Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          X9YV6iWjZpG3LicZ6R7QQIOCgsGSC9V1E+eP5l/r9SY=
Subject key identifier:   8A:DB:80:17:48:2F:92:C5:90:5F:CE:DC:F0:FF:D3:48:08:87:D9:DC
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       019A1EAE3AA698B66A840A6E88DD4CF1BE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          0414
Signing time:             Sun 26 Oct 2025 04:02:05 +0000
Manifest this update:     Sun 26 Oct 2025 04:02:05 +0000
Manifest next update:     Mon 27 Oct 2025 04:02:05 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: P9/iLRlyUfBGuyMVBZJj0p3PTO9PU6oOlnYjaJ376IE=)
                          2: b9YEmpfPninMk0asKBNPcoiyaVU.roa (hash: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 04:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ae:3a:a6:98:b6:6a:84:0a:6e:88:dd:4c:f1:be:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Oct 26 04:02:05 2025 GMT
            Not After : Oct 27 04:02:05 2025 GMT
        Subject: CN=8adb8017482f92c5905fcedcf0ffd3480887d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:4f:e2:8c:64:ad:ab:3b:65:7b:25:8b:8f:
                    71:00:fb:a1:05:2c:3e:22:1f:35:01:e6:f6:97:12:
                    27:29:79:1e:e6:37:ae:e1:80:b8:3e:30:88:9d:34:
                    d0:7b:c2:cb:d5:82:d0:0f:f7:47:bd:97:a0:65:38:
                    8c:27:03:20:30:da:1c:47:e0:9e:b2:33:fd:ff:30:
                    36:f0:b6:f0:cf:ac:a2:87:55:4d:d9:e6:ea:94:4a:
                    6e:d7:b5:02:97:f3:d2:d4:e7:69:11:d8:2d:93:c0:
                    59:4e:ba:cf:00:6a:83:5d:91:db:55:01:ef:af:a0:
                    92:58:6e:03:ab:c7:42:3c:4c:84:18:50:5d:94:96:
                    a4:c1:4f:0e:88:88:15:92:81:bf:20:2d:33:ea:d2:
                    c5:f0:e4:7a:75:39:28:a6:84:6b:23:37:4d:2c:f7:
                    63:45:15:e4:41:0d:10:c4:25:87:9e:f9:62:2e:a1:
                    77:f3:fc:46:49:1f:dd:c0:a0:46:89:22:31:a5:76:
                    b9:e4:33:1c:c6:bf:19:65:4e:60:4a:67:02:b0:80:
                    ed:b6:1c:7b:d3:bd:b7:3d:e6:f4:b3:d3:c8:55:0f:
                    6c:90:97:fe:d9:72:92:3c:46:bb:ea:03:97:ec:02:
                    f4:31:f6:a6:1b:81:a2:a0:07:fa:84:25:c3:fd:b4:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:80:17:48:2F:92:C5:90:5F:CE:DC:F0:FF:D3:48:08:87:D9:DC
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:42:00:ef:2b:8c:e6:38:fe:df:5b:9c:db:72:68:fa:2c:58:
         01:8c:fc:09:1b:48:22:10:c7:bc:4f:89:c0:2b:e9:b5:19:b0:
         ab:cc:97:60:93:af:d9:77:a9:38:9a:f5:d6:24:da:f1:88:b4:
         66:a9:69:51:56:71:e0:72:44:85:ba:a4:59:33:f2:ec:12:09:
         6c:27:b1:7e:62:00:59:1b:d3:0d:39:1c:6a:1e:1c:1c:20:e1:
         b1:e6:ff:25:43:02:79:77:60:8c:16:8b:17:5e:19:2b:b2:b8:
         86:c5:6a:c6:40:3f:70:c5:97:cd:49:6d:59:08:15:c5:99:50:
         ce:a6:c5:f6:91:a2:48:25:23:ae:19:d9:c9:d6:2f:13:9f:28:
         74:17:4f:c4:b4:30:b4:47:46:96:4c:5a:20:20:fb:8e:44:72:
         4c:47:d5:9f:c0:45:22:d2:15:47:b2:23:de:c1:7c:9e:5a:06:
         17:0a:5a:31:ce:f7:93:e9:3c:9d:de:c2:95:68:1e:af:49:08:
         49:ec:93:4c:be:57:d5:6e:b3:e6:e0:a7:0b:83:39:16:fe:d9:
         48:cd:15:b3:19:e9:bb:90:80:d6:ea:c6:f2:c6:55:a6:d8:34:
         f3:8b:98:8f:17:c8:86:33:65:37:f5:7f:c6:19:23:d6:e0:1c:
         ac:69:e8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerjqmmLZqhApuiN1M8b53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4
ZTBmNmYwHhcNMjUxMDI2MDQwMjA1WhcNMjUxMDI3MDQwMjA1WjAzMTEwLwYDVQQD
Eyg4YWRiODAxNzQ4MmY5MmM1OTA1ZmNlZGNmMGZmZDM0ODA4ODdkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10BP4oxkras7ZXsli49xAPuhBSw+
Ih81Aeb2lxInKXke5jeu4YC4PjCInTTQe8LL1YLQD/dHvZegZTiMJwMgMNocR+Ce
sjP9/zA28Lbwz6yih1VN2ebqlEpu17UCl/PS1OdpEdgtk8BZTrrPAGqDXZHbVQHv
r6CSWG4Dq8dCPEyEGFBdlJakwU8OiIgVkoG/IC0z6tLF8OR6dTkopoRrIzdNLPdj
RRXkQQ0QxCWHnvliLqF38/xGSR/dwKBGiSIxpXa55DMcxr8ZZU5gSmcCsIDtthx7
0723Peb0s9PIVQ9skJf+2XKSPEa76gOX7AL0MfamG4GioAf6hCXD/bR5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrbgBdIL5LFkF/O3PD/00gIh9ncMB8GA1UdIwQY
MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt
ZTBjMmJkZmQ2NTg1LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1
LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEIA7yuM
5jj+31uc23Jo+ixYAYz8CRtIIhDHvE+JwCvptRmwq8yXYJOv2XepOJr11iTa8Yi0
ZqlpUVZx4HJEhbqkWTPy7BIJbCexfmIAWRvTDTkcah4cHCDhseb/JUMCeXdgjBaL
F14ZK7K4hsVqxkA/cMWXzUltWQgVxZlQzqbF9pGiSCUjrhnZydYvE58odBdPxLQw
tEdGlkxaICD7jkRyTEfVn8BFItIVR7Ij3sF8nloGFwpaMc73k+k8nd7ClWger0kI
SeyTTL5X1W6z5uCnC4M5Fv7ZSM0Vsxnpu5CA1urG8sZVptg084uYjxfIhjNlN/V/
xhkj1uAcrGnoqw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:18 2025 by rpki-client