Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          dIFFthni6ZK0Ma5Jw1h6skh9g3pmL9CYOjK8Xzqf1cw=
Subject key identifier:   0E:DD:61:4B:8D:DC:E1:82:BE:45:E6:77:DE:9A:E5:32:36:47:30:33
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       0198499C2376348ADB5A2B0B0445A1D46134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1592
Signing time:             Sun 27 Jul 2025 02:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:25 +0000
Files and hashes:         1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: ZVFwFT3zzovfF9fCFTy/zz4E6tR0VSoiGwMcsambku8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:23:76:34:8a:db:5a:2b:0b:04:45:a1:d4:61:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Jul 27 02:00:25 2025 GMT
            Not After : Jul 28 02:00:25 2025 GMT
        Subject: CN=0edd614b8ddce182be45e677de9ae53236473033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:5f:b8:76:e7:37:67:c3:dd:5b:8d:c3:d1:
                    50:36:2b:5b:a4:f1:15:e7:4d:bf:54:49:20:28:b7:
                    9d:2f:2d:cf:d0:a7:9e:13:cd:3f:83:68:15:e9:59:
                    0e:bd:77:14:b8:44:b5:81:fc:6f:1d:7d:44:3c:90:
                    d1:a4:58:b5:12:8e:fc:00:fd:82:9d:31:25:0d:ca:
                    31:80:68:95:81:08:79:9e:2c:bd:e7:82:01:d8:8a:
                    8d:81:73:4c:f8:66:5f:00:cb:6e:b3:28:9c:b1:3b:
                    8d:a2:cf:5a:9a:6d:73:c4:8c:eb:1a:b8:d7:cd:fa:
                    3c:76:5f:95:9a:80:98:d7:20:eb:10:8b:66:3d:91:
                    16:4d:63:fd:1d:ad:1d:ce:ad:5d:5a:d2:0e:04:e8:
                    8b:0e:11:bb:4e:88:bc:58:43:4b:b1:e0:ce:25:5b:
                    64:9b:d2:b0:cb:e4:0d:5b:22:3b:4e:8e:d9:00:ee:
                    d3:49:20:49:cb:a0:28:10:4a:c2:2c:9c:ab:71:e3:
                    a6:d9:6c:6c:94:4b:03:ec:5a:32:03:75:ab:1c:bf:
                    43:08:9e:96:6e:c2:8d:30:71:b8:e7:89:d6:a1:0e:
                    33:52:01:06:d8:57:9a:df:be:a5:a8:0d:8b:f3:71:
                    fc:0b:e9:32:e9:49:6f:39:b8:e5:63:3a:ff:6a:c2:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DD:61:4B:8D:DC:E1:82:BE:45:E6:77:DE:9A:E5:32:36:47:30:33
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:9d:2d:14:37:ad:27:23:92:37:e3:62:25:f2:10:17:f9:
         0c:99:bc:9d:b4:70:3e:73:cf:14:e4:d4:33:04:2e:3d:bd:7a:
         86:3e:e1:be:fc:4c:f3:cd:ec:4e:b4:48:cb:be:06:8b:4c:ce:
         11:6b:c2:b4:69:a5:2a:31:c0:d2:54:53:72:04:3e:08:b7:fa:
         cf:c6:55:b0:af:84:a2:75:d9:5d:ba:d0:55:33:c9:71:75:f0:
         49:41:d5:7a:df:b2:c0:ce:48:3f:d3:bc:7b:30:9d:cd:9e:c7:
         0a:c8:3f:07:b9:38:fa:70:72:0f:f2:e6:8c:7f:be:67:da:c8:
         6f:1e:5c:fa:a0:b7:bf:4b:e0:84:1e:4d:de:e8:60:0f:34:76:
         3a:31:b9:55:47:9f:0a:dd:64:02:40:8f:cc:31:f7:5d:f4:f0:
         fc:5f:d7:b3:6f:72:13:7d:73:c2:41:d5:a0:45:c5:b1:e4:43:
         d3:40:47:94:65:0d:99:28:b0:68:3f:47:98:da:28:05:f1:c6:
         d6:bc:c1:67:47:25:fc:84:a4:1d:23:74:28:c9:9c:1f:07:f8:
         e1:91:e7:02:31:78:ac:0b:f8:1f:25:97:59:df:3c:b0:61:13:
         ed:b9:32:05:54:74:9b:06:02:f4:5a:0b:63:e5:14:13:76:5f:
         78:89:82:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnCN2NIrbWisLBEWh1GE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0
NTc0YzAwHhcNMjUwNzI3MDIwMDI1WhcNMjUwNzI4MDIwMDI1WjAzMTEwLwYDVQQD
EygwZWRkNjE0YjhkZGNlMTgyYmU0NWU2NzdkZTlhZTUzMjM2NDczMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J5fuHbnN2fD3VuNw9FQNitbpPEV
502/VEkgKLedLy3P0KeeE80/g2gV6VkOvXcUuES1gfxvHX1EPJDRpFi1Eo78AP2C
nTElDcoxgGiVgQh5niy954IB2IqNgXNM+GZfAMtusyicsTuNos9amm1zxIzrGrjX
zfo8dl+VmoCY1yDrEItmPZEWTWP9Ha0dzq1dWtIOBOiLDhG7Toi8WENLseDOJVtk
m9Kwy+QNWyI7To7ZAO7TSSBJy6AoEErCLJyrceOm2WxslEsD7FoyA3WrHL9DCJ6W
bsKNMHG454nWoQ4zUgEG2Fea376lqA2L83H8C+ky6UlvObjlYzr/asI1sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7dYUuN3OGCvkXmd96a5TI2RzAzMB8GA1UdIwQY
MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt
Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3
LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj62dLRQ3
rScjkjfjYiXyEBf5DJm8nbRwPnPPFOTUMwQuPb16hj7hvvxM883sTrRIy74Gi0zO
EWvCtGmlKjHA0lRTcgQ+CLf6z8ZVsK+EonXZXbrQVTPJcXXwSUHVet+ywM5IP9O8
ezCdzZ7HCsg/B7k4+nByD/LmjH++Z9rIbx5c+qC3v0vghB5N3uhgDzR2OjG5VUef
Ct1kAkCPzDH3XfTw/F/Xs29yE31zwkHVoEXFseRD00BHlGUNmSiwaD9HmNooBfHG
1rzBZ0cl/ISkHSN0KMmcHwf44ZHnAjF4rAv4HyWXWd88sGET7bkyBVR0mwYC9FoL
Y+UUE3ZfeImCrQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:25 2025 by rpki-client