Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
File:                     VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft (raw, json)
Hash identifier:          78VCjZy5Aq/xXNCVtJeCY9pclPhHt4DJ5whpEe2pBj0=
Subject key identifier:   64:7C:F9:D0:5E:04:70:A0:27:D3:82:0F:E6:5E:AF:72:DF:FD:61:BD
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Certificate issuer:       /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial:       01984DE6E640FD333E35D9E14BB0789BDC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
Manifest number:          0F8E
Signing time:             Sun 27 Jul 2025 22:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 22:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 22:00:34 +0000
Files and hashes:         1: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl (hash: /O9cQmtictlUYF6GT3i6puK9KtdXMPOvwpQWFDOyjxM=)
                          2: jDVkyBiMy_wS7uuT7gJm-Adjujs.roa (hash: EB3eY2DbzGQXtFYTivd9InheAMXSnzGFEr2+zEc8wPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:e6:e6:40:fd:33:3e:35:d9:e1:4b:b0:78:9b:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
        Validity
            Not Before: Jul 27 22:00:34 2025 GMT
            Not After : Jul 28 22:00:34 2025 GMT
        Subject: CN=647cf9d05e0470a027d3820fe65eaf72dffd61bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:ab:79:d3:29:4b:a3:0f:82:bb:88:4c:1f:
                    ed:db:65:9b:46:06:5b:22:4f:85:fe:b8:a1:10:9c:
                    3e:d3:5e:00:99:5c:48:2d:78:40:c8:5f:c1:fa:63:
                    98:d0:23:3b:c7:77:de:14:fe:ee:76:8a:a9:2c:d6:
                    16:10:92:b4:1a:74:1e:01:46:c6:1d:be:3b:47:0d:
                    1e:83:f9:b7:37:43:c8:44:6d:dc:32:19:61:23:d6:
                    66:18:be:ec:57:6f:87:99:eb:35:a8:22:e7:af:9d:
                    87:c0:01:85:2a:13:ca:36:9e:00:cf:25:ca:38:8a:
                    92:ce:64:5c:ad:54:dc:75:3f:db:a5:e5:bc:ac:06:
                    6f:f4:82:68:45:70:9b:0d:0c:f6:7b:b7:71:d4:34:
                    f4:b4:ba:35:ad:b2:0f:8e:85:b8:85:60:b1:51:01:
                    94:ca:4d:57:be:e8:93:28:4e:1f:d7:40:84:a4:9c:
                    3a:f5:1f:78:c7:af:a0:ab:2b:cc:2a:e1:9b:69:10:
                    77:e0:f5:40:da:db:19:4e:d4:ff:48:ab:05:41:fc:
                    1a:a9:1f:65:c7:af:b6:d0:f9:68:c0:12:5f:17:f1:
                    da:f2:1f:f9:69:09:11:b4:4f:08:6f:22:5e:9d:37:
                    09:6f:a0:67:70:5a:32:93:6f:a7:2e:d0:9f:ba:33:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:F9:D0:5E:04:70:A0:27:D3:82:0F:E6:5E:AF:72:DF:FD:61:BD
            X509v3 Authority Key Identifier:
                keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:a5:e0:f1:78:f2:f1:15:b9:24:f4:c6:7a:3f:f3:c4:c2:
         91:98:96:c7:bb:a1:03:58:77:f8:cf:29:07:b9:7b:6c:39:4c:
         af:2a:f3:c8:dc:b5:a1:88:76:56:9f:7a:8a:c7:ab:90:65:e0:
         20:25:84:9a:70:a0:13:4c:f4:d2:9d:e6:4a:64:a0:49:85:7b:
         ea:0c:05:0c:25:88:a3:ed:b4:ff:02:51:42:57:21:8f:78:7b:
         44:6f:5d:35:b5:42:5a:f5:9d:09:53:b8:23:48:5d:84:ef:09:
         c5:17:d1:23:b3:81:6d:0a:e2:3d:c5:77:ad:ed:1c:86:0c:61:
         89:ad:d5:39:f7:3a:76:d9:68:d8:c7:00:2f:ad:f6:12:99:b5:
         51:48:7a:f3:f1:49:3d:2d:3c:e5:b8:cc:8a:69:c0:f9:ca:1e:
         80:6d:6a:26:51:85:54:0c:7e:ef:fe:5a:01:19:91:d7:c2:58:
         75:31:7f:51:a7:ea:4c:1a:b2:91:e1:94:24:ae:2f:ab:33:99:
         ce:4a:7b:7c:45:31:ab:18:cc:cf:8f:e4:ba:6e:d1:67:b3:7b:
         15:f2:c6:bd:68:bf:35:2f:94:4d:52:17:76:81:f8:26:bc:bd:
         c9:8d:8b:20:89:21:1f:bc:39:36:cb:9a:07:32:b4:1d:d3:20:
         d2:06:9c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhN5uZA/TM+NdnhS7B4m9w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDkwNWVhYWQ0Y2VhNmMzZjJkNjUwYzA4ZmFlM2Q0NDUx
ODY3NTIwHhcNMjUwNzI3MjIwMDM0WhcNMjUwNzI4MjIwMDM0WjAzMTEwLwYDVQQD
Eyg2NDdjZjlkMDVlMDQ3MGEwMjdkMzgyMGZlNjVlYWY3MmRmZmQ2MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOuredMpS6MPgruITB/t22WbRgZb
Ik+F/rihEJw+014AmVxILXhAyF/B+mOY0CM7x3feFP7udoqpLNYWEJK0GnQeAUbG
Hb47Rw0eg/m3N0PIRG3cMhlhI9ZmGL7sV2+Hmes1qCLnr52HwAGFKhPKNp4AzyXK
OIqSzmRcrVTcdT/bpeW8rAZv9IJoRXCbDQz2e7dx1DT0tLo1rbIPjoW4hWCxUQGU
yk1XvuiTKE4f10CEpJw69R94x6+gqyvMKuGbaRB34PVA2tsZTtT/SKsFQfwaqR9l
x6+20PlowBJfF/Ha8h/5aQkRtE8IbyJenTcJb6BncFoyk2+nLtCfujPWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR8+dBeBHCgJ9OCD+Zer3Lf/WG9MB8GA1UdIwQY
MBaAFFRJBeqtTOpsPy1lDAj649RFGGdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYt
NWIzYTQxMTI1YmVhLzEvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OWNjZmEtYzk2Zi00ZDEyLWIxOGYtNWIzYTQxMTI1YmVh
LzEvVkVrRjZxMU02bXdfTFdVTUNQcmoxRVVZWjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxKl4PF4
8vEVuST0xno/88TCkZiWx7uhA1h3+M8pB7l7bDlMryrzyNy1oYh2Vp96iserkGXg
ICWEmnCgE0z00p3mSmSgSYV76gwFDCWIo+20/wJRQlchj3h7RG9dNbVCWvWdCVO4
I0hdhO8JxRfRI7OBbQriPcV3re0chgxhia3VOfc6dtlo2McAL632Epm1UUh68/FJ
PS085bjMimnA+coegG1qJlGFVAx+7/5aARmR18JYdTF/UafqTBqykeGUJK4vqzOZ
zkp7fEUxqxjMz4/kum7RZ7N7FfLGvWi/NS+UTVIXdoH4Jry9yY2LIIkhH7w5Nsua
BzK0HdMg0gacXw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:13:45 2025 by rpki-client