Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File:                     VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier:          KUbg/vLn/NlPoQI5ND8ig68sYsWZSsH3M2v6NaDsm/c=
Subject key identifier:   68:D3:A0:9E:C2:7F:9D:22:D7:C2:6E:83:9B:35:AD:1E:F4:34:92:30
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer:       /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial:       0196A164B8FB2B82FF57B86B5DD9A44B20D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number:          0DFC
Signing time:             Mon 05 May 2025 17:00:54 +0000
Manifest this update:     Mon 05 May 2025 17:00:54 +0000
Manifest next update:     Tue 06 May 2025 17:00:54 +0000
Files and hashes:         1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
                          2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: O1yFlU3HseprHZAn5YP1iI0f2E5eXxW4icBIRJvqw4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:b8:fb:2b:82:ff:57:b8:6b:5d:d9:a4:4b:20:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
        Validity
            Not Before: May  5 17:00:54 2025 GMT
            Not After : May  6 17:00:54 2025 GMT
        Subject: CN=68d3a09ec27f9d22d7c26e839b35ad1ef4349230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:e2:93:c4:f3:da:ea:e5:a3:89:7e:56:2e:
                    c7:31:ce:eb:ff:bf:5e:8f:be:4c:96:7b:f2:7f:8a:
                    21:a9:ed:35:d2:d5:04:d0:1f:96:c6:c7:36:64:5f:
                    0d:bc:10:8f:ea:2b:82:9e:9f:ee:04:a5:93:af:d6:
                    f7:87:45:55:0b:27:2b:8e:ad:41:a3:69:9d:6e:37:
                    4d:76:f8:70:f6:e3:4a:6c:3f:1b:26:ca:32:49:3e:
                    ab:a1:90:2c:3c:ac:b6:db:a2:95:73:18:8c:bd:6c:
                    69:9d:0c:35:62:ef:d1:54:fa:a4:65:79:69:2a:94:
                    19:08:74:1c:a6:e1:55:ca:44:ae:94:7a:a0:1c:d4:
                    c1:19:f7:36:a2:77:80:ea:9b:c2:06:f9:90:f3:74:
                    0f:c9:93:9c:3f:94:8f:b8:9b:be:a3:07:62:10:04:
                    58:d9:1c:87:76:a2:4d:b7:9f:41:96:4c:a9:77:99:
                    6f:68:d1:4c:4e:12:cb:5a:bf:e6:d5:1c:c6:16:b5:
                    8f:39:4b:8c:e7:5e:af:e7:09:9d:9d:2d:81:8c:98:
                    b2:f6:69:88:ec:d9:ec:4f:a8:8e:c9:f0:d2:b8:3e:
                    7e:bc:89:c6:e7:89:a5:14:c3:f0:50:6c:ff:cc:83:
                    8d:42:70:a4:de:23:5a:78:1c:88:5b:c1:da:85:c1:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:A0:9E:C2:7F:9D:22:D7:C2:6E:83:9B:35:AD:1E:F4:34:92:30
            X509v3 Authority Key Identifier:
                keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:63:c7:e1:a3:e9:68:fe:a0:cd:73:ba:13:1c:b3:3b:fd:5e:
         24:01:5d:d2:05:21:70:40:3f:88:82:90:30:db:bd:75:2d:4e:
         64:03:0a:73:fa:8c:b9:5a:b5:64:53:44:46:c5:8d:9c:04:7b:
         c4:5d:79:39:7a:41:eb:d5:00:cf:f5:18:16:9a:7b:29:58:fc:
         21:2e:ae:fc:8d:be:13:bd:92:a2:7f:8d:55:bf:d3:21:0f:25:
         7e:5b:26:b6:d0:4d:63:5f:f3:55:8d:8f:61:8e:f4:6f:d0:be:
         e6:8f:cd:8f:de:0b:61:42:e8:e1:40:31:a5:c2:f9:12:67:e4:
         68:21:a0:bc:a7:d3:3c:9a:13:6b:83:fb:e3:37:47:3f:5d:19:
         da:97:07:34:2c:c9:e8:85:27:d1:17:14:83:d2:70:17:45:23:
         ac:e6:b0:9d:1b:f8:d4:ff:a5:d7:e8:67:85:10:53:fd:ac:d2:
         b3:e5:ad:e6:a7:d1:ba:35:8d:5f:54:96:84:7d:61:28:c7:ed:
         3d:ef:eb:f5:87:1d:35:96:dc:8d:ca:e1:25:b9:c3:d6:cc:16:
         97:13:9f:f7:9d:f7:56:3e:f5:1a:51:da:a9:8f:d4:66:73:a0:
         77:14:94:79:b1:6d:33:36:96:c7:02:d5:75:d4:82:0d:30:b3:
         0a:1f:c6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZLj7K4L/V7hrXdmkSyDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl
NDNlNzIwHhcNMjUwNTA1MTcwMDU0WhcNMjUwNTA2MTcwMDU0WjAzMTEwLwYDVQQD
Eyg2OGQzYTA5ZWMyN2Y5ZDIyZDdjMjZlODM5YjM1YWQxZWY0MzQ5MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4fik8Tz2urlo4l+Vi7HMc7r/79e
j75Mlnvyf4ohqe010tUE0B+Wxsc2ZF8NvBCP6iuCnp/uBKWTr9b3h0VVCycrjq1B
o2mdbjdNdvhw9uNKbD8bJsoyST6roZAsPKy226KVcxiMvWxpnQw1Yu/RVPqkZXlp
KpQZCHQcpuFVykSulHqgHNTBGfc2oneA6pvCBvmQ83QPyZOcP5SPuJu+owdiEARY
2RyHdqJNt59Blkypd5lvaNFMThLLWr/m1RzGFrWPOUuM516v5wmdnS2BjJiy9mmI
7NnsT6iOyfDSuD5+vInG54mlFMPwUGz/zIONQnCk3iNaeByIW8HahcGzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjToJ7Cf50i18Jug5s1rR70NJIwMB8GA1UdIwQY
MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt
YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh
LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWPH4aPp
aP6gzXO6ExyzO/1eJAFd0gUhcEA/iIKQMNu9dS1OZAMKc/qMuVq1ZFNERsWNnAR7
xF15OXpB69UAz/UYFpp7KVj8IS6u/I2+E72Son+NVb/TIQ8lflsmttBNY1/zVY2P
YY70b9C+5o/Nj94LYULo4UAxpcL5EmfkaCGgvKfTPJoTa4P74zdHP10Z2pcHNCzJ
6IUn0RcUg9JwF0UjrOawnRv41P+l1+hnhRBT/azSs+Wt5qfRujWNX1SWhH1hKMft
Pe/r9YcdNZbcjcrhJbnD1swWlxOf9533Vj71GlHaqY/UZnOgdxSUebFtMzaWxwLV
ddSCDTCzCh/GxQ==
-----END CERTIFICATE-----
Generated at Tue May 6 02:25:19 2025 by rpki-client