Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          LwrqEr/V3IyS13g146UHYMAFU0P7aq7EATqAybjYP40=
Subject key identifier:   96:E6:6A:F9:A7:6F:C7:B6:DC:00:2A:82:B3:58:7D:BC:16:C2:7D:CA
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       01984AE5B8576DF9BD5EB663A53DE05D64B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          130E
Signing time:             Sun 27 Jul 2025 08:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:25 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: ErjFNLYAEnosTpx7k5etyX7hPNGoMuY1RKBFuiIjGC4=)
                          2: m3PogkJItz_iNaq0_EdnA6-ldI4.roa (hash: nYagGPxBVRS3j7ztvVbYe4dLyrJG3Tb3hiHq/vtvQQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:b8:57:6d:f9:bd:5e:b6:63:a5:3d:e0:5d:64:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Jul 27 08:00:25 2025 GMT
            Not After : Jul 28 08:00:25 2025 GMT
        Subject: CN=96e66af9a76fc7b6dc002a82b3587dbc16c27dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:28:35:31:10:1f:1f:89:b7:b1:90:5d:db:
                    21:6f:a8:d1:31:d9:dc:7f:fb:b8:da:84:bf:95:ee:
                    40:85:51:23:7b:c2:f9:49:66:ed:ed:db:84:f7:72:
                    bc:a4:2d:8d:92:ae:43:9f:06:e9:94:03:8a:75:b1:
                    67:21:5d:50:cb:3f:21:70:76:67:b8:b9:a3:d5:d2:
                    97:5c:6e:14:eb:37:1e:3c:24:83:34:44:1c:c8:32:
                    0a:3f:77:ad:4d:d4:32:b5:5b:bb:df:a8:c1:96:35:
                    d3:49:21:b9:08:39:2e:42:54:44:c5:33:71:38:ab:
                    1f:44:cf:3b:85:73:32:cd:e1:25:87:b2:7b:6f:5e:
                    41:1e:c9:ad:3e:9e:ad:9b:43:ec:3e:20:35:61:7f:
                    83:43:94:f7:3f:b3:5a:57:79:cb:61:f9:92:dd:f4:
                    85:a0:e8:09:ae:9a:a3:69:a2:77:f1:8d:b3:b0:d0:
                    1e:57:15:26:6b:04:59:8b:f4:3e:9c:b4:8f:93:c7:
                    2d:dc:f9:72:d3:35:2c:f3:d3:ef:b0:4d:d1:21:3c:
                    98:99:42:96:ea:e5:88:0a:3d:ce:2e:0e:e0:c6:3a:
                    31:d3:af:f9:bd:3d:23:db:4f:f9:d4:bd:5f:83:3c:
                    ab:e9:2a:77:5d:4b:43:03:b6:1a:6b:84:3f:f7:6c:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E6:6A:F9:A7:6F:C7:B6:DC:00:2A:82:B3:58:7D:BC:16:C2:7D:CA
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:56:77:4f:ec:a5:d7:87:95:67:cc:03:78:55:13:4a:2d:
         74:ed:d4:a8:db:1b:0b:b6:bf:87:97:89:b4:96:68:8a:18:e3:
         c4:8b:e9:8f:c1:57:eb:0c:fe:33:1b:89:f6:0d:6c:76:e8:98:
         ed:33:d6:66:1e:fa:02:91:61:d4:70:74:6d:f2:f0:bc:fa:50:
         d7:18:d2:11:d8:cd:a9:2c:10:30:74:d9:2d:d7:ff:3c:92:53:
         fc:25:37:51:10:be:4f:26:db:42:65:28:0d:84:11:0b:e1:9f:
         46:51:40:72:f8:b6:c6:59:55:97:9c:1b:b1:cd:b2:15:1e:27:
         e6:a4:1e:c6:9b:25:7e:4f:a8:82:63:81:48:ff:0d:20:20:0c:
         88:e7:77:32:bd:6b:09:1d:f2:37:de:dd:a7:f1:b1:10:33:da:
         44:13:e2:ea:e2:5f:c7:3e:3d:c2:1f:9f:19:5b:6f:c6:14:d4:
         b8:c6:5e:da:b7:23:47:cc:e2:ec:7c:84:56:64:c9:66:4b:0b:
         ee:44:48:56:28:41:61:ff:ae:b8:3b:fa:51:ee:b8:f0:2f:5f:
         4c:95:7a:b3:26:8a:98:d7:6e:cf:ed:e7:f9:43:d7:4c:ff:f3:
         0b:db:ed:32:38:0f:ea:4c:7a:3a:f6:08:e1:37:02:60:d7:69:
         26:51:22:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5bhXbfm9XrZjpT3gXWS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmZiYTJjNjIwYzE4NTNkOWFkNDc1YTA1MGJlMjE3MTcx
OGI2NjIwHhcNMjUwNzI3MDgwMDI1WhcNMjUwNzI4MDgwMDI1WjAzMTEwLwYDVQQD
Eyg5NmU2NmFmOWE3NmZjN2I2ZGMwMDJhODJiMzU4N2RiYzE2YzI3ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDsoNTEQHx+Jt7GQXdshb6jRMdnc
f/u42oS/le5AhVEje8L5SWbt7duE93K8pC2Nkq5DnwbplAOKdbFnIV1Qyz8hcHZn
uLmj1dKXXG4U6zcePCSDNEQcyDIKP3etTdQytVu736jBljXTSSG5CDkuQlRExTNx
OKsfRM87hXMyzeElh7J7b15BHsmtPp6tm0PsPiA1YX+DQ5T3P7NaV3nLYfmS3fSF
oOgJrpqjaaJ38Y2zsNAeVxUmawRZi/Q+nLSPk8ct3Ply0zUs89PvsE3RITyYmUKW
6uWICj3OLg7gxjox06/5vT0j20/51L1fgzyr6Sp3XUtDA7Yaa4Q/92xGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbmavmnb8e23AAqgrNYfbwWwn3KMB8GA1UdIwQY
MBaAFFT/uixiDBhT2a1HWgUL4hcXGLZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMt
Y2QzYWNjMTA2NWM3LzEvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMtY2QzYWNjMTA2NWM3
LzEvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcM1Wd0/s
pdeHlWfMA3hVE0otdO3UqNsbC7a/h5eJtJZoihjjxIvpj8FX6wz+MxuJ9g1sduiY
7TPWZh76ApFh1HB0bfLwvPpQ1xjSEdjNqSwQMHTZLdf/PJJT/CU3URC+TybbQmUo
DYQRC+GfRlFAcvi2xllVl5wbsc2yFR4n5qQexpslfk+ogmOBSP8NICAMiOd3Mr1r
CR3yN97dp/GxEDPaRBPi6uJfxz49wh+fGVtvxhTUuMZe2rcjR8zi7HyEVmTJZksL
7kRIVihBYf+uuDv6Ue648C9fTJV6syaKmNduz+3n+UPXTP/zC9vtMjgP6kx6OvYI
4TcCYNdpJlEiKg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:08 2025 by rpki-client