Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          rQO7fwHYsTaM7Q9RleMoFsA46vlw8TG6Ic6Gb0MpbR4=
Subject key identifier:   B0:E0:6D:9F:B9:7F:3E:3B:52:F9:D9:EC:52:A9:C3:08:1F:1E:8B:B3
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       019848C0FCBF5F018E4B02E8C1F1C7C88347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          141E
Signing time:             Sat 26 Jul 2025 22:01:03 +0000
Manifest this update:     Sat 26 Jul 2025 22:01:03 +0000
Manifest next update:     Sun 27 Jul 2025 22:01:03 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: 8tORGyA2tXlmDFeI6MzWz8ewPmgQ+I79JAqMwl0NpSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:fc:bf:5f:01:8e:4b:02:e8:c1:f1:c7:c8:83:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jul 26 22:01:03 2025 GMT
            Not After : Jul 27 22:01:03 2025 GMT
        Subject: CN=b0e06d9fb97f3e3b52f9d9ec52a9c3081f1e8bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:4e:55:0c:a2:9a:d3:6a:80:1a:90:d9:64:
                    56:7e:4a:56:61:3a:22:bf:60:f6:83:0e:11:32:5a:
                    a7:3e:de:4b:e5:5c:0d:ea:9f:51:db:59:c8:80:13:
                    16:6f:3c:56:84:66:f7:dd:43:f9:d9:d2:e0:44:cc:
                    20:c6:92:cf:16:64:cc:7e:ac:56:e8:b9:36:1b:7b:
                    6c:0e:f3:2c:b8:9e:f5:05:0f:cb:e9:4c:fa:b3:af:
                    bf:38:f8:2b:8d:a7:c7:d3:72:bf:dd:21:ca:ac:68:
                    c7:4c:eb:3c:b7:f8:d4:a4:40:8c:68:81:21:bd:47:
                    61:ba:5a:9a:eb:97:90:af:e4:c5:9a:9b:22:55:72:
                    0a:fa:e5:5d:2d:2d:77:d8:9b:b0:45:e5:43:3d:d9:
                    7c:b5:c1:60:64:1c:20:d7:89:cd:72:c6:00:44:90:
                    80:41:bf:18:6a:fc:0b:f9:e5:60:c9:f9:62:9a:07:
                    86:83:fe:2b:f4:d4:31:f1:20:98:99:0e:71:3e:b1:
                    c6:1c:5f:d2:79:12:33:c3:43:fb:1c:0d:36:a9:f2:
                    1a:1e:48:13:e5:06:57:e7:fe:a0:16:ac:80:e9:bb:
                    e3:2e:f1:4f:39:bc:32:d7:50:9f:0d:40:f5:0d:6d:
                    c9:83:f5:fb:2a:58:e8:a9:c9:8a:52:1c:38:92:45:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:6D:9F:B9:7F:3E:3B:52:F9:D9:EC:52:A9:C3:08:1F:1E:8B:B3
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:4f:6c:06:54:52:cc:68:a3:f2:f4:65:8b:d7:29:f2:1a:
         2e:23:37:a6:5c:80:5c:8a:3a:73:38:7a:61:3f:ea:71:6d:04:
         c2:c7:bc:e7:fa:92:c9:fb:c5:97:bc:ee:0d:2f:4d:65:73:5c:
         55:44:72:dc:bb:b7:0d:57:fd:75:7d:bd:cb:28:13:af:03:3b:
         0c:ef:45:23:d8:21:9e:ee:11:53:12:eb:8f:6f:0f:b4:9f:1d:
         4e:c1:92:f4:d9:0b:ef:1e:41:1a:51:51:73:e5:4d:40:30:34:
         87:26:28:94:2a:e0:43:93:d0:16:71:10:1b:f1:2f:69:17:17:
         9c:0a:fa:0e:90:b4:20:59:ae:b6:03:13:90:28:08:1c:8e:d3:
         f4:7d:79:fa:5f:ef:04:9e:27:5f:42:d6:b6:f8:47:1d:d8:33:
         e0:29:77:93:50:d4:6c:03:a8:8b:85:a6:76:e7:51:9e:6c:44:
         42:dd:36:90:f3:07:01:4b:3d:2b:f2:c9:65:6c:8e:b3:94:27:
         32:bf:59:3c:9a:fb:2e:69:42:2a:46:22:81:c4:17:3c:b9:a5:
         f7:11:cb:e0:86:af:5e:2b:82:ed:c0:c0:b6:8a:99:5a:0b:2d:
         f7:07:06:43:84:89:69:89:aa:30:9a:73:19:4d:95:33:88:04:
         09:cb:0f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwPy/XwGOSwLowfHHyINHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjUwNzI2MjIwMTAzWhcNMjUwNzI3MjIwMTAzWjAzMTEwLwYDVQQD
EyhiMGUwNmQ5ZmI5N2YzZTNiNTJmOWQ5ZWM1MmE5YzMwODFmMWU4YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr1OVQyimtNqgBqQ2WRWfkpWYToi
v2D2gw4RMlqnPt5L5VwN6p9R21nIgBMWbzxWhGb33UP52dLgRMwgxpLPFmTMfqxW
6Lk2G3tsDvMsuJ71BQ/L6Uz6s6+/OPgrjafH03K/3SHKrGjHTOs8t/jUpECMaIEh
vUdhulqa65eQr+TFmpsiVXIK+uVdLS132JuwReVDPdl8tcFgZBwg14nNcsYARJCA
Qb8YavwL+eVgyflimgeGg/4r9NQx8SCYmQ5xPrHGHF/SeRIzw0P7HA02qfIaHkgT
5QZX5/6gFqyA6bvjLvFPObwy11CfDUD1DW3Jg/X7KljoqcmKUhw4kkXA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDgbZ+5fz47UvnZ7FKpwwgfHouzMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMRPbAZU
Usxoo/L0ZYvXKfIaLiM3plyAXIo6czh6YT/qcW0Ewse85/qSyfvFl7zuDS9NZXNc
VURy3Lu3DVf9dX29yygTrwM7DO9FI9ghnu4RUxLrj28PtJ8dTsGS9NkL7x5BGlFR
c+VNQDA0hyYolCrgQ5PQFnEQG/EvaRcXnAr6DpC0IFmutgMTkCgIHI7T9H15+l/v
BJ4nX0LWtvhHHdgz4Cl3k1DUbAOoi4WmdudRnmxEQt02kPMHAUs9K/LJZWyOs5Qn
Mr9ZPJr7LmlCKkYigcQXPLml9xHL4IavXiuC7cDAtoqZWgst9wcGQ4SJaYmqMJpz
GU2VM4gECcsPUA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:39 2025 by rpki-client