Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
File:                     v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json)
Hash identifier:          QpFfmrdRoG4fU+VHODTFwQK6rlv5NMPG8S8c8roiZck=
Subject key identifier:   28:DD:E1:39:0B:22:0E:EF:74:C5:83:79:86:83:91:AD:E0:38:8C:30
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Certificate issuer:       /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial:       019848C09129BD753332E576CA70298199F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
Manifest number:          129E
Signing time:             Sat 26 Jul 2025 22:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:36 +0000
Files and hashes:         1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=)
                          2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: MrRINNwHODCBHPEUHmH2L+ugaPqnHD0V317pdzYxg0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:91:29:bd:75:33:32:e5:76:ca:70:29:81:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
        Validity
            Not Before: Jul 26 22:00:36 2025 GMT
            Not After : Jul 27 22:00:36 2025 GMT
        Subject: CN=28dde1390b220eef74c58379868391ade0388c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:c2:85:64:4b:c8:ca:26:73:13:51:45:5a:
                    54:09:1a:dd:93:d2:54:32:96:b4:26:ea:9f:1b:64:
                    b6:38:86:79:fe:d7:ac:ff:d4:9a:e4:c3:70:81:ba:
                    ca:a3:43:05:b9:82:fc:7e:a6:71:65:21:37:96:2c:
                    56:c2:f9:71:eb:9b:52:f0:80:68:f9:aa:22:eb:f1:
                    34:89:14:b7:b4:f0:23:ba:6e:33:30:e2:dc:7c:0a:
                    a6:ec:86:1d:e9:48:c6:37:f0:a2:a8:15:18:f4:0f:
                    11:da:4a:9d:94:81:0a:c7:08:6b:ae:47:d5:49:f0:
                    a1:ee:34:e4:61:57:49:c6:20:e5:0e:4d:ce:62:ed:
                    6e:0a:02:57:e9:3d:fb:ea:a2:8e:de:b8:1d:f6:62:
                    11:1b:5f:0c:cd:94:2c:95:9d:f5:c2:e5:b5:19:f3:
                    66:3e:18:b5:2a:c4:86:9c:00:f2:03:78:b1:4f:cf:
                    6e:0c:3e:8c:eb:8c:84:99:5d:35:53:c0:59:3e:2e:
                    be:a8:5c:7c:6e:67:07:a9:34:06:2e:dd:53:6f:af:
                    23:10:37:62:eb:0e:5a:86:5b:cb:d3:a1:38:49:f5:
                    34:56:3b:06:cc:dc:8a:c0:d1:c4:f1:cb:a6:53:04:
                    98:4a:25:90:52:b2:2e:73:21:3e:ec:8d:3e:73:15:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:E1:39:0B:22:0E:EF:74:C5:83:79:86:83:91:AD:E0:38:8C:30
            X509v3 Authority Key Identifier:
                keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:bf:fe:f6:1f:b5:b8:c7:97:d5:23:a4:20:36:d4:86:33:
         87:49:80:bb:fa:aa:2c:26:3a:df:97:bb:e7:b7:8c:63:ab:ba:
         fa:87:13:14:3b:96:a3:ec:59:76:df:a1:dc:03:0a:8a:bd:e4:
         65:87:c0:6a:d4:fb:7a:0d:f4:ed:9a:ae:22:fc:a4:75:63:eb:
         af:0b:40:24:ba:be:fe:61:49:5a:bd:a9:62:6e:81:56:8b:40:
         6e:c4:38:01:8c:9d:bc:c8:98:b5:4d:c9:8a:88:a4:46:b2:24:
         1f:7e:c1:b1:4c:c0:72:7c:c4:fb:88:55:fe:6a:b9:49:99:bb:
         3f:33:e2:71:40:cc:7f:2a:4e:8f:4a:1a:f8:c4:e4:75:47:e5:
         2b:cc:7c:f4:5c:e2:15:9e:bd:34:78:7e:50:f2:4a:b1:09:7a:
         59:28:c4:4c:4c:07:cf:fd:a2:80:a8:28:f3:bc:ae:d2:c6:31:
         4e:0b:06:c1:a8:36:e1:77:66:ef:8d:78:6a:f4:96:9c:dc:59:
         47:c2:e9:10:96:14:e4:1b:0f:36:5d:70:67:ac:d7:8e:36:64:
         43:e2:2e:b7:73:f8:a1:3b:23:23:26:b5:31:b9:ca:ca:fb:ec:
         c6:58:72:bb:36:ac:a6:d3:27:f3:59:01:2e:90:41:0f:42:50:
         dd:52:45:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwJEpvXUzMuV2ynApgZn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2
MjY3ZGEwHhcNMjUwNzI2MjIwMDM2WhcNMjUwNzI3MjIwMDM2WjAzMTEwLwYDVQQD
EygyOGRkZTEzOTBiMjIwZWVmNzRjNTgzNzk4NjgzOTFhZGUwMzg4YzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mfChWRLyMomcxNRRVpUCRrdk9JU
Mpa0JuqfG2S2OIZ5/tes/9Sa5MNwgbrKo0MFuYL8fqZxZSE3lixWwvlx65tS8IBo
+aoi6/E0iRS3tPAjum4zMOLcfAqm7IYd6UjGN/CiqBUY9A8R2kqdlIEKxwhrrkfV
SfCh7jTkYVdJxiDlDk3OYu1uCgJX6T376qKO3rgd9mIRG18MzZQslZ31wuW1GfNm
Phi1KsSGnADyA3ixT89uDD6M64yEmV01U8BZPi6+qFx8bmcHqTQGLt1Tb68jEDdi
6w5ahlvL06E4SfU0VjsGzNyKwNHE8cumUwSYSiWQUrIucyE+7I0+cxXb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjd4TkLIg7vdMWDeYaDka3gOIwwMB8GA1UdIwQY
MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt
ZjMzNzQxMjk1MTAxLzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx
LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXu//vYf
tbjHl9UjpCA21IYzh0mAu/qqLCY635e757eMY6u6+ocTFDuWo+xZdt+h3AMKir3k
ZYfAatT7eg307ZquIvykdWPrrwtAJLq+/mFJWr2pYm6BVotAbsQ4AYydvMiYtU3J
ioikRrIkH37BsUzAcnzE+4hV/mq5SZm7PzPicUDMfypOj0oa+MTkdUflK8x89Fzi
FZ69NHh+UPJKsQl6WSjETEwHz/2igKgo87yu0sYxTgsGwag24Xdm7414avSWnNxZ
R8LpEJYU5BsPNl1wZ6zXjjZkQ+Iut3P4oTsjIya1MbnKyvvsxlhyuzasptMn81kB
LpBBD0JQ3VJFsQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:17 2025 by rpki-client