Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File:                     rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier:          QrWltOEXtOIQn4AjJJ2G7Vm0xp6HcEbn+7ySfdUMhks=
Subject key identifier:   65:1A:FA:ED:2A:2C:3E:FF:8B:AA:BE:C3:AA:4A:AC:D6:4C:30:67:E6
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer:       /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial:       01987D8BC3EBE55EE0DD337BD6DDEE945784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number:          0E25
Signing time:             Wed 06 Aug 2025 04:02:48 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:48 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:48 +0000
Files and hashes:         1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: JjVZ49TRl8O8gPStaYZywTOG9/CqH77m5hI2hig3BoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:c3:eb:e5:5e:e0:dd:33:7b:d6:dd:ee:94:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
        Validity
            Not Before: Aug  6 04:02:48 2025 GMT
            Not After : Aug  7 04:02:48 2025 GMT
        Subject: CN=651afaed2a2c3eff8baabec3aa4aacd64c3067e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:42:04:03:f2:7b:8a:bb:ff:ea:ce:7a:d1:
                    a6:f1:7b:72:39:0d:0b:d1:ee:36:8a:e4:58:b9:9a:
                    a1:2a:4c:ec:54:7e:8e:0a:aa:93:12:6a:6b:96:43:
                    b6:71:17:c0:6c:cc:7f:da:fa:e0:45:18:43:3f:37:
                    b1:12:46:79:36:52:f4:6f:55:39:5f:92:1b:a5:e1:
                    62:df:8a:52:9c:aa:e7:99:77:12:85:a3:47:d0:ee:
                    20:16:bb:26:00:fc:3c:9b:a2:9e:29:c2:66:b8:27:
                    15:cb:76:de:1d:40:22:25:71:d9:2d:80:64:34:14:
                    ec:98:7a:24:16:97:4c:c8:ab:31:d9:25:89:e2:13:
                    22:9a:86:be:c9:c1:db:5b:6e:13:d2:5f:67:27:b2:
                    58:a6:f6:82:e3:e3:f4:29:26:d9:97:e3:90:52:0e:
                    f1:50:15:5c:de:85:63:11:50:dc:77:70:08:da:a5:
                    12:aa:02:e6:99:db:3c:fb:02:1f:ef:90:67:57:ba:
                    0c:76:bf:d8:74:ac:c7:ba:06:10:90:57:35:94:7b:
                    c4:c2:83:5a:9d:20:d2:00:1c:10:39:7a:36:d1:7c:
                    4a:e4:38:73:5c:cc:89:42:bf:d1:d3:7f:64:aa:a9:
                    ed:31:77:55:7e:01:59:88:db:31:02:97:60:65:9a:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:FA:ED:2A:2C:3E:FF:8B:AA:BE:C3:AA:4A:AC:D6:4C:30:67:E6
            X509v3 Authority Key Identifier:
                keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:07:a3:2f:50:68:4e:0d:8c:bc:2d:9c:67:87:19:a8:dd:
         4a:29:28:f3:2e:4b:8f:95:f9:dc:0a:13:50:e1:9a:87:9a:68:
         a7:99:17:38:2d:92:a7:fc:53:0e:5e:eb:ba:d0:25:32:a3:0e:
         6a:56:8e:43:32:dd:a7:91:13:f9:2d:d5:fe:57:2f:9c:e1:11:
         95:7f:0e:0e:72:a6:6b:6e:08:08:0c:bc:dc:0a:70:21:e3:c8:
         09:d1:2c:36:3d:4f:fe:ea:4c:87:cc:48:09:c6:af:ef:22:db:
         f3:98:a7:b6:f8:53:22:48:65:ad:ba:3c:b7:bd:65:91:ea:7f:
         ee:c9:ca:e2:21:cd:eb:0f:e2:cd:ed:67:43:a3:46:bf:51:8e:
         00:09:c4:d0:50:73:07:72:f6:7b:df:64:47:78:9f:7d:fb:58:
         96:5d:e2:05:3a:5d:39:f6:9e:67:c4:4e:af:68:45:60:68:e6:
         18:70:3d:df:63:3e:e5:a1:8a:a3:0d:f0:27:ea:4b:99:d9:9a:
         bd:dd:b7:2c:6c:b2:44:ae:b1:a3:6a:7c:b4:d3:b8:34:ff:b4:
         f2:87:87:9d:d2:85:43:e1:af:5d:65:71:82:b6:a0:c6:8b:b6:
         5c:ed:e1:d4:89:d8:06:e1:86:2f:21:04:50:16:66:ff:6a:36:
         d5:8f:f5:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i8Pr5V7g3TN71t3ulFeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNTYxMDRjMjg5ZDcxZmQ4M2JhODg3YmVmODA5MTkxNGYz
NjZlMjEwHhcNMjUwODA2MDQwMjQ4WhcNMjUwODA3MDQwMjQ4WjAzMTEwLwYDVQQD
Eyg2NTFhZmFlZDJhMmMzZWZmOGJhYWJlYzNhYTRhYWNkNjRjMzA2N2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDxCBAPye4q7/+rOetGm8XtyOQ0L
0e42iuRYuZqhKkzsVH6OCqqTEmprlkO2cRfAbMx/2vrgRRhDPzexEkZ5NlL0b1U5
X5IbpeFi34pSnKrnmXcShaNH0O4gFrsmAPw8m6KeKcJmuCcVy3beHUAiJXHZLYBk
NBTsmHokFpdMyKsx2SWJ4hMimoa+ycHbW24T0l9nJ7JYpvaC4+P0KSbZl+OQUg7x
UBVc3oVjEVDcd3AI2qUSqgLmmds8+wIf75BnV7oMdr/YdKzHugYQkFc1lHvEwoNa
nSDSABwQOXo20XxK5DhzXMyJQr/R039kqqntMXdVfgFZiNsxApdgZZoz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUa+u0qLD7/i6q+w6pKrNZMMGfmMB8GA1UdIwQY
MBaAFK1WEEwonXH9g7qIe++AkZFPNm4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODkt
Y2RhMDQ5YjE5MTQzLzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODktY2RhMDQ5YjE5MTQz
LzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP0Hoy9Q
aE4NjLwtnGeHGajdSiko8y5Lj5X53AoTUOGah5pop5kXOC2Sp/xTDl7rutAlMqMO
alaOQzLdp5ET+S3V/lcvnOERlX8ODnKma24ICAy83ApwIePICdEsNj1P/upMh8xI
Ccav7yLb85intvhTIkhlrbo8t71lkep/7snK4iHN6w/ize1nQ6NGv1GOAAnE0FBz
B3L2e99kR3iffftYll3iBTpdOfaeZ8ROr2hFYGjmGHA932M+5aGKow3wJ+pLmdma
vd23LGyyRK6xo2p8tNO4NP+08oeHndKFQ+GvXWVxgragxou2XO3h1InYBuGGLyEE
UBZm/2o21Y/1IQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:17 2025 by rpki-client