Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          AvNj75r85OzNdvQFcG50C8AUnMCx4f3qPxSsxQa4rqg=
Subject key identifier:   15:5F:09:F6:B8:98:DB:75:AF:C1:C3:C0:FE:D2:82:A3:AF:05:24:0D
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       019847AD80F43E6CA5204663B1014076F214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          03F0
Signing time:             Sat 26 Jul 2025 17:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:09 +0000
Files and hashes:         1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
                          2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: le+QRP2gf+wmLeOVh6gU7GE5sQF0BhWjQtfBXIw5t2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:80:f4:3e:6c:a5:20:46:63:b1:01:40:76:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Jul 26 17:00:09 2025 GMT
            Not After : Jul 27 17:00:09 2025 GMT
        Subject: CN=155f09f6b898db75afc1c3c0fed282a3af05240d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:8a:e2:a8:3d:70:7f:e9:32:18:7e:40:a8:
                    23:74:51:e4:94:e7:9e:ef:dd:a5:45:8f:d5:00:e7:
                    a9:fe:0b:d5:17:8e:47:22:b2:5a:29:30:86:f5:70:
                    fb:c8:2a:b8:be:34:1b:23:3f:57:fb:a3:94:9a:1f:
                    32:72:54:a0:f5:0a:25:23:d2:23:f6:38:83:af:28:
                    2c:c5:25:5d:8d:51:db:b4:84:50:1a:ea:53:6c:e7:
                    94:88:2f:92:3a:68:1b:d3:7e:bc:97:69:2c:89:d8:
                    95:4a:ad:36:24:8b:1e:bf:99:24:75:ff:e7:41:09:
                    ca:93:2e:e8:7b:31:14:97:e7:b2:68:d7:b6:d2:40:
                    d6:b1:c1:5c:95:13:c3:43:f9:47:3b:44:ff:13:86:
                    e2:c2:19:1a:f2:68:2e:a8:f7:92:50:81:0f:de:15:
                    d7:c6:90:a0:23:56:08:54:03:6b:51:d3:70:a1:5b:
                    31:33:bf:59:ec:1c:49:50:33:6d:a0:f7:7f:ff:5b:
                    f2:67:bf:3b:1c:66:85:61:20:8b:f8:b6:46:df:40:
                    ff:2a:68:11:dd:6b:a7:54:d3:11:e6:6d:f9:7e:b8:
                    e9:f4:3e:be:ef:70:da:a9:12:67:38:d1:4b:ad:7d:
                    0d:bf:b8:34:27:ec:27:e4:30:1f:12:8d:c6:29:76:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5F:09:F6:B8:98:DB:75:AF:C1:C3:C0:FE:D2:82:A3:AF:05:24:0D
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:84:b9:c5:08:8d:23:c1:49:ab:3e:5b:ce:2d:17:cd:7e:
         42:0c:74:8b:12:9c:a9:a4:3a:75:69:29:52:5a:77:d9:46:a9:
         9c:42:5c:82:1a:ff:b6:a4:37:2f:14:88:0b:c5:6f:9b:7e:a7:
         2b:e9:0e:9f:d9:27:3d:ec:98:65:86:06:cc:32:4d:f1:ed:4d:
         de:f7:d0:74:5e:60:61:02:44:c5:0e:02:0c:8a:f2:91:28:08:
         10:41:08:62:e1:25:5f:bb:a7:75:74:e3:eb:f4:77:0c:fb:2d:
         90:75:c9:e7:c7:c1:18:68:2c:93:99:f6:17:b8:3d:41:c0:8c:
         8c:e7:70:a6:0b:e2:a9:e6:07:47:3b:d0:06:74:30:3d:3c:d6:
         f1:12:37:f0:e6:1a:fc:19:75:6b:2c:02:bc:1c:39:c0:5b:93:
         60:29:5d:7a:98:4a:74:5e:23:62:50:f3:4f:45:9b:a0:9c:61:
         2a:0c:c5:ba:14:59:04:e3:6c:ae:6d:04:e2:47:4f:d4:29:c2:
         f6:f9:f4:26:2c:3c:bf:8a:f6:a3:19:13:32:9e:26:d3:91:0a:
         8b:9f:ac:3d:a3:eb:2f:99:06:00:b7:6a:41:e9:c0:8a:9f:81:
         3e:53:fe:f9:ed:87:03:c1:f0:a8:9f:bb:31:8b:0d:48:7d:58:
         b3:be:07:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrYD0PmylIEZjsQFAdvIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmU1MGNjZmNlZjBlODdjYzE5ZjgyY2MwOTJiYjliNzlh
M2UzYWYwHhcNMjUwNzI2MTcwMDA5WhcNMjUwNzI3MTcwMDA5WjAzMTEwLwYDVQQD
EygxNTVmMDlmNmI4OThkYjc1YWZjMWMzYzBmZWQyODJhM2FmMDUyNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q2K4qg9cH/pMhh+QKgjdFHklOee
792lRY/VAOep/gvVF45HIrJaKTCG9XD7yCq4vjQbIz9X+6OUmh8yclSg9QolI9Ij
9jiDrygsxSVdjVHbtIRQGupTbOeUiC+SOmgb0368l2ksidiVSq02JIsev5kkdf/n
QQnKky7oezEUl+eyaNe20kDWscFclRPDQ/lHO0T/E4biwhka8mguqPeSUIEP3hXX
xpCgI1YIVANrUdNwoVsxM79Z7BxJUDNtoPd//1vyZ787HGaFYSCL+LZG30D/KmgR
3WunVNMR5m35frjp9D6+73DaqRJnONFLrX0Nv7g0J+wn5DAfEo3GKXZUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVfCfa4mNt1r8HDwP7SgqOvBSQNMB8GA1UdIwQY
MBaAFFX+UMz87w6HzBn4LMCSu5t5o+OvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMt
YzA3ZTcxNWM4MWM5LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMtYzA3ZTcxNWM4MWM5
LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/CEucUI
jSPBSas+W84tF81+Qgx0ixKcqaQ6dWkpUlp32UapnEJcghr/tqQ3LxSIC8Vvm36n
K+kOn9knPeyYZYYGzDJN8e1N3vfQdF5gYQJExQ4CDIrykSgIEEEIYuElX7undXTj
6/R3DPstkHXJ58fBGGgsk5n2F7g9QcCMjOdwpgviqeYHRzvQBnQwPTzW8RI38OYa
/Bl1aywCvBw5wFuTYCldephKdF4jYlDzT0WboJxhKgzFuhRZBONsrm0E4kdP1CnC
9vn0Jiw8v4r2oxkTMp4m05EKi5+sPaPrL5kGALdqQenAip+BPlP++e2HA8HwqJ+7
MYsNSH1Ys74HFg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:12 2025 by rpki-client