Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File:                     vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier:          zji1vTv/h3Kj7ZxyDtyQJbrALqtqeWYSBM1bhtX2Pzc=
Subject key identifier:   27:70:E4:93:2A:F7:3F:1F:4F:AE:ED:64:5E:E4:EB:83:3E:1D:23:96
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       019A725CB649D609832C95C641D7ACF1BD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number:          1724
Signing time:             Tue 11 Nov 2025 10:01:09 +0000
Manifest this update:     Tue 11 Nov 2025 10:01:09 +0000
Manifest next update:     Wed 12 Nov 2025 10:01:09 +0000
Files and hashes:         1: 3alv3XwEbOFu7iiK8LFbOce6T6M.roa (hash: 0D37DkikXSNhNHk7nw4gpplDRFgdjXDIi3MfBRU1TWY=)
                          2: QfCE84C5mXjE3pc-vv8Z3PN8Ftc.roa (hash: fWz5/zlEwc/FfIJ7uTaCeiVlT5ulVNUEAcYZgSkvI+4=)
                          3: UKSPoLqIB9OwePcX6MiaKIQ_BKk.roa (hash: r2Jdc8SrerX8AADHr5ZXdXpVsMbJMBhTSOZg2PzUZsc=)
                          4: XuYgpmXug2q0Cu_sdJBe-1XGD2I.roa (hash: joQ8DCTmx5DI+ZzMDXT+0TtQtcaVPpX4LENPUyxWUVI=)
                          5: bl1f-poGtLSo5yagSqXyluvVirs.roa (hash: cpYv0yRUyLmXhceQZE6Ke54aLJ1RjsI2p0KUhTzYBqQ=)
                          6: dYt1KKj4tCGLif9Uw-PUq5XSPt0.roa (hash: VRn5rOavF3Z1TUQt1A8oCfFVCQrXkGJKkkqLjlnItNg=)
                          7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: 5dW7gQL+w9ClTyOV/Jrba/ZoTABKF0hsEH2psLi7cRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:b6:49:d6:09:83:2c:95:c6:41:d7:ac:f1:bd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: Nov 11 10:01:09 2025 GMT
            Not After : Nov 12 10:01:09 2025 GMT
        Subject: CN=2770e4932af73f1f4faeed645ee4eb833e1d2396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:97:3c:f3:73:a7:e7:5f:c9:da:74:3a:ba:
                    30:bf:c3:00:c2:be:f5:8e:8b:bc:6f:10:45:44:46:
                    7b:1a:cf:64:e7:ec:74:ab:36:d9:b3:95:67:41:cd:
                    dc:64:80:e5:3b:25:d7:0a:0d:95:ea:0d:cd:e7:d7:
                    35:ae:81:ec:52:8a:e2:fa:f7:23:ea:eb:bc:ae:34:
                    e9:64:a8:8a:a3:77:b3:64:d7:92:14:f1:b6:1a:1e:
                    d1:39:8f:f3:29:73:ce:73:b5:38:57:46:78:31:c4:
                    52:76:d3:e9:cc:d2:ba:22:38:22:55:bf:b6:db:6a:
                    8d:f2:85:f6:24:77:ec:c4:bf:ee:5d:51:27:72:eb:
                    05:20:ec:0e:fa:e2:f7:1e:88:8d:71:65:54:39:1e:
                    c7:f1:fb:53:a1:03:ff:5d:41:47:64:e1:57:c1:0d:
                    7b:c1:30:90:3f:3a:c0:a8:8c:7f:1d:07:06:f5:67:
                    0e:50:e5:56:ce:42:82:33:56:c6:05:92:d0:21:6e:
