Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File:                     VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier:          4u32Z62LuTal8CXvhMc92VO9gMpCO3LW+R7yZzUFzxg=
Subject key identifier:   BF:39:D9:4D:92:85:54:6C:0E:3B:32:DE:2B:E3:DB:0F:1B:4D:B8:68
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer:       /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial:       0196B220EC04D88A46FBD2556101AA358C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number:          01D4
Signing time:             Thu 08 May 2025 23:00:24 +0000
Manifest this update:     Thu 08 May 2025 23:00:24 +0000
Manifest next update:     Fri 09 May 2025 23:00:24 +0000
Files and hashes:         1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: 6BX2raGvTqDjKZs1h+ljPtE6U/zjZAx33GsBFEqzmf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:20:ec:04:d8:8a:46:fb:d2:55:61:01:aa:35:8c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
        Validity
            Not Before: May  8 23:00:24 2025 GMT
            Not After : May  9 23:00:24 2025 GMT
        Subject: CN=bf39d94d9285546c0e3b32de2be3db0f1b4db868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:c2:01:ac:91:89:9e:6e:83:ab:72:a7:a7:
                    b2:ec:41:b4:d8:fd:9c:49:0e:41:6a:59:e6:17:76:
                    53:b0:f9:e7:7b:d6:28:b5:62:73:a4:94:35:48:9a:
                    73:ae:53:53:ba:04:c4:b9:e1:ef:bd:5d:c8:bd:8e:
                    ce:d6:a9:61:58:ec:15:09:a9:7c:c5:14:0d:10:1a:
                    1f:88:8b:5d:40:a2:eb:db:4f:87:1c:56:1e:f1:6d:
                    a4:45:ff:fc:6b:76:23:f9:68:3d:71:b8:c7:b3:60:
                    64:a2:23:cd:5d:7c:f6:38:a1:6c:75:b9:9b:88:a4:
                    2a:96:6c:00:b8:54:98:c1:b7:73:fb:84:d7:78:23:
                    fb:48:ec:46:6b:13:e3:0a:c0:ef:37:a8:c7:e8:cb:
                    4f:ee:6f:60:cd:7c:a4:a6:c5:09:ad:4b:99:e1:a2:
                    da:1b:5b:ce:e3:a9:9e:54:00:db:c0:4f:dc:21:35:
                    f0:f9:48:be:3a:ad:9f:e4:2f:b1:9f:55:13:63:30:
                    44:d4:fb:f2:fe:60:0c:10:30:1a:23:3b:05:0d:a3:
                    f6:f2:70:3c:b9:63:5b:40:6c:7c:b6:c3:9e:07:ad:
                    93:c6:9b:d9:e0:1c:63:0f:41:5b:9a:10:96:13:49:
                    53:91:3f:c4:2f:fa:4b:92:c6:94:77:3e:b3:f1:1d:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:D9:4D:92:85:54:6C:0E:3B:32:DE:2B:E3:DB:0F:1B:4D:B8:68
            X509v3 Authority Key Identifier:
                keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:af:7d:a1:82:ef:40:3e:46:23:01:ff:43:c2:e5:8e:74:
         e8:fb:2a:7a:0c:bb:3f:50:5e:ae:d1:f2:ba:a9:41:4b:f0:04:
         ee:b6:6f:c2:27:d2:d9:ce:3f:7b:2f:82:fa:16:ea:7f:78:78:
         99:bb:21:da:55:8a:ca:53:7c:45:f0:97:27:52:88:03:4c:47:
         d1:cf:f0:22:08:ef:bc:ed:71:a1:7d:c3:87:67:f7:cc:46:f0:
         79:a2:e7:74:dc:cf:5a:a1:0e:29:bf:f9:f4:3b:5f:cf:3e:f6:
         48:53:ce:e5:d8:4d:be:b3:dd:6a:ff:e4:34:f4:9d:2b:39:58:
         d6:b6:6d:a6:90:46:36:0d:00:9a:8e:63:9d:aa:3a:09:4c:d6:
         b1:82:9e:2b:e0:32:84:f7:77:b3:c9:1c:a2:3a:c6:22:4d:53:
         9f:b1:da:c7:62:c4:b6:3b:bb:f2:40:93:e1:47:7d:c9:ff:61:
         47:00:8c:5c:ba:ff:d9:a5:eb:99:40:58:7e:ba:d6:53:6c:68:
         8f:c1:08:db:8c:83:83:5e:4c:02:35:6f:08:05:30:f5:54:de:
         20:88:72:82:73:f0:42:30:b8:0a:43:62:d7:fa:4c:bb:8c:4f:
         04:8c:a4:84:6c:a1:a2:82:03:40:0f:d8:fd:4b:49:7c:17:1b:
         5b:2a:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:51:43 2025 by rpki-client