Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          +SsgIGhepDwp9upEL1rwdhAZv27WToVPXSD58smOAvE=
Subject key identifier:   2C:16:13:E1:9C:0D:2C:5E:2A:FD:37:78:8E:8A:51:DF:26:19:8F:0E
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       01984BF88DDEA79955BB818C4E838D3B379E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 13:00:36 +0000
Manifest this update:     Sun 27 Jul 2025 13:00:36 +0000
Manifest next update:     Mon 28 Jul 2025 13:00:36 +0000
Files and hashes:         1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: KzN+1N55yObHXJKstPKfwlJiq8hVvvENhsHXzi08oPM=)
                          2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:f8:8d:de:a7:99:55:bb:81:8c:4e:83:8d:3b:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Jul 27 13:00:36 2025 GMT
            Not After : Jul 28 13:00:36 2025 GMT
        Subject: CN=2c1613e19c0d2c5e2afd37788e8a51df26198f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:88:5a:c1:6f:48:56:1e:b6:f8:af:04:25:
                    9f:92:61:d6:5e:37:47:e3:fc:08:4f:5b:6f:17:23:
                    61:fd:db:11:4f:ba:42:e6:ba:56:16:cc:32:e0:27:
                    a4:65:3a:55:5e:98:48:78:27:8e:bb:e1:4c:88:b1:
                    7d:b0:80:f8:6f:d5:0d:ed:4d:53:64:71:7a:d1:28:
                    1a:73:85:ce:9b:8e:06:89:77:90:06:d5:fb:39:3d:
                    23:71:6b:39:05:d0:f1:d8:98:86:a6:06:6a:e6:a0:
                    c2:34:b8:fe:b7:7b:f0:6b:b8:38:3b:bb:fd:16:a6:
                    d3:59:ae:b6:ea:09:a5:30:22:79:91:e8:32:b0:1d:
                    4a:d9:63:b7:d4:e9:e9:d7:89:ab:74:cf:a0:79:51:
                    9e:18:53:75:12:a3:09:e9:30:7d:4b:f6:a5:74:08:
                    c1:a2:df:2f:a8:fc:f6:2a:ca:a0:58:14:fe:82:cf:
                    fb:41:60:89:36:3a:9e:83:a6:4d:0d:e0:9d:86:e1:
                    c8:57:38:ca:0f:df:c5:f7:d7:d4:a7:e6:ce:64:2a:
                    a8:2d:07:cc:ba:63:cf:2c:f9:1c:7a:83:4e:2c:5b:
                    94:37:94:8e:44:42:89:3a:5a:96:97:68:f0:54:dd:
                    b8:45:a8:51:87:1e:c1:1d:b4:a1:0f:28:a1:e1:43:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:13:E1:9C:0D:2C:5E:2A:FD:37:78:8E:8A:51:DF:26:19:8F:0E
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:7b:c6:e0:03:1a:a6:77:81:80:32:75:8a:f2:bc:4f:ed:
         29:76:a6:18:7e:4b:7b:08:21:64:43:a6:0b:a6:c4:bb:89:eb:
         bd:88:fd:0e:13:14:2d:59:88:30:54:1e:08:80:a3:03:2d:7c:
         29:13:13:eb:8b:5e:8d:fc:10:70:e3:3f:96:2b:f5:e4:bb:e8:
         72:05:0d:01:5e:09:21:46:a2:2c:71:d4:bf:28:14:fa:0f:71:
         28:8b:29:92:2e:99:f9:5a:6d:78:43:19:14:44:54:03:5b:2e:
         dd:64:42:a0:50:7c:ed:b9:1b:28:e0:5b:54:77:cf:05:25:ec:
         52:3c:4a:cc:ba:82:de:98:71:fd:62:33:df:db:68:c2:99:ef:
         2e:98:4f:2b:ed:12:e9:cf:66:ef:31:52:78:f3:27:4e:3e:96:
         e9:c4:9a:89:8c:ce:97:5d:d0:4f:5a:b9:5e:9e:49:24:c8:fe:
         7c:90:2b:f1:bc:e2:12:9b:3a:5e:e0:83:e1:f1:c2:ed:ba:18:
         ef:f2:74:bd:80:ca:d2:1a:fd:52:68:09:21:5a:ae:f6:5d:60:
         6a:1b:10:e8:0e:5f:4d:d9:bc:9f:14:91:83:66:73:48:d6:6d:
         ef:d7:48:e1:18:df:6b:f2:15:31:b4:13:b1:76:ad:4f:c8:62:
         72:86:f6:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhL+I3ep5lVu4GMToONOzeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl
NjI5MjgwHhcNMjUwNzI3MTMwMDM2WhcNMjUwNzI4MTMwMDM2WjAzMTEwLwYDVQQD
EygyYzE2MTNlMTljMGQyYzVlMmFmZDM3Nzg4ZThhNTFkZjI2MTk4ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMSIWsFvSFYetvivBCWfkmHWXjdH
4/wIT1tvFyNh/dsRT7pC5rpWFswy4CekZTpVXphIeCeOu+FMiLF9sID4b9UN7U1T
ZHF60Sgac4XOm44GiXeQBtX7OT0jcWs5BdDx2JiGpgZq5qDCNLj+t3vwa7g4O7v9
FqbTWa626gmlMCJ5kegysB1K2WO31Onp14mrdM+geVGeGFN1EqMJ6TB9S/aldAjB
ot8vqPz2KsqgWBT+gs/7QWCJNjqeg6ZNDeCdhuHIVzjKD9/F99fUp+bOZCqoLQfM
umPPLPkceoNOLFuUN5SOREKJOlqWl2jwVN24RahRhx7BHbShDyih4UPLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwWE+GcDSxeKv03eI6KUd8mGY8OMB8GA1UdIwQY
MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt
ZWUxZTFkZWQyZjlmLzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm
LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8N7xuAD
GqZ3gYAydYryvE/tKXamGH5LewghZEOmC6bEu4nrvYj9DhMULVmIMFQeCICjAy18
KRMT64tejfwQcOM/liv15LvocgUNAV4JIUaiLHHUvygU+g9xKIspki6Z+VpteEMZ
FERUA1su3WRCoFB87bkbKOBbVHfPBSXsUjxKzLqC3phx/WIz39towpnvLphPK+0S
6c9m7zFSePMnTj6W6cSaiYzOl13QT1q5Xp5JJMj+fJAr8bziEps6XuCD4fHC7boY
7/J0vYDK0hr9UmgJIVqu9l1gahsQ6A5fTdm8nxSRg2ZzSNZt79dI4Rjfa/IVMbQT
sXatT8hicob2LQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:09:57 2025 by rpki-client