Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File:                     VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier:          2XhkBA13B0OvJSxUXaA1VLBHSBzKUBkfLnTjlHXFzhE=
Subject key identifier:   C8:5E:81:BE:14:43:68:3A:69:72:B2:FB:0F:9F:68:7E:F0:4B:DA:D6
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer:       /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial:       019859472C25D9937B139A083F93DAF1AE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number:          10AB
Signing time:             Wed 30 Jul 2025 03:01:33 +0000
Manifest this update:     Wed 30 Jul 2025 03:01:33 +0000
Manifest next update:     Thu 31 Jul 2025 03:01:33 +0000
Files and hashes:         1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
                          2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
                          3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: ZCJ6QklWAjl40iwqEI8iRHdrnbMqEsuB0h6mpxOpLhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:59:47:2c:25:d9:93:7b:13:9a:08:3f:93:da:f1:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
        Validity
            Not Before: Jul 30 03:01:33 2025 GMT
            Not After : Jul 31 03:01:33 2025 GMT
        Subject: CN=c85e81be1443683a6972b2fb0f9f687ef04bdad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:d3:c7:73:b2:95:c9:1f:e4:cc:64:e0:f5:
                    21:f8:ca:b9:53:8f:be:16:58:70:ba:f3:96:ac:17:
                    56:85:88:2c:02:21:0a:04:6a:fd:f4:d9:06:41:8f:
                    d5:14:45:c5:7d:51:fa:2a:4f:79:a1:6e:9d:d4:86:
                    20:9f:af:46:f4:6d:ae:b0:ec:6d:52:e5:16:53:20:
                    81:96:51:b4:87:47:6a:26:c0:d6:11:4a:91:f2:a9:
                    2f:e1:d8:21:28:44:b5:e8:90:83:58:c6:f9:12:3e:
                    54:38:37:54:8b:70:30:4a:b4:0d:a2:b5:44:40:22:
                    cf:bd:23:08:0a:e8:34:92:fe:1e:95:bd:ec:3d:59:
                    1e:74:d9:ff:e8:94:bf:e9:fe:3a:5c:2a:0e:2f:59:
                    56:d4:c9:fd:90:8b:cc:69:84:6b:c1:d6:27:45:45:
                    56:4e:c4:46:bc:a2:0e:d3:fe:e8:35:f3:d8:b3:0a:
                    01:50:7c:28:1a:c0:50:68:4e:76:1a:78:5e:83:81:
                    ab:6b:35:f4:17:f1:eb:79:d7:fd:d0:45:78:2d:80:
                    6d:ec:ce:1c:2a:1b:73:22:06:bb:85:09:1b:1e:b9:
                    48:75:03:0c:1d:4f:3c:92:92:ef:3c:61:5a:1f:bf:
                    16:b7:41:ce:c5:78:99:5e:79:d0:41:b6:ba:cf:93:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:81:BE:14:43:68:3A:69:72:B2:FB:0F:9F:68:7E:F0:4B:DA:D6
            X509v3 Authority Key Identifier:
                keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:bf:19:31:d5:3e:a2:bc:39:fa:25:ca:18:3c:3e:ff:a5:
         d7:cd:64:2e:d0:ea:88:ab:07:19:1b:3a:cd:1a:bf:2a:6f:6d:
         25:5a:66:bb:20:fb:71:9a:62:39:7a:38:c5:ae:9a:ca:0d:ac:
         42:ab:c6:43:31:ea:bb:de:a7:0b:0f:18:05:27:df:28:9d:83:
         78:76:1a:ad:d1:03:83:df:ad:83:ca:93:80:dc:86:ce:4a:29:
         9a:91:6e:a1:26:e7:21:8b:cb:bc:7d:33:04:41:ab:50:9e:2f:
         fa:96:ff:da:3c:91:65:58:aa:64:00:9b:50:5c:b4:31:a7:b0:
         96:a0:b6:a4:f1:8a:42:d6:55:7b:d0:d6:0b:0f:99:fc:45:63:
         01:8f:a4:21:d9:da:9d:b7:6b:0b:92:45:7e:a0:0d:0a:49:d3:
         b8:fe:92:41:aa:94:c3:29:b4:21:73:ba:46:64:d5:88:24:62:
         f6:47:a6:35:04:b2:e9:2d:99:0e:e5:72:3e:ee:be:82:05:27:
         8f:88:f8:ae:08:63:d0:fa:46:e2:fa:cb:e7:94:eb:b1:6b:7e:
         2d:c5:eb:0b:d3:2f:4c:03:44:77:4a:01:4f:48:dc:a3:53:97:
         c6:bc:52:e1:ac:14:99:80:fd:2e:42:ac:68:49:1d:86:99:33:
         91:00:9c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhZRywl2ZN7E5oIP5Pa8a5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5
ODAwMzMwHhcNMjUwNzMwMDMwMTMzWhcNMjUwNzMxMDMwMTMzWjAzMTEwLwYDVQQD
EyhjODVlODFiZTE0NDM2ODNhNjk3MmIyZmIwZjlmNjg3ZWYwNGJkYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXTx3Oylckf5Mxk4PUh+Mq5U4++
FlhwuvOWrBdWhYgsAiEKBGr99NkGQY/VFEXFfVH6Kk95oW6d1IYgn69G9G2usOxt
UuUWUyCBllG0h0dqJsDWEUqR8qkv4dghKES16JCDWMb5Ej5UODdUi3AwSrQNorVE
QCLPvSMICug0kv4elb3sPVkedNn/6JS/6f46XCoOL1lW1Mn9kIvMaYRrwdYnRUVW
TsRGvKIO0/7oNfPYswoBUHwoGsBQaE52Gnheg4GrazX0F/Hredf90EV4LYBt7M4c
KhtzIga7hQkbHrlIdQMMHU88kpLvPGFaH78Wt0HOxXiZXnnQQba6z5PtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhegb4UQ2g6aXKy+w+faH7wS9rWMB8GA1UdIwQY
MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt
YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh
LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHy/GTHV
PqK8Ofolyhg8Pv+l181kLtDqiKsHGRs6zRq/Km9tJVpmuyD7cZpiOXo4xa6ayg2s
QqvGQzHqu96nCw8YBSffKJ2DeHYardEDg9+tg8qTgNyGzkopmpFuoSbnIYvLvH0z
BEGrUJ4v+pb/2jyRZViqZACbUFy0MaewlqC2pPGKQtZVe9DWCw+Z/EVjAY+kIdna
nbdrC5JFfqANCknTuP6SQaqUwym0IXO6RmTViCRi9kemNQSy6S2ZDuVyPu6+ggUn
j4j4rghj0PpG4vrL55TrsWt+LcXrC9MvTANEd0oBT0jco1OXxrxS4awUmYD9LkKs
aEkdhpkzkQCcuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 04:26:03 2025 by rpki-client