Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          HaiF25DrjV13zy9jPfvlpXhLDRJTxR01GnMl10ANQOs=
Subject key identifier:   77:A5:D4:BD:10:60:AA:DA:D8:EC:35:5D:12:FC:28:29:A2:CE:59:F8
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       01987D8A90C551E7C72802800059B4B73CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          0E46
Signing time:             Wed 06 Aug 2025 04:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:29 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: Z7745r0FfvzwJXb5caWey6L8mRkhhHcNnBWmN3f4V4c=)
                          2: hLQXaatH7tOfK30W86b9zuTHKXk.roa (hash: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:90:c5:51:e7:c7:28:02:80:00:59:b4:b7:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Aug  6 04:01:29 2025 GMT
            Not After : Aug  7 04:01:29 2025 GMT
        Subject: CN=77a5d4bd1060aadad8ec355d12fc2829a2ce59f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:4e:71:db:9c:a5:e6:fe:3b:89:7c:0e:10:
                    e5:93:ae:c7:ef:dd:dc:96:bc:73:6c:64:a7:b7:69:
                    3c:4c:16:03:f5:2a:df:dd:10:07:57:35:be:9d:fb:
                    63:24:e7:be:86:59:c3:2e:b2:d6:c2:ac:d2:1d:d7:
                    2f:0b:f3:b1:50:b1:e5:90:f8:b5:d1:a0:44:d2:f5:
                    12:32:91:f6:d8:5c:06:a7:5e:58:24:0e:e0:bd:e0:
                    5f:e0:a7:26:34:21:95:18:82:60:74:b3:ed:de:2d:
                    08:2c:ec:50:57:d2:4b:d6:97:e7:f4:67:35:07:c3:
                    21:c1:7a:61:1b:d2:79:2b:e2:05:f2:e1:3e:33:27:
                    67:70:3c:e2:45:9b:8f:de:eb:cc:64:eb:bb:1c:72:
                    a5:7d:1f:e9:b2:ff:5e:a1:33:ab:ee:70:8e:98:9f:
                    82:ac:37:82:80:5e:28:63:1c:dd:6c:00:36:c5:32:
                    f3:fd:2b:81:fe:1a:54:65:9b:ba:d8:fa:41:f2:bc:
                    da:1e:1f:6d:e5:25:83:36:f4:61:97:1a:27:7e:f8:
                    73:0f:b3:07:f3:bd:ab:6e:98:ca:aa:40:b5:72:f0:
                    6a:e5:d7:49:2a:4a:d1:62:4a:70:b2:5f:f9:4c:27:
                    fc:b5:b8:71:83:a4:4a:08:c1:a7:53:32:5c:02:2d:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:D4:BD:10:60:AA:DA:D8:EC:35:5D:12:FC:28:29:A2:CE:59:F8
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:73:a5:dd:0a:93:09:1f:fb:d7:df:17:97:fb:6c:cf:51:
         c0:28:8e:df:66:dc:bd:c1:ac:ca:e7:32:5f:f7:a5:97:88:44:
         a4:e7:80:af:ba:64:e5:a3:ae:64:76:c3:ef:a8:81:1f:35:f2:
         bc:9d:ae:02:e4:6d:a5:ba:fd:90:e5:e8:09:63:08:86:35:e2:
         97:02:b6:7f:af:7d:e6:f8:5d:15:31:a1:22:1f:22:68:ee:5b:
         d8:44:ae:c1:e2:9f:24:ca:a5:32:40:0c:62:9b:b6:d9:fb:0b:
         e4:d5:68:de:47:28:4f:d1:da:61:3f:c1:2f:d6:08:bf:18:5e:
         00:17:7f:8b:5c:92:aa:93:a2:c8:79:6e:cb:70:62:5c:4f:e8:
         8a:37:c3:ae:56:1b:e1:a0:3f:ec:bc:50:2c:79:c7:f3:27:bd:
         ab:f6:bd:bc:fa:28:ad:56:33:5b:83:06:9e:49:80:10:8e:9e:
         c7:c6:19:33:b4:9c:35:59:41:c6:5f:25:5d:fc:7e:c6:cd:60:
         0d:b8:67:b2:b6:8f:18:3d:d2:85:19:c5:e8:d9:c1:04:9a:d1:
         3c:de:4e:bc:c9:c6:e4:65:01:07:21:2a:01:ba:22:28:fa:81:
         be:ad:3c:a5:cd:ec:6c:92:77:98:4c:78:cc:d6:f5:b6:32:a0:
         f2:18:85:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ipDFUefHKAKAAFm0tzz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0
NGExOWYwHhcNMjUwODA2MDQwMTI5WhcNMjUwODA3MDQwMTI5WjAzMTEwLwYDVQQD
Eyg3N2E1ZDRiZDEwNjBhYWRhZDhlYzM1NWQxMmZjMjgyOWEyY2U1OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTVOcducpeb+O4l8DhDlk67H793c
lrxzbGSnt2k8TBYD9Srf3RAHVzW+nftjJOe+hlnDLrLWwqzSHdcvC/OxULHlkPi1
0aBE0vUSMpH22FwGp15YJA7gveBf4KcmNCGVGIJgdLPt3i0ILOxQV9JL1pfn9Gc1
B8MhwXphG9J5K+IF8uE+MydncDziRZuP3uvMZOu7HHKlfR/psv9eoTOr7nCOmJ+C
rDeCgF4oYxzdbAA2xTLz/SuB/hpUZZu62PpB8rzaHh9t5SWDNvRhlxonfvhzD7MH
872rbpjKqkC1cvBq5ddJKkrRYkpwsl/5TCf8tbhxg6RKCMGnUzJcAi0hLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHel1L0QYKra2Ow1XRL8KCmizln4MB8GA1UdIwQY
MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt
ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi
LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHJzpd0K
kwkf+9ffF5f7bM9RwCiO32bcvcGsyucyX/ell4hEpOeAr7pk5aOuZHbD76iBHzXy
vJ2uAuRtpbr9kOXoCWMIhjXilwK2f6995vhdFTGhIh8iaO5b2ESuweKfJMqlMkAM
Ypu22fsL5NVo3kcoT9HaYT/BL9YIvxheABd/i1ySqpOiyHluy3BiXE/oijfDrlYb
4aA/7LxQLHnH8ye9q/a9vPoorVYzW4MGnkmAEI6ex8YZM7ScNVlBxl8lXfx+xs1g
DbhnsraPGD3ShRnF6NnBBJrRPN5OvMnG5GUBByEqAboiKPqBvq08pc3sbJJ3mEx4
zNb1tjKg8hiFdQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:01 2025 by rpki-client