Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          +fFAmAvBz06RvJ8Ku+n1S2gwYxp6W2dL0CF5JdjYh8A=
Subject key identifier:   4D:88:06:45:87:1E:18:AD:8A:D5:27:8B:9A:79:C4:7C:E3:9F:05:85
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       01965CF19938697166E4E30392D25A0830BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0CC9
Signing time:             Tue 22 Apr 2025 10:00:59 +0000
Manifest this update:     Tue 22 Apr 2025 10:00:59 +0000
Manifest next update:     Wed 23 Apr 2025 10:00:59 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: Cgdga5zKXZAN4FuRpHFssSvCuZ0w8RfmohagMKzEWCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:f1:99:38:69:71:66:e4:e3:03:92:d2:5a:08:30:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Apr 22 10:00:59 2025 GMT
            Not After : Apr 23 10:00:59 2025 GMT
        Subject: CN=4d880645871e18ad8ad5278b9a79c47ce39f0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:d6:2e:d7:0e:31:83:56:bb:53:49:c3:6e:
                    f4:7c:c6:15:fa:d0:aa:b8:73:f0:2c:4a:f4:da:71:
                    02:7c:3c:6d:3e:01:2a:60:4f:d9:39:e9:00:6a:f5:
                    73:64:18:6e:20:9c:09:64:32:19:a9:78:5b:c5:cd:
                    e8:13:4e:d9:21:c9:47:53:df:e7:06:81:92:0d:39:
                    c1:96:75:2f:ea:9a:90:b7:cf:d9:f8:86:d9:45:7e:
                    b3:66:81:a0:59:48:14:c4:06:0d:81:7a:f0:be:77:
                    35:1c:ae:c8:57:cf:ae:67:ce:1c:88:72:73:0e:64:
                    2b:43:73:5c:b4:df:89:e6:1b:13:ca:62:ee:21:06:
                    c7:36:3d:9c:a9:1b:06:41:47:62:f3:01:0a:14:6e:
                    51:77:4b:3d:ed:5d:59:9f:55:a2:10:14:3a:07:1c:
                    c8:5d:86:71:5f:d8:f7:85:7e:29:ac:df:06:22:c0:
                    8f:cb:04:11:8f:25:3a:68:1d:67:10:6e:30:d7:6b:
                    60:42:e0:76:2c:5f:16:34:97:04:98:49:cf:5b:03:
                    b0:5f:f3:7f:f0:bf:bb:41:9c:e5:8c:05:8a:98:21:
                    b9:13:02:da:97:2e:4a:ba:d2:f4:ac:13:58:e3:d8:
                    9d:8f:4a:a3:ef:d4:14:53:0d:5d:85:93:b3:48:f9:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:06:45:87:1E:18:AD:8A:D5:27:8B:9A:79:C4:7C:E3:9F:05:85
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:8a:50:2d:dc:2f:c9:ab:aa:a5:ca:a0:57:9a:b5:00:6a:
         71:d0:8f:ad:5f:19:ae:4f:16:f9:e6:11:2b:94:ae:ac:1e:66:
         55:13:a9:11:4d:68:21:03:c9:3c:b1:1d:9c:68:ef:ef:36:43:
         96:aa:bc:2c:fb:f8:b6:e0:c3:9a:fc:07:39:ad:37:33:1e:e4:
         39:07:0f:9f:63:a6:4d:a0:1c:6d:24:69:9b:88:45:c1:18:40:
         06:f0:2f:ae:48:d2:71:3a:72:fc:25:73:b6:a3:b4:a6:a5:07:
         ec:38:b4:79:c8:6f:fc:89:21:e2:f0:a2:5d:e2:1b:67:e3:b9:
         3c:68:42:aa:14:36:34:d6:f3:86:11:e2:a5:68:85:5f:cd:21:
         26:2a:6d:49:e4:08:ea:9b:5a:1f:8d:8b:17:a4:71:db:b0:85:
         ce:a1:2e:3a:08:bb:46:b5:c0:8e:32:4f:17:ac:3c:1d:ae:e8:
         08:0e:72:af:b0:cf:a4:67:cc:ab:79:17:55:27:2c:64:3f:c3:
         79:ca:fe:c1:4e:b0:cc:66:5a:95:f2:66:57:62:7a:e0:4e:70:
         7f:f2:b7:6a:4d:2a:e7:01:b7:82:a3:c7:dc:70:16:b0:ff:13:
         d4:da:a2:ac:ab:a6:8e:a5:2c:8d:08:7e:05:13:94:66:f9:14:
         49:da:51:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8Zk4aXFm5OMDktJaCDC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTZmMmU5MGRiMmJkMzVkNTRjNmQyM2VlZDliMGY5OWY5
NjYzYTYwHhcNMjUwNDIyMTAwMDU5WhcNMjUwNDIzMTAwMDU5WjAzMTEwLwYDVQQD
Eyg0ZDg4MDY0NTg3MWUxOGFkOGFkNTI3OGI5YTc5YzQ3Y2UzOWYwNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xnWLtcOMYNWu1NJw270fMYV+tCq
uHPwLEr02nECfDxtPgEqYE/ZOekAavVzZBhuIJwJZDIZqXhbxc3oE07ZIclHU9/n
BoGSDTnBlnUv6pqQt8/Z+IbZRX6zZoGgWUgUxAYNgXrwvnc1HK7IV8+uZ84ciHJz
DmQrQ3NctN+J5hsTymLuIQbHNj2cqRsGQUdi8wEKFG5Rd0s97V1Zn1WiEBQ6BxzI
XYZxX9j3hX4prN8GIsCPywQRjyU6aB1nEG4w12tgQuB2LF8WNJcEmEnPWwOwX/N/
8L+7QZzljAWKmCG5EwLaly5KutL0rBNY49idj0qj79QUUw1dhZOzSPmqzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2IBkWHHhititUni5p5xHzjnwWFMB8GA1UdIwQY
MBaAFFSW8ukNsr011UxtI+7ZsPmflmOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYt
M2JiZmUyYmU2MmFiLzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYtM2JiZmUyYmU2MmFi
LzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJaKUC3c
L8mrqqXKoFeatQBqcdCPrV8Zrk8W+eYRK5SurB5mVROpEU1oIQPJPLEdnGjv7zZD
lqq8LPv4tuDDmvwHOa03Mx7kOQcPn2OmTaAcbSRpm4hFwRhABvAvrkjScTpy/CVz
tqO0pqUH7Di0echv/Ikh4vCiXeIbZ+O5PGhCqhQ2NNbzhhHipWiFX80hJiptSeQI
6ptaH42LF6Rx27CFzqEuOgi7RrXAjjJPF6w8Ha7oCA5yr7DPpGfMq3kXVScsZD/D
ecr+wU6wzGZalfJmV2J64E5wf/K3ak0q5wG3gqPH3HAWsP8T1NqirKumjqUsjQh+
BROUZvkUSdpR0w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:57:13 2025 by rpki-client