Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          go7TJscDr0j1i0PCYVuXqfgZqsDPOlJV7IjX2aKg+3s=
Subject key identifier:   61:90:C1:30:D2:1C:52:67:78:7C:03:3D:DF:DE:AC:C7:1C:93:BC:C7
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       0198745069E4B72A9948781312ADAAFE2180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          09BA
Signing time:             Mon 04 Aug 2025 09:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:23 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: g9O/VIdlm1c/V5BAHgosY73p7QGrK7Mh1/2EvjJ/GO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:69:e4:b7:2a:99:48:78:13:12:ad:aa:fe:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Aug  4 09:01:23 2025 GMT
            Not After : Aug  5 09:01:23 2025 GMT
        Subject: CN=6190c130d21c5267787c033ddfdeacc71c93bcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:ce:41:15:59:22:52:fc:72:7a:b4:08:e6:
                    a3:d6:ef:63:c6:53:5d:db:c9:a2:cc:23:cb:b2:27:
                    e0:ca:32:01:9d:6f:d0:de:e7:89:d2:32:06:36:b8:
                    ff:ff:46:69:36:92:7b:10:11:bc:d1:65:72:dd:f6:
                    ef:78:5d:db:7f:e5:9c:7d:dd:63:03:1c:c6:6e:fd:
                    38:e9:a1:63:6a:c5:f8:ae:17:d8:b7:fa:0c:57:87:
                    73:9b:c3:82:a3:47:6f:6d:d2:3e:52:b7:28:81:db:
                    80:7a:31:4b:43:99:8c:a7:df:eb:95:f5:b5:11:c9:
                    71:4b:6b:72:c2:87:85:85:f7:77:b3:57:38:ef:df:
                    5f:65:0f:1b:86:a6:3b:2e:83:57:35:49:6e:23:af:
                    35:fd:5c:32:05:28:1c:28:81:6d:1f:e9:04:52:ae:
                    1a:fe:61:dc:80:b4:b6:ef:b5:64:86:09:fc:93:da:
                    05:3e:26:ed:70:b6:ff:84:9a:f2:cd:6f:5c:b8:13:
                    39:26:2f:1f:27:20:a1:08:0c:8c:50:8c:6a:b5:5f:
                    25:30:cd:8c:87:0d:4c:eb:e3:9e:8e:a6:9f:b0:37:
                    77:6b:73:04:85:ca:ce:5a:d5:90:1c:b6:14:3b:41:
                    5e:62:6e:e0:71:da:d2:9a:05:13:69:36:6d:a3:b7:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:C1:30:D2:1C:52:67:78:7C:03:3D:DF:DE:AC:C7:1C:93:BC:C7
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:db:c0:62:da:3a:46:71:32:d0:bf:ef:ef:c8:38:cc:bd:
         23:25:25:fd:f4:49:b5:00:11:b6:97:cd:c7:db:30:90:c9:4e:
         59:ee:ec:a0:61:23:e6:c8:3e:25:a9:4f:ea:4c:b3:9e:1a:11:
         ad:75:fc:fe:c4:ba:04:e6:17:47:c2:f7:d2:85:93:7f:8b:5d:
         77:2b:2e:61:5d:c9:a1:16:43:46:48:b6:6b:e7:5a:ab:72:0d:
         37:c1:86:14:64:61:a0:79:b3:19:73:3d:0b:81:d0:b3:69:13:
         ed:ff:42:87:90:c6:fb:f3:6f:d7:7a:39:9c:7b:8c:4d:6d:e6:
         0d:5f:30:29:73:3e:97:b3:b9:4b:04:79:e7:32:1b:96:32:d9:
         17:ee:bf:2e:94:37:ed:31:a4:3b:3b:f0:06:79:e9:d4:0c:c9:
         7e:c3:88:58:5e:21:59:c7:7a:25:a7:04:3b:67:a2:c1:6b:bc:
         67:2b:0c:98:97:a9:d3:dd:a8:43:50:e7:b5:6c:cf:5e:7c:21:
         21:52:df:6c:3c:d2:89:32:f5:3f:17:b4:e1:53:95:ba:cc:9f:
         d3:16:7b:67:6b:bc:ea:b6:9d:d1:b4:8f:c6:a3:76:f6:3b:b4:
         be:c9:4e:1c:10:3b:b6:c3:17:c8:08:17:f8:2e:31:89:60:e0:
         63:02:c7:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGnktyqZSHgTEq2q/iGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw
NGIwMWYwHhcNMjUwODA0MDkwMTIzWhcNMjUwODA1MDkwMTIzWjAzMTEwLwYDVQQD
Eyg2MTkwYzEzMGQyMWM1MjY3Nzg3YzAzM2RkZmRlYWNjNzFjOTNiY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iTOQRVZIlL8cnq0COaj1u9jxlNd
28mizCPLsifgyjIBnW/Q3ueJ0jIGNrj//0ZpNpJ7EBG80WVy3fbveF3bf+Wcfd1j
AxzGbv046aFjasX4rhfYt/oMV4dzm8OCo0dvbdI+UrcogduAejFLQ5mMp9/rlfW1
EclxS2tywoeFhfd3s1c4799fZQ8bhqY7LoNXNUluI681/VwyBSgcKIFtH+kEUq4a
/mHcgLS277Vkhgn8k9oFPibtcLb/hJryzW9cuBM5Ji8fJyChCAyMUIxqtV8lMM2M
hw1M6+OejqafsDd3a3MEhcrOWtWQHLYUO0FeYm7gcdrSmgUTaTZto7cH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGQwTDSHFJneHwDPd/erMcck7zHMB8GA1UdIwQY
MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt
ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm
LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjjbwGLa
OkZxMtC/7+/IOMy9IyUl/fRJtQARtpfNx9swkMlOWe7soGEj5sg+JalP6kyznhoR
rXX8/sS6BOYXR8L30oWTf4tddysuYV3JoRZDRki2a+daq3INN8GGFGRhoHmzGXM9
C4HQs2kT7f9Ch5DG+/Nv13o5nHuMTW3mDV8wKXM+l7O5SwR55zIbljLZF+6/LpQ3
7TGkOzvwBnnp1AzJfsOIWF4hWcd6JacEO2eiwWu8ZysMmJep092oQ1DntWzPXnwh
IVLfbDzSiTL1Pxe04VOVusyf0xZ7Z2u86rad0bSPxqN29ju0vslOHBA7tsMXyAgX
+C4xiWDgYwLHOg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:00 2025 by rpki-client