Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File:                     Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier:          /US8h2URXL73gEF7STNi+GaKp6xrrckIvGtL/qbtCxA=
Subject key identifier:   B7:EF:78:12:D1:6F:17:3F:B9:8D:41:01:36:35:AE:5B:8F:19:17:66
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer:       /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial:       019A65B3C1D66F39460733A928C1DEBA1080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number:          046A
Signing time:             Sat 08 Nov 2025 23:01:10 +0000
Manifest this update:     Sat 08 Nov 2025 23:01:10 +0000
Manifest next update:     Sun 09 Nov 2025 23:01:10 +0000
Files and hashes:         1: FZWMDDQMo_y8JJ57vskoxtwrzBc.roa (hash: htvNKiRY5N1vCsM0n5CFd0XNCYmHCVpMo5jU+IUCul4=)
                          2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
                          3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: L/3Bc2FX8UbKDXDx4D4X0EpSbkkvxRuGQi3FN4NPi8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Nov 2025 18:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:65:b3:c1:d6:6f:39:46:07:33:a9:28:c1:de:ba:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
        Validity
            Not Before: Nov  8 23:01:10 2025 GMT
            Not After : Nov  9 23:01:10 2025 GMT
        Subject: CN=b7ef7812d16f173fb98d41013635ae5b8f191766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:58:bd:ba:9f:35:49:04:ba:78:db:76:0b:
                    d1:93:02:b3:4d:5e:ef:19:68:4d:a1:7f:e0:0d:d7:
                    c9:72:17:7e:83:1b:c3:fe:5b:42:41:da:ee:61:8d:
                    48:6e:87:1e:e8:89:a2:6e:fc:bd:87:ba:00:42:9b:
                    14:8c:ca:57:9c:6b:c0:26:0a:ba:3e:11:9a:2b:ae:
                    a8:1d:b3:fb:56:37:f6:0c:1f:45:48:a4:28:6d:98:
                    f9:7e:d3:b4:56:33:b7:39:3e:9b:66:26:5e:00:40:
                    29:a7:c2:6a:7f:96:85:b5:7a:5f:1b:cb:fa:81:4d:
                    cf:2b:64:70:d8:8e:dc:2a:75:17:93:33:6f:d2:da:
                    40:d3:b2:83:7f:17:56:ca:71:b3:b4:fe:b9:1d:07:
                    4f:b1:ee:24:fe:2d:b0:ce:bd:c0:29:f5:43:d2:40:
                    f5:5f:76:b8:e8:ef:1b:bc:e7:10:6e:63:1b:42:13:
                    18:a8:56:f3:36:35:e0:8b:a5:46:b9:13:81:2e:6b:
                    b6:6f:0b:85:5a:39:82:e1:34:fd:ab:80:b9:28:21:
                    60:4a:69:c6:08:1c:02:7f:93:ed:36:4a:ae:1f:1c:
                    ab:4e:1c:9e:4c:eb:cd:3f:a7:c5:18:fb:5d:13:6a:
                    64:f8:18:3c:60:77:99:38:3d:ec:6a:5a:36:73:5c:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:78:12:D1:6F:17:3F:B9:8D:41:01:36:35:AE:5B:8F:19:17:66
            X509v3 Authority Key Identifier:
                keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:f8:9c:04:a1:08:89:1c:5f:cb:5c:f4:58:9a:08:82:49:
         b1:54:5c:3c:50:3c:05:be:cc:47:28:38:73:12:c5:1b:da:3a:
         81:b6:8f:7a:db:58:77:23:0c:eb:85:05:d8:77:c8:63:18:e2:
         3c:5a:c0:df:47:1b:8f:af:7a:b4:71:29:21:65:e8:aa:bb:bc:
         78:2f:16:ce:b2:dd:9e:a5:1d:bd:77:35:33:63:f8:39:65:53:
         ec:2c:74:57:78:98:25:a9:ce:af:8c:fe:b2:ad:90:87:e0:89:
         ca:9c:7f:b2:c6:ed:6e:37:1d:fc:02:04:77:d3:0e:e8:af:ff:
         25:23:ad:bc:25:41:19:96:3d:4d:1d:67:96:2f:1f:83:d6:c3:
         5d:47:b3:c1:25:80:ad:db:41:93:70:a4:a9:5c:18:5d:14:06:
         71:d6:74:0e:11:62:8d:ef:12:85:68:1e:39:5d:00:c3:9f:64:
         02:15:8d:8e:c0:45:7f:ca:cd:b6:62:bb:a5:b3:b1:a7:8f:6e:
         91:46:7b:20:65:df:a7:1c:1a:4e:ac:ef:6e:db:38:8b:58:40:
         1e:56:2c:1b:89:22:d9:cb:90:17:7d:f2:10:ea:94:7a:c8:7a:
         31:93:fd:dd:47:70:07:4a:b2:d5:fe:bd:9d:c6:84:02:66:e8:
         e1:2b:11:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpls8HWbzlGBzOpKMHeuhCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjUxMTA4MjMwMTEwWhcNMjUxMTA5MjMwMTEwWjAzMTEwLwYDVQQD
EyhiN2VmNzgxMmQxNmYxNzNmYjk4ZDQxMDEzNjM1YWU1YjhmMTkxNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFxYvbqfNUkEunjbdgvRkwKzTV7v
GWhNoX/gDdfJchd+gxvD/ltCQdruYY1Iboce6Imibvy9h7oAQpsUjMpXnGvAJgq6
PhGaK66oHbP7Vjf2DB9FSKQobZj5ftO0VjO3OT6bZiZeAEApp8Jqf5aFtXpfG8v6
gU3PK2Rw2I7cKnUXkzNv0tpA07KDfxdWynGztP65HQdPse4k/i2wzr3AKfVD0kD1
X3a46O8bvOcQbmMbQhMYqFbzNjXgi6VGuROBLmu2bwuFWjmC4TT9q4C5KCFgSmnG
CBwCf5PtNkquHxyrThyeTOvNP6fFGPtdE2pk+Bg8YHeZOD3salo2c1xkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfveBLRbxc/uY1BATY1rluPGRdmMB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw
LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnv4nASh
CIkcX8tc9FiaCIJJsVRcPFA8Bb7MRyg4cxLFG9o6gbaPettYdyMM64UF2HfIYxji
PFrA30cbj696tHEpIWXoqru8eC8WzrLdnqUdvXc1M2P4OWVT7Cx0V3iYJanOr4z+
sq2Qh+CJypx/ssbtbjcd/AIEd9MO6K//JSOtvCVBGZY9TR1nli8fg9bDXUezwSWA
rdtBk3CkqVwYXRQGcdZ0DhFije8ShWgeOV0Aw59kAhWNjsBFf8rNtmK7pbOxp49u
kUZ7IGXfpxwaTqzvbts4i1hAHlYsG4ki2cuQF33yEOqUesh6MZP93UdwB0qy1f69
ncaEAmbo4SsRBA==
-----END CERTIFICATE-----
Generated at Sun Nov 9 03:59:18 2025 by rpki-client