Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          eEFpiGe6usjOYvM6YVKzdlg5M61roqd99yMkVp0+Ins=
Subject key identifier:   DB:A8:1A:93:BE:70:79:61:53:1A:1C:75:B7:9E:B9:F4:FE:2B:41:45
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       019849658E1AD961C764E03E5E0DCCD44CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 01:00:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:48 +0000
Files and hashes:         1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: 1Z9erZkpQ+N3MmQ0M4k6E6dSmZG6bVI2ldtEaO8IXpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:8e:1a:d9:61:c7:64:e0:3e:5e:0d:cc:d4:4c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Jul 27 01:00:48 2025 GMT
            Not After : Jul 28 01:00:48 2025 GMT
        Subject: CN=dba81a93be707961531a1c75b79eb9f4fe2b4145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:83:a1:78:71:2f:2a:78:b1:88:77:08:a3:
                    18:7c:d7:92:7b:0b:62:46:3f:f4:19:6a:4a:e4:4b:
                    0d:b8:b1:0c:92:19:5a:8d:15:39:9e:3d:05:3e:39:
                    ef:bc:ef:a1:5b:30:69:0e:ab:5b:1e:e1:c4:c9:d1:
                    e9:41:1f:d5:58:4c:d4:7c:53:06:7b:36:8a:3c:05:
                    77:3d:f1:8d:ad:db:d8:6b:5e:a5:18:28:86:53:83:
                    6f:81:79:57:b8:b8:be:db:b3:55:6a:22:2c:57:61:
                    c7:5d:5f:49:8d:b8:f0:2a:e4:9a:3b:25:d9:ba:57:
                    c7:ed:41:a5:a8:13:b0:14:96:37:e1:30:d4:19:6d:
                    e4:45:c5:52:91:58:e3:85:1d:a7:a6:42:e3:ff:73:
                    b2:19:cf:79:24:cc:4d:25:30:9f:46:66:1c:f3:f7:
                    26:c6:06:6d:47:b3:c6:af:b8:86:93:82:6e:e6:2b:
                    87:f6:ef:c8:92:f3:9d:e2:ea:51:40:ac:61:32:16:
                    90:2b:86:17:e5:23:02:8e:c3:e6:1d:aa:90:51:93:
                    0b:86:53:59:c8:04:36:9f:e7:94:16:e9:f9:ea:1d:
                    5f:25:23:27:84:f1:a9:1b:af:15:70:be:8e:46:7a:
                    14:95:76:57:6d:ec:4b:58:14:c2:1f:96:e6:d7:e4:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A8:1A:93:BE:70:79:61:53:1A:1C:75:B7:9E:B9:F4:FE:2B:41:45
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:16:6f:fa:26:eb:e3:b4:83:17:56:fe:9f:06:96:0a:20:81:
         52:6f:68:15:05:fa:7b:b7:56:6d:57:e2:77:37:fb:b4:2a:a8:
         f6:80:07:00:a2:df:86:a0:c2:a9:58:71:b6:4c:63:3f:d6:ea:
         27:4c:06:b8:dd:36:ce:6b:76:fb:11:b7:d5:c8:72:f3:fa:7d:
         2f:b0:21:32:64:de:5e:71:68:14:09:85:f7:91:a0:3b:9f:99:
         63:e6:6c:9c:0a:af:70:d2:21:79:5e:be:c3:3c:3e:11:1e:e2:
         83:da:ad:25:18:32:37:6f:d6:ba:7e:9f:ad:3f:8a:11:22:9e:
         c4:74:32:ee:1a:0b:ff:16:b0:c0:2b:ad:f8:ff:2b:17:fd:e9:
         f5:00:88:9d:db:17:68:98:f1:04:3b:39:7c:9a:9a:80:39:fc:
         65:f3:83:ca:2a:22:8b:6f:66:72:c0:ed:b9:3e:cc:b3:d0:f9:
         58:f6:dc:ae:41:5e:7e:e6:a3:c4:f1:19:a7:88:0e:8d:ff:d5:
         f8:5b:01:e2:f9:21:84:c2:f8:e0:eb:1a:86:31:0a:ba:c6:be:
         ec:26:e6:22:0a:32:37:ba:40:84:df:7b:97:f0:86:8e:bd:2e:
         f8:31:bb:a5:c3:de:a2:08:fd:0d:98:88:b5:34:53:f2:c3:89:
         08:0c:4c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZY4a2WHHZOA+Xg3M1EytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4
YjQ3N2YwHhcNMjUwNzI3MDEwMDQ4WhcNMjUwNzI4MDEwMDQ4WjAzMTEwLwYDVQQD
EyhkYmE4MWE5M2JlNzA3OTYxNTMxYTFjNzViNzllYjlmNGZlMmI0MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VSDoXhxLyp4sYh3CKMYfNeSewti
Rj/0GWpK5EsNuLEMkhlajRU5nj0FPjnvvO+hWzBpDqtbHuHEydHpQR/VWEzUfFMG
ezaKPAV3PfGNrdvYa16lGCiGU4NvgXlXuLi+27NVaiIsV2HHXV9JjbjwKuSaOyXZ
ulfH7UGlqBOwFJY34TDUGW3kRcVSkVjjhR2npkLj/3OyGc95JMxNJTCfRmYc8/cm
xgZtR7PGr7iGk4Ju5iuH9u/IkvOd4upRQKxhMhaQK4YX5SMCjsPmHaqQUZMLhlNZ
yAQ2n+eUFun56h1fJSMnhPGpG68VcL6ORnoUlXZXbexLWBTCH5bm1+R5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuoGpO+cHlhUxocdbeeufT+K0FFMB8GA1UdIwQY
MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt
NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3
LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxZv+ibr
47SDF1b+nwaWCiCBUm9oFQX6e7dWbVfidzf7tCqo9oAHAKLfhqDCqVhxtkxjP9bq
J0wGuN02zmt2+xG31chy8/p9L7AhMmTeXnFoFAmF95GgO5+ZY+ZsnAqvcNIheV6+
wzw+ER7ig9qtJRgyN2/Wun6frT+KESKexHQy7hoL/xawwCut+P8rF/3p9QCIndsX
aJjxBDs5fJqagDn8ZfODyioii29mcsDtuT7Ms9D5WPbcrkFefuajxPEZp4gOjf/V
+FsB4vkhhML44OsahjEKusa+7CbmIgoyN7pAhN97l/CGjr0u+DG7pcPeogj9DZiI
tTRT8sOJCAxMVw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:46 2025 by rpki-client