Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File:                     vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier:          I5iGfAUCW6xLuUbjkCx1A0NjHybSl/6hzXOA+RGGA+I=
Subject key identifier:   F4:F1:BB:2A:ED:98:77:A8:6E:4E:D9:DF:A8:92:08:DE:37:AE:F9:BE
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer:       /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial:       01984776E66878154605CCCF96059628DA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number:          0580
Signing time:             Sat 26 Jul 2025 16:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:31 +0000
Files and hashes:         1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
                          2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: V3Ul9WTQxomCTLuEzEo0oCXywEWVrF//+2AwVgCHfaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e6:68:78:15:46:05:cc:cf:96:05:96:28:da:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
        Validity
            Not Before: Jul 26 16:00:31 2025 GMT
            Not After : Jul 27 16:00:31 2025 GMT
        Subject: CN=f4f1bb2aed9877a86e4ed9dfa89208de37aef9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:92:fb:c4:f2:9f:fc:3e:86:90:49:f9:30:
                    16:d3:fa:b3:7e:39:94:8a:68:34:08:23:4a:71:be:
                    99:01:7d:4a:de:c5:52:81:86:10:25:4d:45:e2:ce:
                    7e:c9:56:db:82:04:c1:35:63:64:8c:68:e3:d9:cb:
                    eb:69:3e:c5:9d:d3:39:fd:45:99:4a:ad:8d:c8:62:
                    63:bf:28:39:fd:bf:ae:77:36:fd:ad:67:3c:f4:b2:
                    50:85:31:ac:5d:1f:a5:ce:f0:5c:23:ed:03:df:5b:
                    e4:66:1c:82:70:89:de:42:75:ad:3c:88:7b:8e:7a:
                    9d:60:42:da:93:0f:91:19:39:0c:3d:99:c8:b4:3e:
                    8a:14:e4:07:78:b0:a7:29:56:78:a9:e1:de:4c:1d:
                    fe:53:3e:12:b6:43:2a:58:2e:fc:ca:5c:d3:9b:81:
                    28:a4:9b:63:75:3b:41:83:3a:05:d3:e5:ac:c2:3b:
                    0b:c0:4a:88:18:b6:4e:d1:43:f2:51:ca:1a:a1:1c:
                    38:dd:81:0a:20:d4:9a:5d:b6:b4:96:63:28:98:db:
                    89:8b:0e:e0:46:ee:c2:e7:6f:d9:0d:79:8e:4a:6b:
                    12:05:fb:ae:c3:c3:0f:54:e0:15:80:86:c1:a8:d0:
                    31:91:70:e7:d4:60:a9:b8:63:c2:c1:1d:42:cc:ee:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:BB:2A:ED:98:77:A8:6E:4E:D9:DF:A8:92:08:DE:37:AE:F9:BE
            X509v3 Authority Key Identifier:
                keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b9:c7:b9:3b:99:91:81:91:24:24:63:97:4d:32:bd:43:7b:
         88:f6:33:a4:fc:4d:ce:79:7c:48:e8:01:d9:c3:8a:ea:e2:e0:
         41:3e:2a:6b:65:ce:97:f4:48:94:37:d1:fc:55:e3:df:7c:52:
         0f:bf:2f:76:03:58:55:8d:fd:92:72:15:33:cd:9e:3e:f0:33:
         20:6c:26:5c:d4:68:00:c8:ab:1e:bf:4c:b2:a3:fc:d9:3c:58:
         84:40:ce:32:fa:59:0e:4f:18:7a:14:5d:17:57:06:d7:2e:87:
         10:fb:b9:e9:d1:74:1b:88:aa:da:d3:4a:b2:71:76:ff:e8:58:
         d3:f9:79:88:4a:66:16:d9:99:d1:88:e5:35:4c:71:58:fd:fb:
         4a:f1:27:e4:83:31:21:4b:a2:60:b2:24:58:1b:53:de:81:09:
         bc:81:42:f5:6a:a7:77:d8:50:f0:aa:f9:39:2b:77:17:87:e2:
         a8:9d:15:66:87:fe:da:4e:25:9a:46:5d:db:01:1c:38:b2:94:
         4b:2c:4f:02:09:bc:26:19:1c:0d:80:25:eb:0c:dc:49:58:cf:
         1a:1d:b8:6e:4e:dd:03:48:b8:d6:35:e6:85:e9:7c:22:f7:8e:
         80:ea:25:4d:26:ad:82:ad:00:c8:4b:7d:10:8e:b0:1c:d4:67:
         d7:47:9e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHduZoeBVGBczPlgWWKNo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw
YzE5M2YwHhcNMjUwNzI2MTYwMDMxWhcNMjUwNzI3MTYwMDMxWjAzMTEwLwYDVQQD
EyhmNGYxYmIyYWVkOTg3N2E4NmU0ZWQ5ZGZhODkyMDhkZTM3YWVmOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ+S+8Tyn/w+hpBJ+TAW0/qzfjmU
img0CCNKcb6ZAX1K3sVSgYYQJU1F4s5+yVbbggTBNWNkjGjj2cvraT7FndM5/UWZ
Sq2NyGJjvyg5/b+udzb9rWc89LJQhTGsXR+lzvBcI+0D31vkZhyCcIneQnWtPIh7
jnqdYELakw+RGTkMPZnItD6KFOQHeLCnKVZ4qeHeTB3+Uz4StkMqWC78ylzTm4Eo
pJtjdTtBgzoF0+WswjsLwEqIGLZO0UPyUcoaoRw43YEKINSaXba0lmMomNuJiw7g
Ru7C52/ZDXmOSmsSBfuuw8MPVOAVgIbBqNAxkXDn1GCpuGPCwR1CzO5TWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTxuyrtmHeobk7Z36iSCN43rvm+MB8GA1UdIwQY
MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut
YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5
LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLnHuTuZ
kYGRJCRjl00yvUN7iPYzpPxNznl8SOgB2cOK6uLgQT4qa2XOl/RIlDfR/FXj33xS
D78vdgNYVY39knIVM82ePvAzIGwmXNRoAMirHr9MsqP82TxYhEDOMvpZDk8YehRd
F1cG1y6HEPu56dF0G4iq2tNKsnF2/+hY0/l5iEpmFtmZ0YjlNUxxWP37SvEn5IMx
IUuiYLIkWBtT3oEJvIFC9Wqnd9hQ8Kr5OSt3F4fiqJ0VZof+2k4lmkZd2wEcOLKU
SyxPAgm8JhkcDYAl6wzcSVjPGh24bk7dA0i41jXmhel8IveOgOolTSatgq0AyEt9
EI6wHNRn10eegA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:13 2025 by rpki-client