Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          b7mRgygAbsh/ovYV5XAskgRKN+KmnsxtBhH9vxM8r0A=
Subject key identifier:   34:B5:CD:76:32:39:DD:24:97:04:2C:AD:F4:45:B8:F8:36:FB:49:24
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01987306CC56C26887C596F53AD9EC3C4BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0538
Signing time:             Mon 04 Aug 2025 03:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:21 +0000
Files and hashes:         1: 0YsqmYoX8nSnq9tL_jZR7_IicOU.roa (hash: Ld1DlRt0TARzLlXLVHsaGFQTRwffTa4AKCb432jsq74=)
                          2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=)
                          3: 5aiNMpTbEsFotHPhSom_BLzlcx4.roa (hash: UmVtbJKGVJKhOV0/7a2vDBmEaTfGr1/DLMtgALmVgoc=)
                          4: A3WhCggzu4rYOo1yOfgZK9-xHYQ.roa (hash: 6lM2sKn0Kt/HS6iHxtxrLQeD9LqB5QoOTReZqqvo3Jc=)
                          5: PlUFC6HKWWFjpql9DijziKwkcxw.roa (hash: 4W/hkwQltLoMthbvB9BB52pdcgOpX1UVyOI2+0P/Mmg=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: ZxL8xr3w+YqW187IMpJlc9Rx+yS2k92KXm+xzhPrhqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:cc:56:c2:68:87:c5:96:f5:3a:d9:ec:3c:4b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Aug  4 03:01:21 2025 GMT
            Not After : Aug  5 03:01:21 2025 GMT
        Subject: CN=34b5cd763239dd2497042cadf445b8f836fb4924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ac:e6:79:3f:f2:28:64:46:1b:12:bb:d9:ca:
                    26:8b:73:1c:cc:62:3c:a4:fc:a2:32:5f:d4:7f:b2:
                    a1:59:5d:73:8b:10:ab:26:ba:3b:84:4c:39:0e:88:
                    66:0d:f6:35:37:54:ef:8a:70:e2:09:80:b2:6b:18:
                    74:ae:ca:e2:f6:dc:67:d8:61:46:05:c1:2d:f2:60:
                    e0:d0:50:4e:a1:b4:96:28:13:2a:61:ce:d6:b9:4b:
                    d6:ce:39:2c:21:cb:02:9b:5d:43:3e:f6:7a:96:3d:
                    74:18:c2:58:d4:5d:d7:0b:07:c8:a8:d7:92:78:1f:
                    04:93:eb:25:67:4b:1c:80:56:1b:e6:13:80:c5:e3:
                    f8:a8:9b:a2:a8:98:d0:5e:55:2c:5f:57:c4:3f:44:
                    07:55:67:06:75:54:7e:8c:ca:b9:8e:0c:85:cc:c9:
                    16:82:69:aa:24:5e:a9:a4:00:56:c5:50:7b:d7:05:
                    56:1b:83:bf:4b:43:0c:b6:d5:4b:80:ce:68:fc:a0:
                    22:ec:88:96:5f:28:88:cc:1b:70:52:d1:0b:24:a8:
                    95:d3:df:1f:ea:ac:b4:c0:79:5e:45:c6:cb:5f:a3:
                    c9:70:50:8e:23:5f:43:ed:12:b8:a5:cd:ac:e0:2d:
                    30:04:7e:78:00:dc:57:28:7c:70:f9:52:60:0c:15:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:CD:76:32:39:DD:24:97:04:2C:AD:F4:45:B8:F8:36:FB:49:24
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:06:8d:d6:ad:38:65:fa:85:63:3e:89:65:49:0d:b4:36:
         41:35:5a:83:e5:3e:d2:f7:6d:98:61:35:93:9d:d0:16:5c:bb:
         19:76:a6:96:23:98:cd:44:36:11:92:c7:e1:8b:39:c0:45:5f:
         b0:80:a5:f4:7f:8a:a7:ac:c6:37:d3:8d:eb:b2:96:82:e0:da:
         9d:5b:af:5a:ee:5b:92:ce:2f:5a:f5:6a:91:22:f3:c2:b1:6a:
         c1:08:53:38:d6:46:24:1d:4b:d5:a2:e0:3b:52:72:96:76:db:
         5e:8d:bb:93:34:f2:85:28:d2:53:6a:bf:2b:e1:e9:84:2d:37:
         2f:3b:81:2c:3b:59:00:ac:44:be:a9:07:65:73:32:4b:e9:bd:
         29:6c:15:d7:54:86:80:2a:97:bd:b5:2c:ba:a7:8c:03:d4:a0:
         85:85:68:e1:dd:c2:2d:72:53:59:5f:22:88:6e:8c:d2:d3:42:
         12:2a:b4:ee:7a:11:d6:c1:7b:f7:7e:b2:ed:24:6a:62:28:84:
         8d:a2:54:67:29:b9:09:be:61:aa:6c:64:72:0d:1a:ab:aa:1d:
         29:6a:38:35:be:20:8b:15:4c:26:83:57:ff:9a:d8:10:cc:35:
         a1:6c:42:02:dd:41:32:00:99:d3:51:b5:68:ac:ca:ac:56:0d:
         ea:61:39:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBsxWwmiHxZb1OtnsPEu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm
YmUwOTkwHhcNMjUwODA0MDMwMTIxWhcNMjUwODA1MDMwMTIxWjAzMTEwLwYDVQQD
EygzNGI1Y2Q3NjMyMzlkZDI0OTcwNDJjYWRmNDQ1YjhmODM2ZmI0OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6zmeT/yKGRGGxK72comi3MczGI8
pPyiMl/Uf7KhWV1zixCrJro7hEw5DohmDfY1N1TvinDiCYCyaxh0rsri9txn2GFG
BcEt8mDg0FBOobSWKBMqYc7WuUvWzjksIcsCm11DPvZ6lj10GMJY1F3XCwfIqNeS
eB8Ek+slZ0scgFYb5hOAxeP4qJuiqJjQXlUsX1fEP0QHVWcGdVR+jMq5jgyFzMkW
gmmqJF6ppABWxVB71wVWG4O/S0MMttVLgM5o/KAi7IiWXyiIzBtwUtELJKiV098f
6qy0wHleRcbLX6PJcFCOI19D7RK4pc2s4C0wBH54ANxXKHxw+VJgDBVVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS1zXYyOd0klwQsrfRFuPg2+0kkMB8GA1UdIwQY
MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt
M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl
LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZwGjdat
OGX6hWM+iWVJDbQ2QTVag+U+0vdtmGE1k53QFly7GXamliOYzUQ2EZLH4Ys5wEVf
sICl9H+Kp6zGN9ON67KWguDanVuvWu5bks4vWvVqkSLzwrFqwQhTONZGJB1L1aLg
O1JylnbbXo27kzTyhSjSU2q/K+HphC03LzuBLDtZAKxEvqkHZXMyS+m9KWwV11SG
gCqXvbUsuqeMA9SghYVo4d3CLXJTWV8iiG6M0tNCEiq07noR1sF7936y7SRqYiiE
jaJUZym5Cb5hqmxkcg0aq6odKWo4Nb4gixVMJoNX/5rYEMw1oWxCAt1BMgCZ01G1
aKzKrFYN6mE59g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:24 2025 by rpki-client