:9b:9d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Aug  4 15:00:32 2025 GMT
            Not After : Aug  5 15:00:32 2025 GMT
        Subject: CN=32ad2730fb2d3ec5ea836decc7468392eca7daa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:bc:0f:e3:9d:94:89:cd:75:4d:14:6f:32:
                    83:66:de:f1:a3:e1:91:a2:16:dd:ad:b3:5c:0e:60:
                    41:2b:3c:81:4f:1f:51:e4:43:c8:c9:bb:db:12:8f:
                    48:14:1e:cc:74:d7:8d:31:ae:14:c5:63:71:2f:77:
                    f9:0b:44:23:2d:cb:a4:ae:6c:8e:20:6c:af:ab:8a:
                    80:17:6e:e7:ed:36:21:b1:93:89:44:97:44:24:4b:
                    4e:a0:5b:74:1f:89:5e:71:32:78:0d:6f:0d:75:7f:
                    18:37:be:21:4a:d9:0b:f6:dc:72:ba:58:76:f4:55:
                    5e:31:9f:12:30:ea:c7:22:9d:7b:e6:db:0d:d6:bf:
                    84:1d:cf:f3:33:58:32:d4:32:71:30:a0:a3:a7:54:
                    8e:7b:36:ed:1c:23:f7:81:7f:32:4f:ac:3d:fa:45:
                    65:3e:aa:83:58:bb:e4:d8:67:67:b5:30:8f:40:37:
                    df:48:ce:60:c5:40:79:10:b0:1b:f5:57:03:86:4f:
                    ce:0a:94:cf:ce:82:3d:5c:20:55:c4:43:16:90:e0:
                    ab:7f:66:55:02:cd:f9:9a:fb:5a:ce:7a:64:ac:83:
                    a6:b7:e2:7b:d3:07:f0:fc:9f:38:0e:2b:b8:76:6d:
                    cd:7f:1c:27:f9:42:d2:28:3e:0c:f7:83:5e:84:84:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:27:30:FB:2D:3E:C5:EA:83:6D:EC:C7:46:83:92:EC:A7:DA:A5
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:a1:f3:b7:ab:fc:be:c5:b2:a6:73:59:77:4c:f9:7c:8f:
         a8:4d:8b:d6:fb:3e:07:84:45:71:32:28:29:df:e1:dd:c0:74:
         4c:8d:34:1f:6f:78:94:8a:f8:e8:18:db:cc:d0:ba:53:bc:38:
         01:c5:1f:5e:22:b5:de:44:6e:d9:cd:62:81:b9:46:ed:94:5d:
         7f:a1:a7:d3:52:a4:76:db:b4:11:f2:07:44:01:1f:f5:b9:d3:
         f0:b4:a9:17:1f:dd:86:a8:95:04:de:7e:ec:cd:5e:9d:28:2d:
         9d:75:6a:f7:70:73:ef:e2:7c:a7:d4:46:69:ad:9f:1e:05:5e:
         a3:ec:87:e1:d8:35:30:92:15:12:dd:af:84:2d:d1:6d:30:4a:
         ee:41:12:5e:8b:f5:02:ac:51:aa:ac:73:12:a2:2f:26:ac:27:
         2e:3a:79:f4:66:08:32:3b:8a:76:40:32:cb:8c:e4:19:a5:a5:
         ca:0c:a8:25:a3:ab:cf:aa:64:fc:61:f1:48:19:99:93:78:98:
         e2:0e:82:2a:09:a3:78:c3:af:ab:dc:3d:29:0c:a0:b2:54:52:
         9d:fb:a7:26:2d:94:3e:62:c4:92:85:5d:f8:e6:7f:6b:30:01:
         a4:c2:16:69:20:62:f8:8b:97:95:82:ad:3c:94:f9:34:46:db:
         9a:98:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:11 2025 by rpki-client