Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier:          R2wwNTmFxzRF3xDO960xRJ37k/ikrSWYitMbsvOpdQs=
Subject key identifier:   B4:B0:9B:95:76:08:E0:D3:22:78:04:0E:5E:10:48:4A:68:CF:BE:EF
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer:       /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial:       0199221E3F555916D7805191DB250B2FAF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number:          04DD
Signing time:             Sun 07 Sep 2025 03:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:31 +0000
Files and hashes:         1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: QN0RYdpDxKKiTq53JYHu3c80GuGJWc4l2lN1lrMJaro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3f:55:59:16:d7:80:51:91:db:25:0b:2f:af:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Validity
            Not Before: Sep  7 03:00:31 2025 GMT
            Not After : Sep  8 03:00:31 2025 GMT
        Subject: CN=b4b09b957608e0d32278040e5e10484a68cfbeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:ea:ed:d8:8d:fc:e0:fa:c3:ff:00:f5:64:
                    e3:84:db:ec:53:05:f3:ba:44:ec:30:4a:12:b9:3f:
                    99:8b:4e:db:e3:2e:47:53:c4:c6:c0:9a:29:8f:2f:
                    d2:fa:70:29:61:6b:47:ac:bc:65:30:42:4e:bd:90:
                    9c:87:d4:4f:f6:59:5b:56:0e:16:da:d6:04:aa:87:
                    63:90:a6:94:d9:ef:72:1d:23:2b:a3:b7:51:03:74:
                    cd:3a:80:88:19:1c:73:26:7e:3d:1e:02:c2:f0:01:
                    56:ff:76:ab:c8:ac:6f:81:20:d1:5b:06:b0:99:47:
                    21:b1:66:c4:dc:52:2d:63:f8:ab:89:fe:2e:5e:c0:
                    6e:59:ff:1f:d5:25:1f:44:19:06:16:03:06:19:e0:
                    51:79:45:e9:6a:a6:01:c8:43:4d:5e:fa:81:20:70:
                    30:61:96:6f:ce:3a:27:80:70:a6:cc:aa:66:9c:f0:
                    c5:26:56:a6:89:b3:f4:6a:26:12:89:08:8e:38:45:
                    3e:ad:71:7a:3d:83:83:84:94:9f:3a:c3:c1:3c:92:
                    4e:2b:6a:20:23:dd:d8:05:b0:78:a2:b2:4f:fd:32:
                    63:3b:a3:53:9e:1d:5f:81:35:17:bc:a3:b4:c2:19:
                    5c:e2:ef:6b:44:c4:2b:91:9a:9a:2d:ee:a6:fe:03:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B0:9B:95:76:08:E0:D3:22:78:04:0E:5E:10:48:4A:68:CF:BE:EF
            X509v3 Authority Key Identifier:
                keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:dc:86:4e:d4:4f:e9:75:d8:62:9d:a0:3b:62:ad:2f:be:
         c4:b8:d8:2c:59:75:24:e5:58:2b:5c:12:80:8d:6b:dc:b5:4c:
         30:5b:9e:27:6f:31:85:24:63:ac:78:d2:e4:13:33:72:5a:17:
         f6:96:13:c5:34:71:a4:b7:a6:95:14:7f:ec:09:e2:24:32:e1:
         fc:fa:57:4e:07:fe:5b:91:9e:e3:65:7c:ed:51:8f:80:09:42:
         88:22:8b:3b:89:1e:4a:b8:da:d1:fa:5d:00:7f:2f:05:57:bf:
         a3:2a:1c:ff:c8:e0:4e:c3:2e:b6:8a:90:31:24:38:e5:57:2b:
         79:1f:9b:97:c6:97:5e:1d:4c:bb:94:00:4a:40:f8:3d:42:a9:
         da:35:c2:0e:02:36:ad:6d:70:e3:24:92:36:c3:12:37:dd:7a:
         d3:70:28:87:c3:ea:4b:f1:71:f0:88:4a:42:0b:6e:79:5a:5b:
         34:1c:b2:4d:49:7c:69:dd:86:3e:03:e2:df:71:94:99:1e:5b:
         df:19:ff:92:4c:00:a4:aa:6e:50:bc:9b:9e:5b:2a:5f:08:11:
         dc:97:fb:53:a9:dd:2d:6e:b6:9b:d5:d2:0f:20:3e:fc:66:d1:
         b6:0a:d1:f1:22:0c:ea:09:51:ed:f7:13:7f:d0:9b:b6:51:68:
         9c:db:ed:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHj9VWRbXgFGR2yULL68FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Zjg2ODFlZmIyZmE5ZGNkNDhjN2M0ZmFmM2Q3OGMzYTFh
ZDJkZDEwHhcNMjUwOTA3MDMwMDMxWhcNMjUwOTA4MDMwMDMxWjAzMTEwLwYDVQQD
EyhiNGIwOWI5NTc2MDhlMGQzMjI3ODA0MGU1ZTEwNDg0YTY4Y2ZiZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlzq7diN/OD6w/8A9WTjhNvsUwXz
ukTsMEoSuT+Zi07b4y5HU8TGwJopjy/S+nApYWtHrLxlMEJOvZCch9RP9llbVg4W
2tYEqodjkKaU2e9yHSMro7dRA3TNOoCIGRxzJn49HgLC8AFW/3aryKxvgSDRWwaw
mUchsWbE3FItY/irif4uXsBuWf8f1SUfRBkGFgMGGeBReUXpaqYByENNXvqBIHAw
YZZvzjongHCmzKpmnPDFJlamibP0aiYSiQiOOEU+rXF6PYODhJSfOsPBPJJOK2og
I93YBbB4orJP/TJjO6NTnh1fgTUXvKO0whlc4u9rRMQrkZqaLe6m/gNBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSwm5V2CODTIngEDl4QSEpoz77vMB8GA1UdIwQY
MBaAFFb4aB77L6nc1Ix8T689eMOhrS3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzkt
ODNhOTM1MTVjYTYzLzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzktODNhOTM1MTVjYTYz
LzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTvchk7U
T+l12GKdoDtirS++xLjYLFl1JOVYK1wSgI1r3LVMMFueJ28xhSRjrHjS5BMzcloX
9pYTxTRxpLemlRR/7AniJDLh/PpXTgf+W5Ge42V87VGPgAlCiCKLO4keSrja0fpd
AH8vBVe/oyoc/8jgTsMutoqQMSQ45VcreR+bl8aXXh1Mu5QASkD4PUKp2jXCDgI2
rW1w4ySSNsMSN91603Aoh8PqS/Fx8IhKQgtueVpbNByyTUl8ad2GPgPi33GUmR5b
3xn/kkwApKpuULybnlsqXwgR3Jf7U6ndLW62m9XSDyA+/GbRtgrR8SIM6glR7fcT
f9CbtlFonNvt/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:08 2025 by rpki-client