Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File:                     vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier:          jFKevLo/qBVLxEi1PpfPepz5PfBuIOn0rQfOBco1PoA=
Subject key identifier:   66:E4:A3:99:23:E0:E7:F1:92:19:9A:00:7B:5A:EB:0B:1D:3A:A1:4A
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer:       /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial:       01984852ECF7FD0D07C80E03BAE81DBC9BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number:          062C
Signing time:             Sat 26 Jul 2025 20:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:50 +0000
Files and hashes:         1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: hfUfJLV7H68ZXAxrJbydYEuL4AJwbG8/ScmGlw8uQG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:ec:f7:fd:0d:07:c8:0e:03:ba:e8:1d:bc:9b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
        Validity
            Not Before: Jul 26 20:00:50 2025 GMT
            Not After : Jul 27 20:00:50 2025 GMT
        Subject: CN=66e4a39923e0e7f192199a007b5aeb0b1d3aa14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:9c:08:2f:f8:07:59:e2:80:f5:35:03:49:
                    1b:93:43:1d:ed:56:ff:f9:5b:d7:e0:f6:04:92:0c:
                    68:bc:82:11:48:f5:7a:92:23:04:96:c4:42:6a:71:
                    a8:a0:c7:54:c9:7e:ed:23:2a:88:03:66:4b:f6:80:
                    17:cf:69:72:f7:98:4a:92:4f:22:b0:dd:c9:13:20:
                    2b:7e:d9:e0:23:c3:ee:f5:39:17:39:fe:2b:d2:22:
                    d8:8c:ff:78:f0:88:6e:1b:60:a2:9f:69:2f:86:63:
                    3a:23:8e:02:13:94:fb:9c:14:b8:48:94:44:e9:34:
                    3d:c1:8a:8d:25:5d:bc:8f:00:42:7f:ac:74:08:02:
                    4b:10:99:cc:39:c6:fe:60:08:ee:c7:38:da:08:e8:
                    57:c0:31:ed:a5:83:8a:c7:78:c6:0e:0c:4b:e3:69:
                    9e:f7:8b:dd:09:6c:fa:50:cb:d8:b5:d9:03:9f:c8:
                    2c:3c:32:d7:07:e5:91:f3:5c:a9:ab:5c:08:aa:22:
                    e4:c4:d6:01:fe:59:fd:02:49:46:0e:2a:6c:d8:d0:
                    d4:56:31:99:3a:61:8e:4f:45:be:ff:2a:d3:89:43:
                    13:82:67:4a:0d:5a:57:7f:54:bf:f0:8f:1a:97:95:
                    12:4d:65:5e:83:86:48:37:bd:b1:98:70:3a:ca:75:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:A3:99:23:E0:E7:F1:92:19:9A:00:7B:5A:EB:0B:1D:3A:A1:4A
            X509v3 Authority Key Identifier:
                keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:86:25:30:66:cb:5a:d0:23:52:39:20:9e:38:50:e6:42:e4:
         30:5c:a3:e7:a6:75:03:3e:fd:d7:b4:ec:16:a5:0c:c9:c9:d6:
         9b:8c:09:4f:11:c7:ee:d0:aa:b1:c3:ba:5f:1c:1e:79:c8:e8:
         14:8d:ba:37:e8:7c:7e:07:30:2e:b0:51:0e:52:55:0b:23:2e:
         57:59:fe:df:2b:99:49:25:33:ef:99:28:68:8d:b6:7d:19:c2:
         97:e6:91:2f:4c:d3:83:55:1d:17:3f:74:49:c6:81:f0:2f:21:
         a9:6a:07:91:b2:61:f8:ba:57:80:45:5b:a8:2b:5b:1c:0d:2b:
         79:cc:91:1a:56:3b:98:14:81:7f:be:4e:11:e4:95:ab:bf:63:
         36:ad:a6:93:4e:95:77:a5:5a:2a:be:db:85:79:15:f4:ec:2f:
         4a:a3:bb:8f:9f:17:ff:c1:bd:8e:95:e6:4f:e5:b5:ae:e0:89:
         93:fc:c5:84:0d:36:55:64:0c:c8:1b:3c:f0:91:92:da:b8:03:
         34:f0:75:ee:1b:d1:be:bd:99:a8:96:35:14:fe:09:e5:d3:62:
         f8:d1:d0:63:80:0e:b2:26:d2:69:5d:7a:8e:38:27:45:36:ca:
         34:e5:97:75:7f:bb:87:77:37:ca:cd:0f:e9:59:e1:43:d2:07:
         75:bc:8e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUuz3/Q0HyA4DuugdvJupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYzU0MDRjODg3NGVhYmYyMzVlM2U0OGEyNjI3YTcyZTky
MjNhOTQwHhcNMjUwNzI2MjAwMDUwWhcNMjUwNzI3MjAwMDUwWjAzMTEwLwYDVQQD
Eyg2NmU0YTM5OTIzZTBlN2YxOTIxOTlhMDA3YjVhZWIwYjFkM2FhMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofmcCC/4B1nigPU1A0kbk0Md7Vb/
+VvX4PYEkgxovIIRSPV6kiMElsRCanGooMdUyX7tIyqIA2ZL9oAXz2ly95hKkk8i
sN3JEyArftngI8Pu9TkXOf4r0iLYjP948IhuG2Cin2kvhmM6I44CE5T7nBS4SJRE
6TQ9wYqNJV28jwBCf6x0CAJLEJnMOcb+YAjuxzjaCOhXwDHtpYOKx3jGDgxL42me
94vdCWz6UMvYtdkDn8gsPDLXB+WR81ypq1wIqiLkxNYB/ln9AklGDips2NDUVjGZ
OmGOT0W+/yrTiUMTgmdKDVpXf1S/8I8al5USTWVeg4ZIN72xmHA6ynW7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbko5kj4OfxkhmaAHta6wsdOqFKMB8GA1UdIwQY
MBaAFL3FQEyIdOq/I14+SKJienLpIjqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmNWQVRJaDA2cjhqWGo1SW9tSjZjdWtpT3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2U5ZDEtZjI3Yi00MmZmLWIxYzQt
NTg3NWZmMGFiNWE4LzEvdmNWQVRJaDA2cjhqWGo1SW9tSjZjdWtpT3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mY2U5ZDEtZjI3Yi00MmZmLWIxYzQtNTg3NWZmMGFiNWE4
LzEvdmNWQVRJaDA2cjhqWGo1SW9tSjZjdWtpT3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYYlMGbL
WtAjUjkgnjhQ5kLkMFyj56Z1Az7917TsFqUMycnWm4wJTxHH7tCqscO6Xxweecjo
FI26N+h8fgcwLrBRDlJVCyMuV1n+3yuZSSUz75koaI22fRnCl+aRL0zTg1UdFz90
ScaB8C8hqWoHkbJh+LpXgEVbqCtbHA0recyRGlY7mBSBf75OEeSVq79jNq2mk06V
d6VaKr7bhXkV9OwvSqO7j58X/8G9jpXmT+W1ruCJk/zFhA02VWQMyBs88JGS2rgD
NPB17hvRvr2ZqJY1FP4J5dNi+NHQY4AOsibSaV16jjgnRTbKNOWXdX+7h3c3ys0P
6VnhQ9IHdbyORQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:56 2025 by rpki-client