                    db:0b:d9:7e:73:16:ef:6d:f4:80:da:54:c0:8e:24:
                    ed:9b:85:ab:f3:82:4b:f2:8d:58:83:2f:2f:4b:eb:
                    f1:ff:b6:52:ed:72:96:41:bc:79:c7:7d:0b:f6:be:
                    69:85:62:34:5e:fd:09:76:a9:87:e6:c9:5a:1a:45:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:70:E4:93:2A:F7:3F:1F:4F:AE:ED:64:5E:E4:EB:83:3E:1D:23:96
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:77:6f:34:8a:96:71:e2:73:2f:30:6b:06:2b:62:ed:9e:db:
         31:fd:f2:0b:c7:0d:1a:5e:41:63:3e:b4:fb:67:d4:95:ed:be:
         a6:28:21:60:c5:5e:a0:38:f6:e7:2c:a5:3e:9c:1a:5c:49:0e:
         38:09:25:7a:46:76:d2:a4:f2:b6:db:cc:ae:d8:73:12:68:14:
         1d:93:7d:1a:a9:8a:cd:1a:07:eb:96:0b:3b:13:06:71:02:d7:
         92:14:b4:df:d7:38:7d:1b:9e:de:d6:51:db:28:86:bd:b5:9a:
         4e:82:f5:d5:c7:72:e6:27:f6:6a:14:93:8c:7f:47:a4:f7:a9:
         1c:b2:7e:85:94:d9:af:6c:5e:0a:91:28:95:33:3f:d1:64:40:
         33:48:8f:cc:f2:81:d7:c2:d0:17:4f:70:a4:78:42:04:09:47:
         72:b9:a1:d6:cb:83:ec:06:33:03:f8:d8:e8:ba:ca:15:9d:22:
         dc:b9:cf:9c:f0:b4:d4:0a:96:c6:04:e9:2e:d9:f9:6e:77:59:
         2b:f4:71:cc:22:7b:b2:43:54:81:1b:0d:47:99:9d:b5:5f:d9:
         c0:09:07:fb:46:13:34:ef:bb:3b:a5:31:c4:74:9e:4b:2d:4a:
         f2:96:81:ee:e8:83:23:bf:3c:66:c3:53:d2:5c:20:17:2a:25:
         23:af:4a:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXLZJ1gmDLJXGQdes8b0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx
MWZkMTAwHhcNMjUxMTExMTAwMTA5WhcNMjUxMTEyMTAwMTA5WjAzMTEwLwYDVQQD
EygyNzcwZTQ5MzJhZjczZjFmNGZhZWVkNjQ1ZWU0ZWI4MzNlMWQyMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1KXPPNzp+dfydp0Orowv8MAwr71
jou8bxBFREZ7Gs9k5+x0qzbZs5VnQc3cZIDlOyXXCg2V6g3N59c1roHsUori+vcj
6uu8rjTpZKiKo3ezZNeSFPG2Gh7ROY/zKXPOc7U4V0Z4McRSdtPpzNK6IjgiVb+2
22qN8oX2JHfsxL/uXVEncusFIOwO+uL3HoiNcWVUOR7H8ftToQP/XUFHZOFXwQ17
wTCQPzrAqIx/HQcG9WcOUOVWzkKCM1bGBZLQIW7bC9l+cxbvbfSA2lTAjiTtm4Wr
84JL8o1Ygy8vS+vx/7ZS7XKWQbx5x30L9r5phWI0Xv0JdqmH5slaGkUC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdw5JMq9z8fT67tZF7k64M+HSOWMB8GA1UdIwQY
MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt
MjFkZjU1YmE5ZWJmLzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm
LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVndvNIqW
ceJzLzBrBiti7Z7bMf3yC8cNGl5BYz60+2fUle2+pighYMVeoDj25yylPpwaXEkO
OAklekZ20qTyttvMrthzEmgUHZN9GqmKzRoH65YLOxMGcQLXkhS039c4fRue3tZR
2yiGvbWaToL11cdy5if2ahSTjH9HpPepHLJ+hZTZr2xeCpEolTM/0WRAM0iPzPKB
18LQF09wpHhCBAlHcrmh1suD7AYzA/jY6LrKFZ0i3LnPnPC01AqWxgTpLtn5bndZ
K/RxzCJ7skNUgRsNR5mdtV/ZwAkH+0YTNO+7O6UxxHSeSy1K8paB7uiDI788ZsNT
0lwgFyolI69KNg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client