Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
File:                     VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft (raw, json)
Hash identifier:          reUjuVpsYUCu9KG5MRpyKRBb0I0XUcdUXH/udBcae/4=
Subject key identifier:   14:B9:2B:D8:3D:F9:E0:E5:C3:E1:B5:74:4E:C3:F3:EC:31:EC:2F:8D
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       0196CEE22A7AFC220A42EE1921A67CC66593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
Manifest number:          03BB
Signing time:             Wed 14 May 2025 13:00:50 +0000
Manifest this update:     Wed 14 May 2025 13:00:50 +0000
Manifest next update:     Thu 15 May 2025 13:00:50 +0000
Files and hashes:         1: Ov2ltNd3_GI0QKOtR9rEki5pLjE.roa (hash: iFuAGy4E8LwCuPbJ6qoGTg8JfJxkYxMsbntoA7ssMKI=)
                          2: VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl (hash: Svkle8AWV/HvftsbxkmRJ/qfQ/iKlU5lPdyD+K9OqCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:2a:7a:fc:22:0a:42:ee:19:21:a6:7c:c6:65:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: May 14 13:00:50 2025 GMT
            Not After : May 15 13:00:50 2025 GMT
        Subject: CN=14b92bd83df9e0e5c3e1b5744ec3f3ec31ec2f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:a3:45:9c:ba:92:83:7a:5b:6f:35:55:f3:
                    d1:d5:ee:fe:99:69:da:53:02:2c:51:4e:7e:e9:ad:
                    24:15:9d:a2:63:a5:95:b5:d1:00:0c:3f:ec:0c:96:
                    7a:0f:5d:49:aa:4d:6c:fc:c0:71:fb:08:63:3a:45:
                    a1:60:0d:ce:ba:58:1b:93:86:9e:6b:41:2b:f4:54:
                    b6:09:44:4c:96:7e:55:a2:e2:48:17:da:d1:6a:8a:
                    65:91:34:2c:a8:77:1c:b5:f9:9b:1d:fd:05:90:fd:
                    10:02:31:3b:4a:c6:27:57:f2:f5:62:df:89:81:73:
                    38:c7:52:22:d6:96:2b:8a:7d:25:59:ce:68:ce:9e:
                    1f:71:81:45:d1:fd:92:c6:31:7a:90:5b:b3:b1:a3:
                    46:87:fc:84:99:e1:bf:ca:7d:b6:2e:e3:c4:e0:90:
                    09:50:74:7e:ed:23:29:48:14:ed:90:17:37:7e:4e:
                    04:09:0c:46:39:a7:6b:a4:47:c0:8e:ed:c8:79:e9:
                    5d:0e:64:22:3f:bd:c9:12:4b:ca:bd:93:38:44:8a:
                    51:5f:e8:c9:fb:c1:70:82:af:30:f8:e7:8b:7b:a2:
                    1e:14:6d:49:9b:56:fa:16:58:4d:85:35:b5:cd:b7:
                    a1:a7:6c:b7:13:9d:1c:79:e4:39:ff:64:93:8e:c4:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:2B:D8:3D:F9:E0:E5:C3:E1:B5:74:4E:C3:F3:EC:31:EC:2F:8D
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:b8:2e:66:c0:f3:ed:f9:00:c9:8b:ae:d3:78:97:5d:05:
         e4:ab:d0:c2:25:85:02:26:bc:a9:5a:62:e5:20:f6:cc:0f:7b:
         c1:21:e1:50:60:9f:a5:7c:69:03:45:00:42:64:45:36:71:91:
         06:52:53:8c:4f:c0:c5:6d:c9:f2:f1:d0:21:ad:b0:95:88:33:
         23:0a:7e:ca:9f:bd:c1:a0:b0:99:f8:c8:a9:6c:d4:f6:5f:43:
         47:17:46:9a:c9:50:4f:06:35:c2:a3:e8:2e:fa:82:15:cd:09:
         d3:4b:83:94:a0:6a:2e:54:18:62:c0:75:39:43:2b:6c:01:e4:
         2d:1e:dd:65:8c:eb:10:d5:13:dc:30:b0:bd:95:4c:78:0d:88:
         e5:af:20:e6:1c:e9:a0:ef:8e:a2:df:24:6d:8e:09:95:5c:4a:
         54:a5:c9:b2:08:ac:8c:10:e9:2b:79:c3:0c:74:f9:c9:f0:16:
         1a:69:97:66:9a:24:db:7d:09:ba:ac:89:1c:b7:77:6f:83:a2:
         8d:8e:a6:95:fd:68:c0:41:f0:67:0d:52:f2:af:52:8c:a7:a4:
         19:2c:b0:70:f2:ea:2d:ea:4e:c5:fa:69:7c:6c:54:7a:3c:87:
         4c:88:b1:b3:a1:49:15:74:c2:a3:ac:c0:4f:b3:1b:81:e2:7b:
         a9:41:97:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbO4ip6/CIKQu4ZIaZ8xmWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjUwNTE0MTMwMDUwWhcNMjUwNTE1MTMwMDUwWjAzMTEwLwYDVQQD
EygxNGI5MmJkODNkZjllMGU1YzNlMWI1NzQ0ZWMzZjNlYzMxZWMyZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H6jRZy6koN6W281VfPR1e7+mWna
UwIsUU5+6a0kFZ2iY6WVtdEADD/sDJZ6D11Jqk1s/MBx+whjOkWhYA3Oulgbk4ae
a0Er9FS2CURMln5VouJIF9rRaoplkTQsqHcctfmbHf0FkP0QAjE7SsYnV/L1Yt+J
gXM4x1Ii1pYrin0lWc5ozp4fcYFF0f2SxjF6kFuzsaNGh/yEmeG/yn22LuPE4JAJ
UHR+7SMpSBTtkBc3fk4ECQxGOadrpEfAju3IeeldDmQiP73JEkvKvZM4RIpRX+jJ
+8Fwgq8w+OeLe6IeFG1Jm1b6FlhNhTW1zbehp2y3E50ceeQ5/2STjsTsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS5K9g9+eDlw+G1dE7D8+wx7C+NMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8+4LmbA
8+35AMmLrtN4l10F5KvQwiWFAia8qVpi5SD2zA97wSHhUGCfpXxpA0UAQmRFNnGR
BlJTjE/AxW3J8vHQIa2wlYgzIwp+yp+9waCwmfjIqWzU9l9DRxdGmslQTwY1wqPo
LvqCFc0J00uDlKBqLlQYYsB1OUMrbAHkLR7dZYzrENUT3DCwvZVMeA2I5a8g5hzp
oO+Oot8kbY4JlVxKVKXJsgisjBDpK3nDDHT5yfAWGmmXZpok230JuqyJHLd3b4Oi
jY6mlf1owEHwZw1S8q9SjKekGSywcPLqLepOxfppfGxUejyHTIixs6FJFXTCo6zA
T7MbgeJ7qUGXtw==
-----END CERTIFICATE-----
Generated at Wed May 14 15:29:36 2025 by rpki-client