Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File:                     vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier:          e/eLyLbO/zcRd4RGGC9cNBXAIjWPp6Cm5pSNllppZ6E=
Subject key identifier:   ED:BA:57:E2:AA:D2:DF:71:30:6B:A5:CC:50:3D:37:7F:44:DB:45:FA
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer:       /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial:       0197493173B8A1F3D7A600BD717D65D260C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number:          0E2E
Signing time:             Sat 07 Jun 2025 07:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:07 +0000
Files and hashes:         1: CEmDIjlP69L5PYySR2T2iyXDrME.roa (hash: 05O1IW8aKnT4rdWzvAMHpHCluhTzbtIkW2W6rQbfTDo=)
                          2: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
                          3: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
                          4: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 3aJo2YY3AsLT6eJjMVvVJX8IZTKcAVJ32AARSfMnJ0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:73:b8:a1:f3:d7:a6:00:bd:71:7d:65:d2:60:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
        Validity
            Not Before: Jun  7 07:01:07 2025 GMT
            Not After : Jun  8 07:01:07 2025 GMT
        Subject: CN=edba57e2aad2df71306ba5cc503d377f44db45fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:2d:ab:19:10:32:66:14:63:48:78:5c:f2:
                    da:0e:a1:cb:ae:08:65:0f:63:2b:41:06:54:be:e0:
                    4b:10:03:4b:3b:83:d9:cf:52:03:20:82:35:69:63:
                    8c:97:4e:da:9c:8f:22:fd:5b:dd:c6:ff:09:8a:11:
                    75:51:bf:97:2e:76:a8:69:e7:c1:c2:62:ba:7b:1f:
                    c7:11:ec:26:e0:f1:96:a6:f4:df:ce:0d:37:96:3c:
                    9b:53:b3:b2:67:28:c3:be:94:d8:2a:1a:cd:71:f4:
                    45:2c:7e:49:ce:1c:9a:33:6a:15:a7:82:89:f4:ad:
                    82:93:c0:f9:66:f6:09:34:18:72:7e:af:21:6a:58:
                    04:9e:55:d3:c3:98:66:a4:0b:7e:2d:bc:86:31:35:
                    fd:82:5b:3e:6b:8d:ba:57:67:30:00:58:17:80:c3:
                    a5:c8:46:38:d7:78:17:7f:09:62:dd:c0:3c:34:e5:
                    03:90:f9:70:ed:f0:26:ec:f3:27:57:51:15:91:c3:
                    82:c3:f1:20:13:5b:1c:4e:3c:09:b4:60:f9:d1:f7:
                    73:91:ad:cf:5a:df:f8:93:c6:aa:c9:3a:74:c5:ed:
                    42:73:d0:cf:cb:28:04:6e:5a:10:39:b3:01:7e:e0:
                    8c:6a:b4:a1:0c:d6:a8:6c:43:a8:eb:d1:68:85:5d:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BA:57:E2:AA:D2:DF:71:30:6B:A5:CC:50:3D:37:7F:44:DB:45:FA
            X509v3 Authority Key Identifier:
                keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:7e:aa:6f:c7:7a:08:b8:15:b3:84:68:3d:47:2c:17:dd:
         23:f3:1d:24:6a:32:76:67:55:60:d7:44:22:b9:1a:a2:8c:9e:
         aa:05:e6:bb:55:3b:a1:11:e7:e1:b9:f2:96:74:49:b9:03:3e:
         e3:50:7c:a3:dc:e0:d5:8c:19:61:d5:c4:d0:21:8b:a9:73:9c:
         c1:72:a8:8b:4b:c5:45:54:55:60:14:55:00:f7:c4:63:49:3f:
         72:39:37:29:af:22:db:05:e7:3a:aa:11:37:ff:3a:0c:dd:09:
         07:f7:12:af:c2:e5:44:e9:99:05:a4:31:d5:ed:9b:65:a8:1d:
         ae:20:7b:ac:4e:f5:30:15:f9:e6:8c:23:fe:3f:06:ab:54:3b:
         46:40:fa:a7:ae:f2:64:7d:e2:16:0a:92:95:47:01:bd:06:b3:
         03:6f:8f:55:fe:79:d7:f7:80:6a:cc:4e:a3:a8:9d:f6:0c:b6:
         15:20:93:fd:5d:1d:c4:9a:f4:18:6d:97:fd:05:f0:48:01:be:
         31:4f:c2:fe:de:3b:47:ea:08:ae:3c:26:57:e5:0f:45:63:3e:
         23:55:df:a5:18:4f:cd:82:47:7e:30:4b:13:0b:65:1c:c7:d3:
         dd:41:c6:46:69:17:72:b7:2d:6d:63:bb:1b:48:6e:c3:2c:19:
         d7:4b:71:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMXO4ofPXpgC9cX1l0mDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx
OTlkNDkwHhcNMjUwNjA3MDcwMTA3WhcNMjUwNjA4MDcwMTA3WjAzMTEwLwYDVQQD
EyhlZGJhNTdlMmFhZDJkZjcxMzA2YmE1Y2M1MDNkMzc3ZjQ0ZGI0NWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ctqxkQMmYUY0h4XPLaDqHLrghl
D2MrQQZUvuBLEANLO4PZz1IDIII1aWOMl07anI8i/Vvdxv8JihF1Ub+XLnaoaefB
wmK6ex/HEewm4PGWpvTfzg03ljybU7OyZyjDvpTYKhrNcfRFLH5JzhyaM2oVp4KJ
9K2Ck8D5ZvYJNBhyfq8halgEnlXTw5hmpAt+LbyGMTX9gls+a426V2cwAFgXgMOl
yEY413gXfwli3cA8NOUDkPlw7fAm7PMnV1EVkcOCw/EgE1scTjwJtGD50fdzka3P
Wt/4k8aqyTp0xe1Cc9DPyygEbloQObMBfuCMarShDNaobEOo69FohV0yfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO26V+Kq0t9xMGulzFA9N39E20X6MB8GA1UdIwQY
MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt
YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk
LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHR+qm/H
egi4FbOEaD1HLBfdI/MdJGoydmdVYNdEIrkaooyeqgXmu1U7oRHn4bnylnRJuQM+
41B8o9zg1YwZYdXE0CGLqXOcwXKoi0vFRVRVYBRVAPfEY0k/cjk3Ka8i2wXnOqoR
N/86DN0JB/cSr8LlROmZBaQx1e2bZagdriB7rE71MBX55owj/j8Gq1Q7RkD6p67y
ZH3iFgqSlUcBvQazA2+PVf551/eAasxOo6id9gy2FSCT/V0dxJr0GG2X/QXwSAG+
MU/C/t47R+oIrjwmV+UPRWM+I1XfpRhPzYJHfjBLEwtlHMfT3UHGRmkXcrctbWO7
G0huwywZ10txSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:33 2025 by rpki-client