Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          /dTnnFcAEHZR4882b7WI7fZn56E4a6i1/5Bo/8dxaK8=
Subject key identifier:   31:B6:86:42:AD:FC:F8:33:F2:58:E9:7D:87:69:73:7A:90:41:6B:00
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       0197B6A11C2CED8F0909D916B26386D305FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          0515
Signing time:             Sat 28 Jun 2025 13:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:41 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: 10E+gfGmOJOGTQTOIoh2L7s7XWXy9oTNrk/cSLdV7Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:1c:2c:ed:8f:09:09:d9:16:b2:63:86:d3:05:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Jun 28 13:01:41 2025 GMT
            Not After : Jun 29 13:01:41 2025 GMT
        Subject: CN=31b68642adfcf833f258e97d8769737a90416b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:b6:c1:55:47:62:ce:19:ea:3c:46:ac:6a:
                    e4:e9:9b:5b:6a:46:56:11:2d:1d:db:de:0e:51:89:
                    4f:3c:a2:75:d8:38:22:d3:3e:7e:2a:d2:1b:bc:44:
                    05:21:02:00:d9:37:0a:16:d3:98:52:05:cc:7e:34:
                    bb:ad:3a:ca:e2:9f:b1:2a:60:f8:4b:fd:8d:3f:5a:
                    88:43:7a:58:41:bb:7d:1c:83:c4:56:06:8c:5c:0e:
                    d9:c6:1c:85:c2:91:84:42:f4:39:b7:de:a2:c7:fd:
                    2f:cb:61:35:b9:51:ff:19:f8:4c:c2:8a:08:d3:f6:
                    9e:69:fb:fc:d2:90:75:f3:11:47:c6:e8:0b:af:d9:
                    d9:4b:91:f1:f6:37:56:f8:a3:87:2d:64:56:e1:0d:
                    3b:d6:ad:4b:28:42:b5:69:e9:47:0a:52:b1:2d:a2:
                    ba:cb:46:4b:c8:4a:37:b1:05:6b:30:50:ae:bb:65:
                    8b:a8:de:2d:52:43:a9:4e:48:a1:25:85:37:e2:9c:
                    aa:14:a4:9c:03:ce:db:97:db:5c:53:9e:b1:84:b8:
                    7a:bd:a3:01:86:b4:ab:95:e2:05:75:60:85:3c:9d:
                    e6:dd:b9:3e:3b:58:9d:53:0a:36:97:59:3a:72:dc:
                    ff:1c:5d:24:0a:b8:6c:01:ab:5b:2f:d8:41:a8:40:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B6:86:42:AD:FC:F8:33:F2:58:E9:7D:87:69:73:7A:90:41:6B:00
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:f4:36:4f:4f:c1:a3:e9:f7:92:85:5c:57:e6:da:39:ee:
         22:a4:bc:99:b4:24:01:27:ce:7a:26:13:03:2e:99:ba:7b:42:
         25:a2:08:40:9f:3d:a6:16:32:bd:1e:1c:c6:9a:41:cd:df:a3:
         39:f1:db:dd:4f:9a:c6:6c:f7:54:e8:46:d7:b8:22:90:b6:41:
         31:fc:08:0c:9d:f8:0e:e6:40:b9:01:de:42:80:5d:aa:d9:e8:
         e5:eb:eb:3b:37:bf:e8:a5:1b:79:33:56:0a:c7:02:bc:64:2c:
         46:16:bc:e4:51:58:e8:eb:df:13:25:49:d9:8b:90:09:ba:4f:
         7a:65:b3:05:4e:5d:f8:e0:7f:4b:e4:8f:59:f1:a8:71:4f:ba:
         27:f8:59:11:99:1b:7c:71:18:fb:39:1a:2c:f4:a9:98:3e:52:
         97:be:f5:3b:ba:20:d3:34:98:20:95:6d:4f:2c:c4:e4:33:e1:
         29:75:46:d8:16:b9:43:c5:3b:49:c1:70:aa:b8:98:18:f4:97:
         58:6f:19:bc:41:3a:9c:af:ed:79:2c:05:6c:9f:04:09:ad:2b:
         5c:d9:cd:3b:c3:98:ae:e3:68:55:3c:d2:8d:d9:7f:0e:a6:65:
         c4:0c:57:fd:b5:a6:fa:18:da:6d:f1:b9:bd:8e:4a:ac:0d:c8:
         95:1d:f2:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRws7Y8JCdkWsmOG0wX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDA4NjM0Y2ZhNWU4MTY2OTNjMmI3OWUyZThiOGFlZWJh
ZjU5NzYwHhcNMjUwNjI4MTMwMTQxWhcNMjUwNjI5MTMwMTQxWjAzMTEwLwYDVQQD
EygzMWI2ODY0MmFkZmNmODMzZjI1OGU5N2Q4NzY5NzM3YTkwNDE2YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KO2wVVHYs4Z6jxGrGrk6ZtbakZW
ES0d294OUYlPPKJ12Dgi0z5+KtIbvEQFIQIA2TcKFtOYUgXMfjS7rTrK4p+xKmD4
S/2NP1qIQ3pYQbt9HIPEVgaMXA7ZxhyFwpGEQvQ5t96ix/0vy2E1uVH/GfhMwooI
0/aeafv80pB18xFHxugLr9nZS5Hx9jdW+KOHLWRW4Q071q1LKEK1aelHClKxLaK6
y0ZLyEo3sQVrMFCuu2WLqN4tUkOpTkihJYU34pyqFKScA87bl9tcU56xhLh6vaMB
hrSrleIFdWCFPJ3m3bk+O1idUwo2l1k6ctz/HF0kCrhsAatbL9hBqEDcTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG2hkKt/Pgz8ljpfYdpc3qQQWsAMB8GA1UdIwQY
MBaAFFXQhjTPpegWaTwreeLouK7rr1l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEt
MDU3NWQwYTQ2YmFhLzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEtMDU3NWQwYTQ2YmFh
LzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaX0Nk9P
waPp95KFXFfm2jnuIqS8mbQkASfOeiYTAy6ZuntCJaIIQJ89phYyvR4cxppBzd+j
OfHb3U+axmz3VOhG17gikLZBMfwIDJ34DuZAuQHeQoBdqtno5evrOze/6KUbeTNW
CscCvGQsRha85FFY6OvfEyVJ2YuQCbpPemWzBU5d+OB/S+SPWfGocU+6J/hZEZkb
fHEY+zkaLPSpmD5Sl771O7og0zSYIJVtTyzE5DPhKXVG2Ba5Q8U7ScFwqriYGPSX
WG8ZvEE6nK/teSwFbJ8ECa0rXNnNO8OYruNoVTzSjdl/DqZlxAxX/bWm+hjabfG5
vY5KrA3IlR3yXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:41 2025 by rpki-client