Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          iWlozR6j0N3bsFFmeAvuLE0uFDeytwQdYpZIDhDag40=
Subject key identifier:   43:67:C2:31:F0:66:D4:8D:6F:73:2C:ED:A3:0E:8F:7F:79:05:0B:5F
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019931250A7F9DD1873239AF4F8AF27742F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          1678
Signing time:             Wed 10 Sep 2025 01:02:14 +0000
Manifest this update:     Wed 10 Sep 2025 01:02:14 +0000
Manifest next update:     Thu 11 Sep 2025 01:02:14 +0000
Files and hashes:         1: AsLBu-KLF_eIlciVtmCw6FoQZWI.roa (hash: Uxf292him4J1J69/hFLIe30svhXR87gNziaZeS20lGA=)
                          2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: MWCmfyjcBvbeTQspDxrgLRSHdft/i6n4Q/KjcbpwPBI=)
                          3: oi9YFEbcvlN5alPq7ixyYhFrq48.roa (hash: ADhZ+05HO4hub6uw9RxwuVi7MstO4VKG0zRMmKQDcKA=)
                          4: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:25:0a:7f:9d:d1:87:32:39:af:4f:8a:f2:77:42:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Sep 10 01:02:14 2025 GMT
            Not After : Sep 11 01:02:14 2025 GMT
        Subject: CN=4367c231f066d48d6f732ceda30e8f7f79050b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:dc:12:9a:35:11:0c:33:d4:30:21:18:0e:
                    bd:45:b5:bf:2e:1e:d7:42:03:ef:56:ff:55:00:67:
                    6a:2a:e9:2e:49:9b:61:28:29:fe:9c:d8:f3:9c:76:
                    49:82:d2:5d:40:fd:6e:19:df:ae:06:95:f5:21:1c:
                    4a:20:d3:d5:42:52:61:a8:b2:92:c6:87:6d:21:87:
                    b6:33:0b:35:8f:d2:4b:2e:ff:9b:88:c0:36:6d:72:
                    6b:2d:63:45:6d:8c:59:a6:ab:c2:b5:e1:64:f6:58:
                    9a:c4:06:d7:fc:0a:47:bb:eb:7e:b8:5a:1a:dc:09:
                    30:33:16:e6:76:8d:56:6c:21:a0:64:1b:a7:56:d1:
                    16:86:7a:6d:4d:bb:ff:e9:cb:83:bf:b4:59:cc:28:
                    7e:f5:ae:03:0f:37:70:5c:d8:27:c4:25:07:9e:2d:
                    1e:17:f8:37:e0:ab:98:c2:83:04:bf:57:8f:e1:1b:
                    64:5d:c0:34:bd:8b:bc:3f:aa:9d:80:28:97:1a:d3:
                    45:78:b7:20:1d:74:18:44:a9:d8:a3:23:11:89:95:
                    15:6d:44:b1:d4:c1:0d:d8:cd:b6:1e:92:67:db:f0:
                    9d:92:f0:6d:4c:4c:d4:1d:dc:af:0b:32:f3:6c:7d:
                    a9:29:06:fc:4e:4c:89:80:ee:0f:13:12:a5:2f:36:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:C2:31:F0:66:D4:8D:6F:73:2C:ED:A3:0E:8F:7F:79:05:0B:5F
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:42:70:8b:cb:1d:38:6d:b5:74:d1:3c:7d:32:af:ba:76:
         a4:3a:77:6f:2f:4a:83:fc:c1:f5:97:08:fd:c3:d2:ea:9e:4f:
         71:c5:70:ec:a1:c7:7e:3a:49:27:29:f0:fa:c1:af:5c:87:01:
         de:38:e8:df:4b:2d:40:f3:50:c6:ed:d7:b9:b7:b8:c8:54:49:
         9d:0e:fe:46:85:74:de:7a:22:f9:25:bc:60:d3:bb:04:70:99:
         c6:5a:cb:af:38:6a:3b:1e:a3:33:e0:28:81:65:67:cf:25:3e:
         c5:dc:68:4a:7e:f9:d2:cd:34:a3:3c:dd:2f:6b:d4:b8:af:54:
         75:68:72:1e:2f:83:fc:14:c9:6e:16:d6:43:7b:e8:44:41:05:
         85:3c:72:58:82:ac:63:57:8b:15:89:c9:20:b8:d6:d9:42:08:
         64:d2:4a:23:3e:76:42:c6:78:c9:1e:7e:47:4b:8a:9d:33:a7:
         8f:3d:d7:0e:4f:9f:aa:2a:d4:1e:37:a8:b3:69:c6:10:8d:f6:
         7b:c6:c6:6f:bf:9b:b1:a7:6d:8b:d8:7f:df:f5:e4:17:80:cb:
         bf:42:84:be:6d:b8:a5:cb:58:2e:3d:e6:11:ce:e8:6f:30:8c:
         b2:96:06:1c:6d:8f:dd:9c:b0:8b:0e:8c:1e:73:42:f7:a6:2e:
         05:2a:05:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJQp/ndGHMjmvT4ryd0L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjI0ZDg5NWJmOWMwYTVmZDAwMGE0NWEzNDc1MTBiMmEw
ODdmYjgwHhcNMjUwOTEwMDEwMjE0WhcNMjUwOTExMDEwMjE0WjAzMTEwLwYDVQQD
Eyg0MzY3YzIzMWYwNjZkNDhkNmY3MzJjZWRhMzBlOGY3Zjc5MDUwYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbrcEpo1EQwz1DAhGA69RbW/Lh7X
QgPvVv9VAGdqKukuSZthKCn+nNjznHZJgtJdQP1uGd+uBpX1IRxKINPVQlJhqLKS
xodtIYe2Mws1j9JLLv+biMA2bXJrLWNFbYxZpqvCteFk9liaxAbX/ApHu+t+uFoa
3AkwMxbmdo1WbCGgZBunVtEWhnptTbv/6cuDv7RZzCh+9a4DDzdwXNgnxCUHni0e
F/g34KuYwoMEv1eP4RtkXcA0vYu8P6qdgCiXGtNFeLcgHXQYRKnYoyMRiZUVbUSx
1MEN2M22HpJn2/CdkvBtTEzUHdyvCzLzbH2pKQb8TkyJgO4PExKlLzYuQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENnwjHwZtSNb3Ms7aMOj395BQtfMB8GA1UdIwQY
MBaAFFSyTYlb+cCl/QAKRaNHUQsqCH+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAt
ZmNiOWJkMDViMWFiLzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMjE2NzktMmFkMi00ZGY1LTgwYjAtZmNiOWJkMDViMWFi
LzEvVkxKTmlWdjV3S1g5QUFwRm8wZFJDeW9JZjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFI5CcIvL
HThttXTRPH0yr7p2pDp3by9Kg/zB9ZcI/cPS6p5PccVw7KHHfjpJJynw+sGvXIcB
3jjo30stQPNQxu3Xube4yFRJnQ7+RoV03noi+SW8YNO7BHCZxlrLrzhqOx6jM+Ao
gWVnzyU+xdxoSn750s00ozzdL2vUuK9UdWhyHi+D/BTJbhbWQ3voREEFhTxyWIKs
Y1eLFYnJILjW2UIIZNJKIz52QsZ4yR5+R0uKnTOnjz3XDk+fqirUHjeos2nGEI32
e8bGb7+bsadti9h/3/XkF4DLv0KEvm24pctYLj3mEc7obzCMspYGHG2P3Zywiw6M
HnNC96YuBSoFFA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:02:49 2025 by rpki-client