Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          7kt8zJ0VBq8GdNFhWb0OH6UdxagemmITIf3pw8TvL8w=
Subject key identifier:   4C:8B:B7:6A:95:D5:B4:27:EB:52:16:D0:E1:04:9C:B2:DB:90:5C:48
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       0196B7B579AC59DADA54FD83101007901630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          152E
Signing time:             Sat 10 May 2025 01:00:45 +0000
Manifest this update:     Sat 10 May 2025 01:00:45 +0000
Manifest next update:     Sun 11 May 2025 01:00:45 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: 9Q4JmvH4QxquNGVO9RweXqPcdSUzoQzbBnNsJd/gKRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:79:ac:59:da:da:54:fd:83:10:10:07:90:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: May 10 01:00:45 2025 GMT
            Not After : May 11 01:00:45 2025 GMT
        Subject: CN=4c8bb76a95d5b427eb5216d0e1049cb2db905c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:ef:0f:99:93:76:9f:8d:87:63:76:5c:65:
                    cb:d3:42:2b:0c:39:ff:54:52:2d:3d:28:c4:a2:02:
                    47:29:c4:9f:cd:ba:2b:60:d8:25:0d:2e:64:f3:01:
                    3f:33:07:c3:35:0d:d2:4e:46:a5:6d:71:be:40:91:
                    97:9c:70:8f:6f:a4:15:1c:42:f0:01:28:65:ad:06:
                    ec:dc:1f:34:8c:ea:8c:cb:f9:1b:3c:ac:04:c1:da:
                    b1:01:a9:25:d9:02:be:eb:87:d1:ad:49:fa:82:4e:
                    8b:97:15:8f:67:00:50:e6:04:70:83:d6:4c:f5:2a:
                    d4:da:73:c5:38:90:25:9f:17:a7:9c:91:6f:d6:00:
                    8e:b6:e8:ac:06:5b:46:03:01:dd:e6:ae:8f:03:95:
                    be:3d:f5:cc:31:73:7f:f2:70:27:d1:32:88:72:53:
                    d6:36:4c:02:d9:5f:42:94:e9:0d:72:ca:2a:b5:44:
                    1f:f9:58:c9:8a:93:ae:b6:3c:f4:2c:a5:91:ed:b0:
                    83:19:b3:46:de:60:9f:98:92:43:39:5c:e7:4b:ae:
                    c4:72:82:24:81:64:ea:50:dc:c8:8f:18:20:57:7b:
                    bc:70:6e:93:78:67:de:15:a5:01:a0:36:69:4a:44:
                    75:69:85:ab:ae:50:1e:45:4a:c9:7f:bf:ed:25:28:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:B7:6A:95:D5:B4:27:EB:52:16:D0:E1:04:9C:B2:DB:90:5C:48
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1e:a8:2d:dc:01:a2:da:0d:3a:09:12:0a:ad:bc:5a:24:48:
         ad:53:3b:19:aa:1a:16:08:5e:00:71:eb:18:41:c4:49:15:c1:
         8d:e0:c7:e3:8f:43:44:33:a5:b4:66:a5:ff:2b:10:b0:c1:e1:
         cb:47:cc:29:e7:08:fb:bc:20:40:85:e4:5c:6f:8b:a1:80:db:
         2c:81:31:86:80:f1:83:72:4c:41:1b:c8:b3:70:c8:a9:39:fe:
         75:1c:72:88:ee:81:c2:f0:5c:48:66:bd:ae:31:eb:fb:64:95:
         3e:91:c1:4a:e9:bf:cd:e7:66:0d:92:83:b4:e1:33:2b:a8:d6:
         fc:67:18:69:17:18:2e:7b:53:fc:9c:23:02:65:90:36:45:c0:
         90:66:f7:af:cd:96:e2:31:ac:73:9d:77:c3:9d:f3:d7:9a:6b:
         ab:85:84:1f:d5:cc:f4:90:ab:48:1b:8b:89:ea:95:1f:de:00:
         94:6a:48:c3:cc:f7:bc:02:f6:5e:d5:4c:52:68:c0:5a:c7:12:
         6b:bf:ac:d6:35:4a:4d:bb:b3:8d:36:82:59:e0:8e:49:cb:73:
         41:85:f6:34:b3:1d:dc:48:73:db:00:b0:78:f8:af:e8:6b:be:
         0d:14:6a:50:d4:48:db:40:a2:0c:31:1b:7d:2d:aa:2e:b5:d5:
         7d:e7:10:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tXmsWdraVP2DEBAHkBYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjgyMjE0ZjU0Mzc5ZDdiMzRlMWExMDNkNjU4YTEzMWU3
MDE4MWIwHhcNMjUwNTEwMDEwMDQ1WhcNMjUwNTExMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg0YzhiYjc2YTk1ZDViNDI3ZWI1MjE2ZDBlMTA0OWNiMmRiOTA1YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrPvD5mTdp+Nh2N2XGXL00IrDDn/
VFItPSjEogJHKcSfzborYNglDS5k8wE/MwfDNQ3STkalbXG+QJGXnHCPb6QVHELw
AShlrQbs3B80jOqMy/kbPKwEwdqxAakl2QK+64fRrUn6gk6LlxWPZwBQ5gRwg9ZM
9SrU2nPFOJAlnxennJFv1gCOtuisBltGAwHd5q6PA5W+PfXMMXN/8nAn0TKIclPW
NkwC2V9ClOkNcsoqtUQf+VjJipOutjz0LKWR7bCDGbNG3mCfmJJDOVznS67EcoIk
gWTqUNzIjxggV3u8cG6TeGfeFaUBoDZpSkR1aYWrrlAeRUrJf7/tJSgogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyLt2qV1bQn61IW0OEEnLLbkFxIMB8GA1UdIwQY
MBaAFFb4IhT1Q3nXs04aED1lihMecBgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTkt
ZTU4MDllYmUyZDRiLzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTktZTU4MDllYmUyZDRi
LzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh6oLdwB
otoNOgkSCq28WiRIrVM7GaoaFgheAHHrGEHESRXBjeDH449DRDOltGal/ysQsMHh
y0fMKecI+7wgQIXkXG+LoYDbLIExhoDxg3JMQRvIs3DIqTn+dRxyiO6BwvBcSGa9
rjHr+2SVPpHBSum/zedmDZKDtOEzK6jW/GcYaRcYLntT/JwjAmWQNkXAkGb3r82W
4jGsc513w53z15prq4WEH9XM9JCrSBuLieqVH94AlGpIw8z3vAL2XtVMUmjAWscS
a7+s1jVKTbuzjTaCWeCOSctzQYX2NLMd3Ehz2wCwePiv6Gu+DRRqUNRI20CiDDEb
fS2qLrXVfecQWA==
-----END CERTIFICATE-----
Generated at Sat May 10 06:58:24 2025 by rpki-client