Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File:                     runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier:          N995WesLbMlIKA8Wk9oVGlMalQCK9CArZUhStL+VnL8=
Subject key identifier:   FB:10:9A:FE:E0:6F:66:19:DD:3D:60:C7:8C:E6:F5:51:B6:0E:DE:28
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer:       /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial:       019880C25448651E54903BDDFCDE3CA049FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 19:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:15 +0000
Files and hashes:         1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
                          2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: dMHAmnWjc/O6zlZx1e1SKcCXTJN8/ytHwBH4cSqSKkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:54:48:65:1e:54:90:3b:dd:fc:de:3c:a0:49:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
        Validity
            Not Before: Aug  6 19:01:15 2025 GMT
            Not After : Aug  7 19:01:15 2025 GMT
        Subject: CN=fb109afee06f6619dd3d60c78ce6f551b60ede28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:f9:65:cd:7f:52:c4:23:ae:da:a7:f2:7c:
                    0f:22:0d:78:06:5b:49:1b:1e:52:f0:6b:ba:fd:09:
                    6d:d6:2f:ba:8a:16:31:d8:ba:60:51:81:9a:3a:15:
                    4a:8d:e6:d8:10:cf:29:bf:2e:bb:35:f5:ef:52:02:
                    d4:a5:18:9d:ff:9d:a2:a4:db:40:88:2a:27:9e:85:
                    04:9a:4d:e0:fb:03:2d:fc:8f:4c:9f:dd:a5:08:6e:
                    45:af:09:54:e7:44:71:7f:7b:6b:a2:cd:6d:7f:df:
                    2b:92:49:fc:59:e2:8c:f7:b1:c8:de:79:73:08:8b:
                    99:4c:71:2e:96:7d:83:39:ca:94:c0:34:f3:00:64:
                    99:eb:a2:b4:27:df:f5:bf:0e:67:a2:85:29:34:19:
                    d1:ad:1f:b3:20:06:f1:32:3c:20:c3:61:d6:98:6f:
                    83:76:04:35:86:f1:08:16:e7:5c:6d:df:1a:24:6c:
                    c9:bf:78:3b:cb:26:b8:15:d6:a9:e5:2f:af:c8:05:
                    ad:0c:d9:59:01:ed:0d:81:c0:70:c5:ac:e2:10:0c:
                    12:a2:10:00:a1:12:0b:d2:3e:e6:c8:4b:e3:5b:08:
                    ce:8d:46:03:cf:c3:23:0c:4e:24:fc:ae:31:e5:a6:
                    d6:e0:6d:a9:7b:2a:ee:ec:bd:9b:66:c6:82:b5:54:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:9A:FE:E0:6F:66:19:DD:3D:60:C7:8C:E6:F5:51:B6:0E:DE:28
            X509v3 Authority Key Identifier:
                keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:90:8c:5e:2a:13:9d:d9:c3:0d:c8:3e:bb:32:59:3f:79:
         1d:93:ae:1e:cf:b6:cb:30:a0:3b:06:87:51:d2:e7:0f:b7:c6:
         30:df:23:4a:f9:2f:3c:57:6f:af:ec:be:27:ab:dc:1c:13:a4:
         fc:49:e6:57:a4:b8:75:b0:fb:47:f3:bf:bc:96:3d:35:61:73:
         85:ee:78:39:15:32:e0:55:89:e2:12:73:5c:62:6c:ca:db:39:
         96:3d:8e:0a:e4:cc:b9:5b:cd:55:f8:da:4c:dd:2e:8c:ff:db:
         86:de:70:1a:68:4b:cc:b2:10:a6:8d:d9:0e:e6:be:71:3a:be:
         4b:b6:b6:42:f2:82:fb:69:5b:be:20:20:46:7f:1b:fe:36:43:
         ad:f1:fb:ea:ad:9b:90:53:17:94:b9:8c:c6:59:0d:8c:9c:c8:
         46:74:4c:ca:56:3a:2c:1c:97:f9:ca:37:a3:59:e8:8b:37:b1:
         bd:61:73:1c:3c:8f:3e:53:fe:84:71:64:74:26:22:f5:98:d8:
         95:ed:13:e6:cc:66:ca:96:ab:96:25:68:01:5d:cb:d7:68:f0:
         3a:d6:8a:55:2a:2e:a8:64:05:8b:0d:4b:3e:d1:68:5e:ea:ff:
         b3:1b:4e:21:83:40:79:0c:24:6c:de:d1:aa:c3:6e:e9:88:3f:
         ea:7a:d4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwlRIZR5UkDvd/N48oEn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl
ZjcwZTcwHhcNMjUwODA2MTkwMTE1WhcNMjUwODA3MTkwMTE1WjAzMTEwLwYDVQQD
EyhmYjEwOWFmZWUwNmY2NjE5ZGQzZDYwYzc4Y2U2ZjU1MWI2MGVkZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDP5Zc1/UsQjrtqn8nwPIg14BltJ
Gx5S8Gu6/Qlt1i+6ihYx2LpgUYGaOhVKjebYEM8pvy67NfXvUgLUpRid/52ipNtA
iConnoUEmk3g+wMt/I9Mn92lCG5FrwlU50Rxf3tros1tf98rkkn8WeKM97HI3nlz
CIuZTHEuln2DOcqUwDTzAGSZ66K0J9/1vw5nooUpNBnRrR+zIAbxMjwgw2HWmG+D
dgQ1hvEIFudcbd8aJGzJv3g7yya4Fdap5S+vyAWtDNlZAe0NgcBwxaziEAwSohAA
oRIL0j7myEvjWwjOjUYDz8MjDE4k/K4x5abW4G2peyru7L2bZsaCtVQFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsQmv7gb2YZ3T1gx4zm9VG2Dt4oMB8GA1UdIwQY
MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct
MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm
LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPWQjF4q
E53Zww3IPrsyWT95HZOuHs+2yzCgOwaHUdLnD7fGMN8jSvkvPFdvr+y+J6vcHBOk
/EnmV6S4dbD7R/O/vJY9NWFzhe54ORUy4FWJ4hJzXGJsyts5lj2OCuTMuVvNVfja
TN0ujP/bht5wGmhLzLIQpo3ZDua+cTq+S7a2QvKC+2lbviAgRn8b/jZDrfH76q2b
kFMXlLmMxlkNjJzIRnRMylY6LByX+co3o1noizexvWFzHDyPPlP+hHFkdCYi9ZjY
le0T5sxmyparliVoAV3L12jwOtaKVSouqGQFiw1LPtFoXur/sxtOIYNAeQwkbN7R
qsNu6Yg/6nrUrw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:37:19 2025 by rpki-client