Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          Vf61WEAmvrX3up8c6HPAKYyZInF7VzkZTW34x23b3HI=
Subject key identifier:   C1:49:A8:50:A6:5E:E4:1F:BF:41:4E:39:C9:CD:6B:BF:3F:C9:72:1E
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       01988C8F54132654E1D14BC8221B4D172405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          0528
Signing time:             Sat 09 Aug 2025 02:01:00 +0000
Manifest this update:     Sat 09 Aug 2025 02:01:00 +0000
Manifest next update:     Sun 10 Aug 2025 02:01:00 +0000
Files and hashes:         1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: Dw82BrAFc3nRggwq5PCZE0Q75RRcpG+YwqhFq0JmUGQ=)
                          2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:54:13:26:54:e1:d1:4b:c8:22:1b:4d:17:24:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Aug  9 02:01:00 2025 GMT
            Not After : Aug 10 02:01:00 2025 GMT
        Subject: CN=c149a850a65ee41fbf414e39c9cd6bbf3fc9721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:39:4a:9f:c4:9b:68:80:6a:08:49:32:c2:
                    f2:94:c2:8c:f5:86:e4:98:31:fe:ee:1c:be:3e:ae:
                    26:91:8f:c0:71:48:71:ff:8a:70:68:2a:35:e0:5e:
                    d0:68:6a:aa:53:64:9a:f9:70:d7:4d:a5:87:48:29:
                    af:71:fa:83:23:63:0c:e8:d9:75:48:cf:4c:dc:f1:
                    b8:95:47:9f:61:a1:48:c5:46:cd:b9:fb:75:f0:95:
                    60:d8:bb:b3:94:44:1d:94:68:2f:76:e8:f9:f2:99:
                    62:61:b1:c2:86:01:57:7d:86:9c:bb:fa:cf:83:93:
                    1c:b3:90:4c:ea:2d:46:92:f1:58:6d:df:3b:0e:30:
                    c5:6c:69:63:aa:65:6e:e2:4a:6b:bb:8d:c6:ee:a7:
                    36:c1:47:b1:12:84:09:d6:ff:4e:70:62:fa:50:06:
                    41:93:ea:e8:b7:08:66:89:2e:92:74:b7:84:c2:8d:
                    d5:27:cb:dd:2e:10:6c:2c:53:ac:35:96:5f:6c:87:
                    cd:bb:9f:a7:a1:93:54:ce:a2:4b:31:60:df:c5:90:
                    70:33:2d:cc:d9:78:d1:22:0f:d4:93:9b:a9:e1:02:
                    67:59:4b:07:4f:a1:f9:47:b4:f1:77:4c:6b:af:62:
                    36:7a:0b:8c:e8:12:b5:2f:b3:41:e9:d8:42:8a:af:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:A8:50:A6:5E:E4:1F:BF:41:4E:39:C9:CD:6B:BF:3F:C9:72:1E
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:ff:67:61:dc:24:99:a1:3a:54:d0:9b:96:a0:ea:41:9c:
         f9:cf:ad:84:ee:ba:47:85:0e:60:1d:52:6c:2a:5b:60:7c:03:
         c0:75:0c:62:00:4d:71:83:21:12:c5:a2:05:a2:a6:b7:ab:7f:
         45:2e:1f:07:59:76:88:38:17:e6:4d:06:c3:8c:b2:93:1b:2c:
         ba:97:67:52:a4:60:1f:15:5e:55:b8:ed:11:3b:23:5d:fe:61:
         fe:b8:35:a7:64:4d:7f:a0:33:b2:42:84:ef:32:ce:24:a3:fb:
         c1:0b:8d:de:f1:5f:c8:65:f1:44:91:e4:ff:ea:f7:9c:91:cf:
         32:57:ff:74:33:70:8e:44:42:0b:5b:59:c7:89:dd:29:de:8f:
         3b:b2:15:7a:f0:07:1e:31:ca:d9:9c:f5:8f:ff:c1:f0:d7:23:
         96:b7:12:61:4c:d1:fa:0e:4b:22:19:9a:1a:e0:46:c8:5a:e6:
         72:27:da:30:63:69:de:5e:fa:ac:e9:b9:32:59:5d:c3:bc:d0:
         77:e7:c2:c9:89:1c:ec:c1:4d:60:7a:db:79:11:09:1f:43:b1:
         17:c5:a1:71:92:2f:8a:03:ee:a3:73:f4:42:3c:bd:61:bf:e7:
         16:fb:6d:72:1b:c7:1f:f8:d9:2a:a1:d8:98:d4:e3:c7:68:c3:
         42:bc:4e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj1QTJlTh0UvIIhtNFyQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBlMmY3MDNmNjk4YjlkY2VhYzYzZjFlODY5MWQ4Nzlj
MGIyYTcwHhcNMjUwODA5MDIwMTAwWhcNMjUwODEwMDIwMTAwWjAzMTEwLwYDVQQD
EyhjMTQ5YTg1MGE2NWVlNDFmYmY0MTRlMzljOWNkNmJiZjNmYzk3MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI85Sp/Em2iAaghJMsLylMKM9Ybk
mDH+7hy+Pq4mkY/AcUhx/4pwaCo14F7QaGqqU2Sa+XDXTaWHSCmvcfqDI2MM6Nl1
SM9M3PG4lUefYaFIxUbNuft18JVg2LuzlEQdlGgvduj58pliYbHChgFXfYacu/rP
g5Mcs5BM6i1GkvFYbd87DjDFbGljqmVu4kpru43G7qc2wUexEoQJ1v9OcGL6UAZB
k+rotwhmiS6SdLeEwo3VJ8vdLhBsLFOsNZZfbIfNu5+noZNUzqJLMWDfxZBwMy3M
2XjRIg/Uk5up4QJnWUsHT6H5R7Txd0xrr2I2eguM6BK1L7NB6dhCiq8oUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFJqFCmXuQfv0FOOcnNa78/yXIeMB8GA1UdIwQY
MBaAFFcw4vcD9pi53OrGPx6Gkdh5wLKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODIt
MTNkZjc1YzBkOWEzLzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODItMTNkZjc1YzBkOWEz
LzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJez/Z2Hc
JJmhOlTQm5ag6kGc+c+thO66R4UOYB1SbCpbYHwDwHUMYgBNcYMhEsWiBaKmt6t/
RS4fB1l2iDgX5k0Gw4yykxssupdnUqRgHxVeVbjtETsjXf5h/rg1p2RNf6AzskKE
7zLOJKP7wQuN3vFfyGXxRJHk/+r3nJHPMlf/dDNwjkRCC1tZx4ndKd6PO7IVevAH
HjHK2Zz1j//B8NcjlrcSYUzR+g5LIhmaGuBGyFrmcifaMGNp3l76rOm5Mlldw7zQ
d+fCyYkc7MFNYHrbeREJH0OxF8WhcZIvigPuo3P0Qjy9Yb/nFvttchvHH/jZKqHY
mNTjx2jDQrxOpg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:46 2025 by rpki-client