Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          BV/XCrHzEYUzzHW/JKiGVeD08K1/aT5ct9cjamSPA38=
Subject key identifier:   06:25:F4:95:BC:B7:46:56:08:6E:01:17:23:70:AF:6D:6A:9F:F1:AF
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       019883F9DD18B9461288264F402AAF5B7102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          0952
Signing time:             Thu 07 Aug 2025 10:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 10:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 10:00:46 +0000
Files and hashes:         1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: UDy3QLy/2tRtPiZHV1dKoJITWlEWf6YR0f0dGQ5u6Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:f9:dd:18:b9:46:12:88:26:4f:40:2a:af:5b:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Aug  7 10:00:46 2025 GMT
            Not After : Aug  8 10:00:46 2025 GMT
        Subject: CN=0625f495bcb74656086e01172370af6d6a9ff1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:be:e2:49:2d:7c:97:38:8a:92:4e:94:e7:
                    e1:04:bb:6e:72:11:3f:1d:89:82:dd:6f:4f:dd:74:
                    2a:c3:95:68:9d:90:da:9e:b4:d1:e0:db:d6:e6:5a:
                    c7:a4:04:40:99:ea:1e:d4:ad:38:c2:85:32:99:12:
                    f1:7b:e4:11:49:19:5e:3f:83:e5:de:2d:60:51:57:
                    43:5c:e7:80:00:ee:76:1f:a3:d2:fd:33:8d:8d:f3:
                    a0:5b:f1:c7:04:94:c3:b7:97:b4:19:c1:1b:73:4b:
                    90:0e:35:03:54:33:e0:4b:a0:6d:8a:18:52:ab:3d:
                    0b:77:1d:b8:1e:8c:3a:60:bb:8d:9c:e7:55:65:8b:
                    80:d4:21:03:41:ff:a8:c3:a5:79:d8:74:ec:5c:b4:
                    95:b2:20:91:c5:33:4a:58:e6:12:17:56:23:f5:71:
                    86:de:2e:12:23:05:57:ab:a7:d6:f2:7d:83:e1:21:
                    32:84:77:5e:b7:e4:18:32:47:91:95:d2:51:3d:88:
                    0b:2e:48:62:7d:f6:37:7e:38:eb:84:07:fc:6e:a3:
                    e0:bf:69:fa:54:7f:22:01:4b:10:5a:fe:7d:fc:8e:
                    b5:55:f8:c6:8f:fa:d6:ce:42:c8:e9:b1:5b:f0:1c:
                    8e:bf:7e:43:7c:ad:f5:40:6d:61:ef:25:02:06:40:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:F4:95:BC:B7:46:56:08:6E:01:17:23:70:AF:6D:6A:9F:F1:AF
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:e1:0f:bb:7c:08:d4:ba:76:7b:4d:17:9b:4a:9f:3c:db:
         f9:64:21:5a:60:4b:55:9e:f2:4b:8c:d6:8d:44:4d:41:24:f0:
         37:f6:09:43:e8:58:43:33:28:a9:51:99:8d:c6:e9:ee:de:e3:
         9d:9d:54:d0:b2:e2:48:81:b0:9c:cb:f0:af:aa:0f:b7:6a:06:
         24:30:21:47:e7:82:c7:4a:9c:7c:43:0a:cc:1b:2a:35:fd:eb:
         17:29:ec:af:1f:c6:56:6c:24:ef:a9:10:a2:75:cf:b8:40:34:
         0c:99:75:e0:e2:8c:a6:0c:43:5f:b8:e1:60:ec:1c:0f:7e:c7:
         40:7c:ef:d8:d4:5e:90:a0:27:6e:45:27:45:98:ae:e0:64:1a:
         32:02:91:e6:2c:9b:e3:bf:6b:3e:d9:27:ad:6d:0b:4d:45:3f:
         d9:f2:f7:2b:c9:6d:e4:e8:85:89:ad:87:bc:16:2b:a0:b9:55:
         d8:25:bc:10:7c:9e:e5:e5:f7:52:90:70:2f:ed:3a:48:91:95:
         80:f3:a3:62:0a:44:30:59:6b:af:63:38:a3:07:01:c8:b0:7c:
         55:27:c5:1a:4a:91:b5:22:7a:a4:30:d3:c3:7e:0c:c2:89:62:
         03:67:e3:33:bc:ec:d0:de:e7:0d:43:7a:d9:90:c0:d9:19:7c:
         4b:b9:19:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiD+d0YuUYSiCZPQCqvW3ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0
OTNiZTUwHhcNMjUwODA3MTAwMDQ2WhcNMjUwODA4MTAwMDQ2WjAzMTEwLwYDVQQD
EygwNjI1ZjQ5NWJjYjc0NjU2MDg2ZTAxMTcyMzcwYWY2ZDZhOWZmMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhC+4kktfJc4ipJOlOfhBLtuchE/
HYmC3W9P3XQqw5VonZDanrTR4NvW5lrHpARAmeoe1K04woUymRLxe+QRSRleP4Pl
3i1gUVdDXOeAAO52H6PS/TONjfOgW/HHBJTDt5e0GcEbc0uQDjUDVDPgS6BtihhS
qz0Ldx24How6YLuNnOdVZYuA1CEDQf+ow6V52HTsXLSVsiCRxTNKWOYSF1Yj9XGG
3i4SIwVXq6fW8n2D4SEyhHdet+QYMkeRldJRPYgLLkhiffY3fjjrhAf8bqPgv2n6
VH8iAUsQWv59/I61VfjGj/rWzkLI6bFb8ByOv35DfK31QG1h7yUCBkB+0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYl9JW8t0ZWCG4BFyNwr21qn/GvMB8GA1UdIwQY
MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt
MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3
LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBXhD7t8
CNS6dntNF5tKnzzb+WQhWmBLVZ7yS4zWjURNQSTwN/YJQ+hYQzMoqVGZjcbp7t7j
nZ1U0LLiSIGwnMvwr6oPt2oGJDAhR+eCx0qcfEMKzBsqNf3rFynsrx/GVmwk76kQ
onXPuEA0DJl14OKMpgxDX7jhYOwcD37HQHzv2NRekKAnbkUnRZiu4GQaMgKR5iyb
479rPtknrW0LTUU/2fL3K8lt5OiFia2HvBYroLlV2CW8EHye5eX3UpBwL+06SJGV
gPOjYgpEMFlrr2M4owcByLB8VSfFGkqRtSJ6pDDTw34MwoliA2fjM7zs0N7nDUN6
2ZDA2Rl8S7kZyA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:39:06 2025 by rpki-client