Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          7vbNTYXpPkJNbaDuMUuV1ms8Sc9iilwQ4FRNQQ1eSwk=
Subject key identifier:   A5:96:B0:8E:46:84:DA:17:83:75:54:00:9A:D9:C0:7C:CB:8A:D4:E8
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       0196C64C4E369A507E851E14B805427B2B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 21:00:11 +0000
Manifest this update:     Mon 12 May 2025 21:00:11 +0000
Manifest next update:     Tue 13 May 2025 21:00:11 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: 6Um5LZjtf4B54OO7/z9NQAt3ApotmNS0tI4+EvSgSWc=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:4e:36:9a:50:7e:85:1e:14:b8:05:42:7b:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: May 12 21:00:11 2025 GMT
            Not After : May 13 21:00:11 2025 GMT
        Subject: CN=a596b08e4684da17837554009ad9c07ccb8ad4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:f6:5e:77:fb:3b:29:15:a3:69:aa:2a:5b:
                    d9:b3:28:67:a9:77:4b:25:f9:b6:fb:f3:b2:5c:8a:
                    15:3f:02:c5:0a:23:c5:97:b1:76:ff:73:21:77:ed:
                    9f:48:85:ac:6f:13:1f:26:6c:e3:8c:a6:1d:16:d6:
                    04:c9:a4:ee:f5:69:54:60:20:9a:cd:35:27:1c:5b:
                    d7:02:72:09:25:ad:e8:26:90:ec:60:b9:41:8a:ad:
                    57:fc:82:be:6a:48:13:dd:35:d5:93:11:cb:ed:e3:
                    a0:90:51:91:71:55:9b:42:24:6e:b2:ff:f8:ac:b6:
                    1e:8b:72:cb:02:4c:7a:e4:81:94:8b:43:f8:71:e6:
                    8a:a8:3f:91:e3:a6:e7:8b:7d:64:93:c7:53:08:53:
                    66:c6:2b:0e:aa:c2:a9:4c:2d:94:e0:4f:72:6c:10:
                    0d:02:e8:d8:5b:7f:d7:ed:9d:cc:05:13:a1:9d:57:
                    03:de:51:7c:c2:8f:23:f3:26:58:41:4e:79:8e:32:
                    c4:1b:cc:88:e7:3c:44:0d:16:07:6b:48:22:8f:27:
                    48:53:65:26:4f:82:f0:10:f3:2d:0a:76:72:9a:85:
                    f3:0f:4c:da:6a:94:97:de:99:0b:99:da:98:e2:24:
                    3e:45:4e:7a:76:0a:cb:5b:1b:7d:bf:89:6c:cf:7c:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:96:B0:8E:46:84:DA:17:83:75:54:00:9A:D9:C0:7C:CB:8A:D4:E8
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:bc:e1:c0:bc:6f:59:61:94:23:05:0f:91:e4:3f:9c:66:
         f2:80:65:46:91:4c:21:b4:b6:03:bb:70:60:25:26:0c:c6:b2:
         4c:94:4b:1e:3a:8d:43:32:13:14:dc:78:1c:a3:f1:db:ef:87:
         38:e1:86:11:38:03:d0:11:f4:9d:88:db:3e:26:db:6c:9b:b0:
         00:8b:ed:27:84:54:85:ed:65:2c:12:59:cd:23:e8:10:52:c7:
         28:7a:f4:24:8d:8a:dc:fd:70:b3:9a:a4:73:2a:0e:78:e2:50:
         7c:f2:32:59:99:71:46:17:e2:0e:9f:48:ea:81:0a:bd:24:c8:
         94:b3:85:c0:f3:01:4c:59:b2:66:09:a7:8b:8c:f2:08:1d:a5:
         02:26:1c:13:1e:72:38:4f:02:b1:df:3f:bb:3f:86:c6:c8:83:
         90:79:82:02:8b:f1:b9:33:e7:26:d6:8a:93:89:b2:32:c2:1c:
         3b:e3:9b:27:d9:dc:7e:bc:d9:8d:db:6e:f5:dc:50:4e:d7:aa:
         be:38:b8:b0:fe:7c:77:71:1e:03:9c:a1:4c:fe:21:ab:87:fd:
         92:78:5e:6c:cf:e8:31:43:95:9a:8c:b2:fa:6c:14:7d:9a:10:
         85:3e:4b:53:d3:af:88:5c:bf:2e:b9:39:db:9f:5c:34:9e:d5:
         a2:24:53:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTE42mlB+hR4UuAVCeyuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NGFkYjcyYjgyZWNmYWZjNTcwNWUyNWZlYmNhYjVjODJk
NzZlZTYwHhcNMjUwNTEyMjEwMDExWhcNMjUwNTEzMjEwMDExWjAzMTEwLwYDVQQD
EyhhNTk2YjA4ZTQ2ODRkYTE3ODM3NTU0MDA5YWQ5YzA3Y2NiOGFkNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrP2Xnf7OykVo2mqKlvZsyhnqXdL
Jfm2+/OyXIoVPwLFCiPFl7F2/3Mhd+2fSIWsbxMfJmzjjKYdFtYEyaTu9WlUYCCa
zTUnHFvXAnIJJa3oJpDsYLlBiq1X/IK+akgT3TXVkxHL7eOgkFGRcVWbQiRusv/4
rLYei3LLAkx65IGUi0P4ceaKqD+R46bni31kk8dTCFNmxisOqsKpTC2U4E9ybBAN
AujYW3/X7Z3MBROhnVcD3lF8wo8j8yZYQU55jjLEG8yI5zxEDRYHa0gijydIU2Um
T4LwEPMtCnZymoXzD0zaapSX3pkLmdqY4iQ+RU56dgrLWxt9v4lsz3yDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWWsI5GhNoXg3VUAJrZwHzLitToMB8GA1UdIwQY
MBaAFFVK23K4Ls+vxXBeJf68q1yC127mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEt
NzU4NjNmNDM0NzZhLzEvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEtNzU4NjNmNDM0NzZh
LzEvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuK84cC8
b1lhlCMFD5HkP5xm8oBlRpFMIbS2A7twYCUmDMayTJRLHjqNQzITFNx4HKPx2++H
OOGGETgD0BH0nYjbPibbbJuwAIvtJ4RUhe1lLBJZzSPoEFLHKHr0JI2K3P1ws5qk
cyoOeOJQfPIyWZlxRhfiDp9I6oEKvSTIlLOFwPMBTFmyZgmni4zyCB2lAiYcEx5y
OE8Csd8/uz+GxsiDkHmCAovxuTPnJtaKk4myMsIcO+ObJ9ncfrzZjdtu9dxQTteq
vji4sP58d3EeA5yhTP4hq4f9knhebM/oMUOVmoyy+mwUfZoQhT5LU9OviFy/Lrk5
259cNJ7VoiRTwQ==
-----END CERTIFICATE-----
Generated at Tue May 13 02:23:41 2025 by rpki-client