Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File:                     vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier:          BuUi+ydaaKDkZQkKsWvgV+FbkhYIYvsWX/PO7+YwQA0=
Subject key identifier:   73:D5:49:DC:6C:5C:B3:96:85:75:8B:67:2A:49:90:F6:86:B2:12:72
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer:       /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial:       0199228D015BF6B9A44477BF26263B113C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number:          0753
Signing time:             Sun 07 Sep 2025 05:01:30 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:30 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:30 +0000
Files and hashes:         1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 6aLq1ySwSob9ZmcozZc6R6gktoh+bgzlhzzO7pQ8KPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:01:5b:f6:b9:a4:44:77:bf:26:26:3b:11:3c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
        Validity
            Not Before: Sep  7 05:01:30 2025 GMT
            Not After : Sep  8 05:01:30 2025 GMT
        Subject: CN=73d549dc6c5cb39685758b672a4990f686b21272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:8e:e6:be:b1:cf:ce:87:8a:69:0c:d6:c0:
                    38:64:58:be:63:1a:eb:65:5c:34:88:51:9e:c7:08:
                    ba:6c:02:74:55:77:cc:ed:25:64:c0:dd:cf:7e:f1:
                    9c:86:8d:53:01:70:73:e7:a7:97:a7:99:56:0d:79:
                    b9:3f:88:92:2b:58:2c:7a:6b:f8:3c:15:fa:f7:fb:
                    c3:5c:3d:bf:c1:62:04:16:b0:ee:b1:79:02:fb:8f:
                    79:bd:e0:fd:e8:c7:c5:2b:ef:45:2c:11:54:f1:02:
                    a9:80:62:79:71:a7:e9:8e:81:c7:55:1c:30:16:c2:
                    e2:f2:b8:8b:ba:9a:4c:42:c6:79:a5:5a:0c:61:44:
                    92:63:6f:59:50:89:65:78:0a:34:b6:1c:88:27:31:
                    ae:8b:f9:b3:6e:ea:07:83:88:a0:e3:5a:ca:dd:e3:
                    52:dd:99:c0:38:8d:ac:a5:d2:40:2c:d7:64:ac:9e:
                    a6:2a:38:2d:23:06:0f:2a:52:65:36:7a:f7:a7:37:
                    6a:fe:cd:21:56:ff:ad:9b:4b:b8:78:99:ab:84:13:
                    af:02:2c:99:89:81:7c:3f:b6:ca:3d:f4:21:7a:69:
                    80:0a:c2:33:f4:f1:23:ef:17:bc:f2:61:53:57:43:
                    91:1f:d6:a4:ea:a9:9f:46:05:5f:68:e7:da:12:22:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:49:DC:6C:5C:B3:96:85:75:8B:67:2A:49:90:F6:86:B2:12:72
            X509v3 Authority Key Identifier:
                keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:83:a9:43:f7:12:34:52:f7:d4:f2:51:ca:ea:0a:bd:53:2f:
         46:2d:80:ae:32:01:e3:d5:aa:01:6e:bb:23:f3:38:a0:12:b5:
         ce:84:f6:69:c7:20:bf:63:c3:ee:1c:e6:01:e3:81:74:52:21:
         7b:65:49:11:34:42:c6:44:c6:06:34:1f:ae:d0:9d:0f:a8:ea:
         1f:6c:27:6b:d7:7c:a8:c0:ef:8a:aa:ec:fe:3b:84:f8:ac:25:
         40:73:51:98:f2:bc:e7:2e:52:29:cc:f9:5f:92:cb:66:1b:fa:
         e0:4c:23:3e:31:e5:ca:10:f6:20:4b:b1:30:d5:2e:b7:42:57:
         8d:9e:ca:88:1c:4f:d7:8d:fb:d3:97:6f:f7:56:9d:a8:6e:39:
         0d:ff:66:f5:cc:b2:14:cd:83:98:7f:51:81:1b:ba:f2:0d:d9:
         c9:23:dc:e9:dc:c3:72:fe:0a:be:c5:91:2b:1e:6d:9a:d7:83:
         8e:53:7a:dd:da:6a:34:cc:78:27:ef:32:47:dc:01:a6:78:bd:
         66:da:40:b7:26:8d:9e:8d:2a:5f:b9:37:c8:48:c1:df:d3:95:
         98:df:1a:d5:64:53:e4:72:9b:e8:c9:11:8e:56:5e:69:43:a7:
         42:0b:53:f4:8f:2d:80:7d:63:e5:2b:6e:00:68:cd:c8:69:1c:
         05:d0:f9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijQFb9rmkRHe/JiY7ETwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMDVlYWM3YzNhZjUzNTUxYzllNjIzNjUzZGQzYWQ3ZGYx
NTU0YmIwHhcNMjUwOTA3MDUwMTMwWhcNMjUwOTA4MDUwMTMwWjAzMTEwLwYDVQQD
Eyg3M2Q1NDlkYzZjNWNiMzk2ODU3NThiNjcyYTQ5OTBmNjg2YjIxMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZuO5r6xz86HimkM1sA4ZFi+Yxrr
ZVw0iFGexwi6bAJ0VXfM7SVkwN3PfvGcho1TAXBz56eXp5lWDXm5P4iSK1gsemv4
PBX69/vDXD2/wWIEFrDusXkC+495veD96MfFK+9FLBFU8QKpgGJ5cafpjoHHVRww
FsLi8riLuppMQsZ5pVoMYUSSY29ZUIlleAo0thyIJzGui/mzbuoHg4ig41rK3eNS
3ZnAOI2spdJALNdkrJ6mKjgtIwYPKlJlNnr3pzdq/s0hVv+tm0u4eJmrhBOvAiyZ
iYF8P7bKPfQhemmACsIz9PEj7xe88mFTV0ORH9ak6qmfRgVfaOfaEiLYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPVSdxsXLOWhXWLZypJkPaGshJyMB8GA1UdIwQY
MBaAFL4F6sfDr1NVHJ5iNlPdOtffFVS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTkt
Y2ZkYWFjMGE2MmRiLzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTktY2ZkYWFjMGE2MmRi
LzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYOpQ/cS
NFL31PJRyuoKvVMvRi2ArjIB49WqAW67I/M4oBK1zoT2accgv2PD7hzmAeOBdFIh
e2VJETRCxkTGBjQfrtCdD6jqH2wna9d8qMDviqrs/juE+KwlQHNRmPK85y5SKcz5
X5LLZhv64EwjPjHlyhD2IEuxMNUut0JXjZ7KiBxP143705dv91adqG45Df9m9cyy
FM2DmH9RgRu68g3ZySPc6dzDcv4KvsWRKx5tmteDjlN63dpqNMx4J+8yR9wBpni9
ZtpAtyaNno0qX7k3yEjB39OVmN8a1WRT5HKb6MkRjlZeaUOnQgtT9I8tgH1j5Stu
AGjNyGkcBdD5+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client