Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File:                     VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier:          0AcYhhiOWedBYQbvmaiKmZ+7ffOhDQyK4fGSRtpvDOc=
Subject key identifier:   E2:EF:30:79:11:BD:B5:D3:84:9D:12:B5:0A:25:62:04:5C:B8:F5:0F
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer:       /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial:       0196BF37C4503E0CDAA28E7FC801CCC031B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 12:00:25 +0000
Manifest this update:     Sun 11 May 2025 12:00:25 +0000
Manifest next update:     Mon 12 May 2025 12:00:25 +0000
Files and hashes:         1: HbLrWYvpZ3oR_JlftkugbPFu1sg.roa (hash: hyVYRW9dEIvcdUsfvs+O6FvP8/Ig+3miBLv5dJqVY64=)
                          2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: IEeLLLvE3kAgQ5LvrGtzhD1eSn0hr8ABSvLCBe2ULiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:37:c4:50:3e:0c:da:a2:8e:7f:c8:01:cc:c0:31:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
        Validity
            Not Before: May 11 12:00:25 2025 GMT
            Not After : May 12 12:00:25 2025 GMT
        Subject: CN=e2ef307911bdb5d3849d12b50a2562045cb8f50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:51:65:55:e5:c3:ad:96:94:bd:cb:09:d5:
                    5d:7d:22:63:05:4b:2b:1f:a6:60:79:c6:fa:ca:4d:
                    b6:bd:b8:f3:8f:c2:78:bd:e4:41:0f:42:d9:bf:67:
                    9f:ad:75:ef:b3:e5:d8:05:fb:db:46:07:27:8d:be:
                    bb:ec:65:cc:87:04:fd:ec:55:c9:05:4a:bb:da:92:
                    c0:79:a4:5b:1c:97:5e:81:df:42:10:8d:0c:b4:21:
                    dc:51:19:ae:d3:f0:b8:c6:f3:a2:9c:95:1b:30:4c:
                    a3:0a:9d:08:f8:57:bc:a7:4b:d6:6f:fb:eb:54:b2:
                    5a:65:a5:ff:2d:db:6c:1d:11:6a:5a:42:2c:c3:ed:
                    0e:0c:1b:22:54:75:d9:05:27:ae:22:7d:aa:94:e5:
                    94:3a:51:12:b1:51:85:ac:31:58:5f:49:f7:02:4d:
                    ca:f6:08:3b:0f:63:09:67:e7:07:f1:4c:11:53:3f:
                    0e:1e:d3:4e:54:03:13:00:8c:56:d4:45:3a:21:0f:
                    fa:07:05:60:bf:ac:47:4d:49:85:1c:bd:5c:dd:3c:
                    15:8c:a3:c8:8c:3f:f7:61:e8:4a:4d:f4:3c:bd:2e:
                    18:92:52:15:91:05:d4:58:90:9d:75:fa:5f:52:3d:
                    95:96:81:df:5b:9f:70:a3:72:53:a4:0b:df:d6:97:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EF:30:79:11:BD:B5:D3:84:9D:12:B5:0A:25:62:04:5C:B8:F5:0F
            X509v3 Authority Key Identifier:
                keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:5f:c7:e9:42:ea:33:d5:72:c0:02:41:84:b5:0d:7b:07:
         e6:33:55:f1:57:83:f4:0d:85:84:d6:2e:f2:38:47:ed:b7:76:
         2f:64:92:f3:2b:ab:ad:8d:22:22:d7:a0:32:36:02:ed:d8:4f:
         6e:89:c0:8b:07:cf:40:a0:7e:a8:c3:8f:f0:86:b2:74:6d:96:
         7a:35:86:ee:e8:7b:d3:c9:69:e8:a6:f0:55:2d:c9:35:f4:e4:
         9d:e9:63:68:65:e6:f3:4e:c1:a6:90:57:42:af:dc:a3:91:83:
         43:bd:fe:5d:ac:ae:a7:bb:87:09:33:b9:9f:7a:ca:2a:cb:29:
         d0:5c:ae:67:10:b6:1a:64:3c:1d:dc:ee:29:24:18:87:4b:85:
         50:11:cd:02:16:b4:d3:1d:95:04:53:ef:13:85:1a:bc:64:f3:
         92:95:ec:3a:2a:64:cb:80:ed:7b:60:b4:66:37:2a:01:73:59:
         c2:5b:a9:7e:98:db:ff:bc:11:26:2e:9a:f8:06:df:6d:b5:9e:
         a2:53:ab:e1:de:42:3f:f0:48:eb:3f:21:8c:4e:d2:3b:1f:31:
         94:51:6f:71:01:77:b9:fb:12:0e:f9:72:fb:61:fd:3b:29:f9:
         6f:c6:c8:70:27:4c:55:4d:e3:c5:60:30:a4:95:e2:92:a2:7a:
         5f:d1:98:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N8RQPgzaoo5/yAHMwDG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTBlZmEyM2M3NzhlZjc0NzBmM2FjMGE5MDU2MTliYzdj
Mjc3ZTQwHhcNMjUwNTExMTIwMDI1WhcNMjUwNTEyMTIwMDI1WjAzMTEwLwYDVQQD
EyhlMmVmMzA3OTExYmRiNWQzODQ5ZDEyYjUwYTI1NjIwNDVjYjhmNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uZRZVXlw62WlL3LCdVdfSJjBUsr
H6Zgecb6yk22vbjzj8J4veRBD0LZv2efrXXvs+XYBfvbRgcnjb677GXMhwT97FXJ
BUq72pLAeaRbHJdegd9CEI0MtCHcURmu0/C4xvOinJUbMEyjCp0I+Fe8p0vWb/vr
VLJaZaX/LdtsHRFqWkIsw+0ODBsiVHXZBSeuIn2qlOWUOlESsVGFrDFYX0n3Ak3K
9gg7D2MJZ+cH8UwRUz8OHtNOVAMTAIxW1EU6IQ/6BwVgv6xHTUmFHL1c3TwVjKPI
jD/3YehKTfQ8vS4YklIVkQXUWJCddfpfUj2VloHfW59wo3JTpAvf1pdliwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLvMHkRvbXThJ0StQolYgRcuPUPMB8GA1UdIwQY
MBaAFFaQ76I8d473Rw86wKkFYZvHwnfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2It
ODNhZTJmMjE0MTIxLzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2ItODNhZTJmMjE0MTIx
LzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZtfx+lC
6jPVcsACQYS1DXsH5jNV8VeD9A2FhNYu8jhH7bd2L2SS8yurrY0iItegMjYC7dhP
bonAiwfPQKB+qMOP8IaydG2WejWG7uh708lp6KbwVS3JNfTkneljaGXm807BppBX
Qq/co5GDQ73+Xayup7uHCTO5n3rKKssp0FyuZxC2GmQ8HdzuKSQYh0uFUBHNAha0
0x2VBFPvE4UavGTzkpXsOipky4Dte2C0ZjcqAXNZwlupfpjb/7wRJi6a+AbfbbWe
olOr4d5CP/BI6z8hjE7SOx8xlFFvcQF3ufsSDvly+2H9Oyn5b8bIcCdMVU3jxWAw
pJXikqJ6X9GYqA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:12:44 2025 by rpki-client