Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File:                     VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier:          Ts/32kAKJDryAact94LmiobFwIeg22OK+sgvM9f1ong=
Subject key identifier:   AE:8D:9C:9C:54:36:89:D6:DE:16:A8:C8:9B:4F:46:0A:4C:BD:01:1E
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer:       /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial:       0196BD802495A350B5C23C8F563A1E1F8EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number:          01B7
Signing time:             Sun 11 May 2025 04:00:13 +0000
Manifest this update:     Sun 11 May 2025 04:00:13 +0000
Manifest next update:     Mon 12 May 2025 04:00:13 +0000
Files and hashes:         1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: lLZWu2a0w/iGjS57+uq3nx0SY+7Jh04FCFFwrFWzQbs=)
                          2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:24:95:a3:50:b5:c2:3c:8f:56:3a:1e:1f:8e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
        Validity
            Not Before: May 11 04:00:13 2025 GMT
            Not After : May 12 04:00:13 2025 GMT
        Subject: CN=ae8d9c9c543689d6de16a8c89b4f460a4cbd011e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:ab:4c:a5:7f:eb:f0:b4:f4:4c:fa:02:73:
                    03:d6:6e:05:b3:28:38:f7:10:d0:37:d7:1b:fa:27:
                    74:c8:00:b5:85:c9:e6:3e:78:bd:25:f9:eb:7d:5a:
                    98:3a:b0:3c:69:f6:9d:94:12:79:2a:c3:58:3b:8c:
                    8e:10:d0:66:70:b2:1e:23:b0:0d:85:fd:91:73:ef:
                    4a:a2:8b:d6:a8:3d:ba:71:cd:c3:4d:97:e8:e4:71:
                    2b:c8:2a:34:7e:03:de:8a:4f:79:e3:d7:a0:94:24:
                    5a:15:e6:f2:ce:a7:07:d7:92:ce:64:f0:78:f5:ce:
                    d5:20:e6:f2:76:93:1c:8f:45:94:3f:3b:9c:7a:36:
                    38:60:3e:cd:9e:6d:21:94:83:26:ab:7f:7b:de:40:
                    4a:db:11:b6:2e:21:96:f7:b0:18:8c:b7:4d:df:d2:
                    83:7b:37:0b:27:c5:28:4d:ba:33:70:1a:fb:b2:1a:
                    2e:dc:5c:c3:8e:58:b3:60:5c:bb:bd:12:57:6c:bb:
                    7c:db:54:f2:b7:9c:45:39:8d:e6:df:ac:b4:14:31:
                    bd:48:00:93:b8:09:f0:b1:3d:c3:7a:32:c2:aa:b1:
                    74:14:40:93:d5:85:0b:36:75:ae:a1:dd:ca:30:da:
                    58:75:f9:79:08:b1:20:65:22:cb:1d:63:5d:22:86:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8D:9C:9C:54:36:89:D6:DE:16:A8:C8:9B:4F:46:0A:4C:BD:01:1E
            X509v3 Authority Key Identifier:
                keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:41:5d:cc:87:ef:24:7b:6b:d1:45:d2:e1:bb:fc:90:c2:0f:
         7c:2a:14:80:58:03:07:bc:21:34:6b:3a:cd:f9:80:2c:52:2b:
         be:36:b4:46:8b:fa:f7:a7:c4:9f:89:80:71:78:42:e5:32:86:
         c5:d6:18:50:03:54:b0:de:55:61:2d:87:d5:41:c9:fa:6e:a4:
         f5:61:2e:6c:70:40:ec:98:bc:5b:7f:96:74:34:1a:0a:1c:3a:
         10:a4:eb:7c:05:80:a1:e1:27:cb:7e:01:ad:6d:a2:76:59:4d:
         7d:e2:24:aa:38:2e:a3:8a:c8:85:e3:2d:2c:df:44:fc:ee:80:
         08:27:68:8e:ba:05:a6:6e:d0:65:41:b6:4b:47:00:14:86:7b:
         32:b4:b2:bd:c0:f6:1c:a1:50:7f:fb:6b:fc:e9:cb:62:fa:2e:
         fd:2f:00:9f:fa:28:e8:c5:5b:41:0d:ee:3b:1e:16:6c:9b:66:
         8c:4e:eb:a8:68:7a:90:48:45:e1:5c:27:96:37:f2:c5:e9:26:
         c1:35:5b:1b:04:8f:20:5a:00:5f:f1:dd:56:2d:b3:af:ef:7c:
         ad:42:ac:37:f8:e7:f0:91:a4:b6:69:4b:0c:7c:69:4d:57:6f:
         52:88:88:5e:42:01:b1:73:bd:a7:a6:5f:8a:e3:f5:b0:62:3d:
         9f:ad:3c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gCSVo1C1wjyPVjoeH465MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjUwNTExMDQwMDEzWhcNMjUwNTEyMDQwMDEzWjAzMTEwLwYDVQQD
EyhhZThkOWM5YzU0MzY4OWQ2ZGUxNmE4Yzg5YjRmNDYwYTRjYmQwMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8yrTKV/6/C09Ez6AnMD1m4Fsyg4
9xDQN9cb+id0yAC1hcnmPni9JfnrfVqYOrA8afadlBJ5KsNYO4yOENBmcLIeI7AN
hf2Rc+9KoovWqD26cc3DTZfo5HEryCo0fgPeik9549eglCRaFebyzqcH15LOZPB4
9c7VIObydpMcj0WUPzucejY4YD7Nnm0hlIMmq3973kBK2xG2LiGW97AYjLdN39KD
ezcLJ8UoTbozcBr7shou3FzDjlizYFy7vRJXbLt821Tyt5xFOY3m36y0FDG9SACT
uAnwsT3DejLCqrF0FECT1YULNnWuod3KMNpYdfl5CLEgZSLLHWNdIoY0+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6NnJxUNonW3haoyJtPRgpMvQEeMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkFdzIfv
JHtr0UXS4bv8kMIPfCoUgFgDB7whNGs6zfmALFIrvja0Rov696fEn4mAcXhC5TKG
xdYYUANUsN5VYS2H1UHJ+m6k9WEubHBA7Ji8W3+WdDQaChw6EKTrfAWAoeEny34B
rW2idllNfeIkqjguo4rIheMtLN9E/O6ACCdojroFpm7QZUG2S0cAFIZ7MrSyvcD2
HKFQf/tr/OnLYvou/S8An/oo6MVbQQ3uOx4WbJtmjE7rqGh6kEhF4Vwnljfyxekm
wTVbGwSPIFoAX/HdVi2zr+98rUKsN/jn8JGktmlLDHxpTVdvUoiIXkIBsXO9p6Zf
iuP1sGI9n608EA==
-----END CERTIFICATE-----
Generated at Sun May 11 08:45:19 2025 by rpki-client