Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File:                     1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier:          EvCjBnkR91jtDrHn/wfWpqZmYl/HYwT59VjkKOjECBM=
Subject key identifier:   D6:86:7D:79:B9:2C:95:DC:87:14:48:9D:77:5C:46:D8:FE:51:E8:82
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       019887A068AA8AD3EDA35FC066CF05635461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number:          1165
Signing time:             Fri 08 Aug 2025 03:01:33 +0000
Manifest this update:     Fri 08 Aug 2025 03:01:33 +0000
Manifest next update:     Sat 09 Aug 2025 03:01:33 +0000
Files and hashes:         1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
                          2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: kvinbHYaK4EbMpEUg6SH0Yfe5euNV00TdTrPxTDY9No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 03:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:a0:68:aa:8a:d3:ed:a3:5f:c0:66:cf:05:63:54:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Aug  8 03:01:33 2025 GMT
            Not After : Aug  9 03:01:33 2025 GMT
        Subject: CN=d6867d79b92c95dc8714489d775c46d8fe51e882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:1d:8f:c9:54:34:ea:9a:37:51:8b:b5:2a:
                    65:c1:d8:bc:6d:c6:19:a6:6a:1c:10:19:5c:27:f5:
                    54:ca:cf:8d:9a:3e:af:f8:a1:fb:58:85:7f:90:cb:
                    37:e5:5f:11:23:b5:96:d3:c5:6d:e1:a0:37:86:73:
                    b6:c9:12:96:12:6e:15:d4:8c:18:03:63:d9:cd:58:
                    54:71:74:52:c2:37:19:a4:dc:d0:0d:85:e6:cd:2d:
                    79:b2:56:94:b5:cb:f9:22:8e:46:d4:b1:50:cd:49:
                    1e:f8:f0:eb:b0:0e:1b:58:53:81:89:78:55:6a:d3:
                    1e:1e:2d:a1:11:b1:df:e7:c3:c7:d7:be:41:fd:fc:
                    e6:4a:49:88:41:89:39:3d:86:6e:22:62:20:ab:57:
                    ba:33:95:e2:2b:4a:3a:81:fe:33:a6:6e:8e:a9:d3:
                    2f:58:33:ec:d0:bd:48:4b:bf:42:a8:34:af:cf:89:
                    a2:e6:7d:75:11:84:b4:de:f4:a4:e1:b2:b6:d7:0b:
                    a3:2d:80:60:8b:ce:46:73:8f:63:07:87:25:db:39:
                    a7:1a:4f:ab:e1:24:fa:c4:83:4d:59:a3:c1:58:d5:
                    a4:b2:5d:3d:f6:ca:a2:61:4a:74:1c:cc:13:b8:44:
                    a1:23:18:d2:fe:fc:96:ee:46:10:f8:6f:5e:2d:90:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:7D:79:B9:2C:95:DC:87:14:48:9D:77:5C:46:D8:FE:51:E8:82
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:94:0a:f0:e9:a7:07:c7:e1:c9:e2:51:14:32:b8:3e:76:
         a0:91:b6:a0:ed:6b:0e:c4:7b:c2:c5:5f:94:51:43:26:35:91:
         9f:66:08:13:5f:9c:f4:45:bb:ec:d5:e4:57:48:1b:c5:3b:b8:
         8f:21:64:11:b2:31:26:6f:e4:0c:12:74:26:29:f2:5d:5f:05:
         b8:ef:2e:bd:37:01:2a:b1:6b:e6:10:ab:1f:35:c7:5d:4f:cb:
         d5:0f:75:59:0f:a0:e1:cd:49:b0:5e:34:0a:c4:13:da:13:d6:
         1a:1d:f3:a2:64:00:29:ef:c2:f1:3e:dd:51:6b:bc:93:50:2c:
         39:6f:1e:52:58:5d:f7:c7:60:f9:9a:b1:ab:13:3e:46:40:fb:
         5d:59:43:01:cb:0c:8c:f8:7a:da:93:ff:78:94:8e:5f:8f:92:
         45:37:ff:db:94:fc:3a:0c:52:6b:3f:6e:be:95:71:d6:ca:75:
         80:10:61:ba:c0:85:b0:80:fb:b9:a5:90:67:2b:17:cd:09:ac:
         7e:72:c5:75:cb:0b:db:5e:61:20:f8:85:5c:66:a3:a2:71:9c:
         d1:c4:92:a0:fa:a2:0f:a3:11:fd:f8:b5:52:20:30:2c:9b:d0:
         80:b8:e7:74:42:7d:e4:37:da:f6:05:c1:85:67:8d:31:93:73:
         bb:8a:9c:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiHoGiqitPto1/AZs8FY1RhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjcwNjZkYTA5YTU2MjI0MjYwZTQ2ZWEyNmRjOWNiMWRi
YThlMzcwHhcNMjUwODA4MDMwMTMzWhcNMjUwODA5MDMwMTMzWjAzMTEwLwYDVQQD
EyhkNjg2N2Q3OWI5MmM5NWRjODcxNDQ4OWQ3NzVjNDZkOGZlNTFlODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQdj8lUNOqaN1GLtSplwdi8bcYZ
pmocEBlcJ/VUys+Nmj6v+KH7WIV/kMs35V8RI7WW08Vt4aA3hnO2yRKWEm4V1IwY
A2PZzVhUcXRSwjcZpNzQDYXmzS15slaUtcv5Io5G1LFQzUke+PDrsA4bWFOBiXhV
atMeHi2hEbHf58PH175B/fzmSkmIQYk5PYZuImIgq1e6M5XiK0o6gf4zpm6OqdMv
WDPs0L1IS79CqDSvz4mi5n11EYS03vSk4bK21wujLYBgi85Gc49jB4cl2zmnGk+r
4ST6xINNWaPBWNWksl099sqiYUp0HMwTuEShIxjS/vyW7kYQ+G9eLZD4vQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNaGfXm5LJXchxRInXdcRtj+UeiCMB8GA1UdIwQY
MBaAFPr3Bm2gmlYiQmDkbqJtycsduo43MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Y0diYUNhVmlKQ1lPUnVvbTNKeXgyNmpqYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5
LWI3NTk4MzEyMjQ1NS8xLzEtdmNHYmFDYVZpSkNZT1J1b20zSnl4MjZqamMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EzLzZkYmMyZi0wZjBiLTRhMmYtYjE0OS1iNzU5ODMxMjI0
NTUvMS8xLXZjR2JhQ2FWaUpDWU9SdW9tM0p5eDI2ampjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8OU
CvDppwfH4cniURQyuD52oJG2oO1rDsR7wsVflFFDJjWRn2YIE1+c9EW77NXkV0gb
xTu4jyFkEbIxJm/kDBJ0JinyXV8FuO8uvTcBKrFr5hCrHzXHXU/L1Q91WQ+g4c1J
sF40CsQT2hPWGh3zomQAKe/C8T7dUWu8k1AsOW8eUlhd98dg+ZqxqxM+RkD7XVlD
AcsMjPh62pP/eJSOX4+SRTf/25T8OgxSaz9uvpVx1sp1gBBhusCFsID7uaWQZysX
zQmsfnLFdcsL215hIPiFXGajonGc0cSSoPqiD6MR/fi1UiAwLJvQgLjndEJ95Dfa
9gXBhWeNMZNzu4qcmw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:47:55 2025 by rpki-client