Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          sGsoUN3/J3Rl6rhQV8y2m7Z43jAD7MZxSWiWs7YS11Q=
Subject key identifier:   C6:17:9B:29:B9:0F:49:63:F5:CD:46:CC:82:C7:D3:2F:4E:F0:21:DA
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019916F69CAB4336CAA35E266AFD67B6E4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          166C
Signing time:             Thu 04 Sep 2025 23:01:24 +0000
Manifest this update:     Thu 04 Sep 2025 23:01:24 +0000
Manifest next update:     Fri 05 Sep 2025 23:01:24 +0000
Files and hashes:         1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: PDi/ayZwPKnwPhiX62YCPDgoWeUmAm7Vmlj9fAjthkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 23:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:9c:ab:43:36:ca:a3:5e:26:6a:fd:67:b6:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Sep  4 23:01:24 2025 GMT
            Not After : Sep  5 23:01:24 2025 GMT
        Subject: CN=c6179b29b90f4963f5cd46cc82c7d32f4ef021da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:da:10:89:e5:90:9d:f4:f3:1f:bc:c4:31:
                    5e:7c:9c:94:a4:0f:40:da:1b:f5:72:a7:fb:2e:3d:
                    c4:0f:35:03:ee:1f:8e:56:fc:f7:39:c8:8d:eb:cd:
                    b2:97:08:fc:e4:79:31:1b:a5:df:b6:d5:c8:13:f7:
                    96:5b:33:d9:5e:5c:6d:b1:38:09:bd:dd:a7:7b:50:
                    3a:43:c6:e5:54:c6:4c:a9:e5:59:85:ed:9c:26:f8:
                    5b:7c:16:88:39:ae:7a:8d:65:72:08:40:c7:11:72:
                    c4:17:ec:75:0b:32:87:ec:88:ab:12:c1:0f:22:27:
                    69:31:e4:d6:cf:ec:0a:b8:22:f7:51:fe:ee:a8:b3:
                    b5:fc:44:e2:94:63:f7:73:03:d3:c2:e9:70:3f:1b:
                    00:1b:37:bb:cf:54:6c:ff:42:59:1f:12:a6:62:f0:
                    0e:95:93:a2:bc:33:c6:55:2e:01:2f:54:cf:4f:24:
                    8f:f9:1c:de:7f:cd:85:f4:e3:f6:0c:59:85:69:ab:
                    95:c8:2a:36:6c:ed:be:ee:66:41:76:70:e8:6b:47:
                    8b:34:1f:33:43:a3:8c:54:36:c4:36:cd:be:67:81:
                    5a:37:50:2b:b7:35:92:5b:ff:26:de:9f:a7:6a:2b:
                    4b:de:1c:40:22:6f:62:98:7d:3b:59:a5:78:c6:58:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:9B:29:B9:0F:49:63:F5:CD:46:CC:82:C7:D3:2F:4E:F0:21:DA
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:59:3b:40:c8:bd:60:d1:13:b7:f0:4b:d2:95:f8:ad:3a:
         4b:27:7d:6f:10:8b:29:79:bd:54:31:c9:fa:13:f0:8d:80:60:
         51:cf:9c:66:15:a1:05:5b:ee:8f:20:41:32:14:71:7d:e2:c6:
         d6:7c:1f:58:41:fa:ca:2e:cf:79:0c:88:2c:5f:4c:de:33:4b:
         ed:fe:c3:b7:b0:92:6c:0e:f4:48:43:b1:43:1c:bf:fb:e5:55:
         b2:71:74:52:03:b0:a6:41:0e:57:17:f8:b2:c3:79:17:8a:18:
         e2:94:15:0a:c4:7a:ea:bc:bf:c8:e6:0f:4e:f3:b5:08:be:fc:
         56:8a:be:b3:eb:17:2c:62:4f:2f:de:3c:27:c3:99:f6:ac:77:
         a9:e3:59:8e:5b:29:b2:64:46:9b:cc:bf:4b:48:de:e8:23:5b:
         71:6d:0f:1e:d8:70:da:a3:db:83:59:5e:8f:5a:1d:f0:d3:eb:
         5f:f2:74:96:90:df:fb:27:b0:d3:6d:92:cc:80:d1:0a:82:8f:
         3e:39:3a:7a:5c:43:49:92:b6:2a:ac:ad:f1:4b:e4:3b:54:8c:
         de:bd:29:ea:b4:4d:7d:6e:71:c3:28:e8:6c:af:70:c3:81:13:
         44:f6:f9:d4:88:1c:56:ed:ba:95:af:e5:ce:03:58:c4:ea:22:
         39:de:48:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkW9pyrQzbKo14mav1ntuToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy
ZjIzZDgwHhcNMjUwOTA0MjMwMTI0WhcNMjUwOTA1MjMwMTI0WjAzMTEwLwYDVQQD
EyhjNjE3OWIyOWI5MGY0OTYzZjVjZDQ2Y2M4MmM3ZDMyZjRlZjAyMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34jaEInlkJ308x+8xDFefJyUpA9A
2hv1cqf7Lj3EDzUD7h+OVvz3OciN682ylwj85HkxG6XfttXIE/eWWzPZXlxtsTgJ
vd2ne1A6Q8blVMZMqeVZhe2cJvhbfBaIOa56jWVyCEDHEXLEF+x1CzKH7IirEsEP
IidpMeTWz+wKuCL3Uf7uqLO1/ETilGP3cwPTwulwPxsAGze7z1Rs/0JZHxKmYvAO
lZOivDPGVS4BL1TPTySP+Rzef82F9OP2DFmFaauVyCo2bO2+7mZBdnDoa0eLNB8z
Q6OMVDbENs2+Z4FaN1ArtzWSW/8m3p+naitL3hxAIm9imH07WaV4xljE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYXmym5D0lj9c1GzILH0y9O8CHaMB8GA1UdIwQY
MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt
Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1
LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4pZO0DI
vWDRE7fwS9KV+K06Syd9bxCLKXm9VDHJ+hPwjYBgUc+cZhWhBVvujyBBMhRxfeLG
1nwfWEH6yi7PeQyILF9M3jNL7f7Dt7CSbA70SEOxQxy/++VVsnF0UgOwpkEOVxf4
ssN5F4oY4pQVCsR66ry/yOYPTvO1CL78Voq+s+sXLGJPL948J8OZ9qx3qeNZjlsp
smRGm8y/S0je6CNbcW0PHthw2qPbg1lej1od8NPrX/J0lpDf+yew022SzIDRCoKP
Pjk6elxDSZK2Kqyt8UvkO1SM3r0p6rRNfW5xwyjobK9ww4ETRPb51IgcVu26la/l
zgNYxOoiOd5Ing==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:33 2025 by rpki-client