Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File:                     VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier:          DCRrDUZg+JtAx1rcOqzqLglWTmjOSeUVgShAiT9r/LQ=
Subject key identifier:   C4:EC:C8:D4:B2:C7:9A:0E:5E:50:44:CC:C8:CA:E3:A6:8D:A9:90:D2
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer:       /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial:       019752A208B11E298B9C73FB28330029EE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 03:00:40 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:40 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:40 +0000
Files and hashes:         1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
                          2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: e6e+ivzhIJKkUG2UnXNv8ZNWBTMsdnh6djjST3OktbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:08:b1:1e:29:8b:9c:73:fb:28:33:00:29:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
        Validity
            Not Before: Jun  9 03:00:40 2025 GMT
            Not After : Jun 10 03:00:40 2025 GMT
        Subject: CN=c4ecc8d4b2c79a0e5e5044ccc8cae3a68da990d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:d4:0d:f7:34:b4:95:a1:15:04:38:43:56:
                    c6:a2:be:d5:b2:88:58:42:e5:93:4f:b9:31:ad:0e:
                    04:a2:7d:81:ec:05:7f:bb:d3:9f:33:4b:4d:b4:5c:
                    e4:23:7f:98:9d:79:76:16:27:87:0b:17:c7:7e:c9:
                    c2:35:c5:73:b2:0b:6f:6b:c6:77:5b:41:ef:ff:0c:
                    a3:1e:a8:76:b1:93:64:59:ad:31:a9:e0:bd:33:39:
                    df:57:0f:8f:a6:32:c3:eb:b5:26:cb:83:2e:74:b8:
                    1d:fb:ee:4b:4f:7d:ad:bb:6d:62:42:d9:fa:03:fe:
                    c5:66:54:b7:d8:69:01:58:ad:ba:07:3b:9d:11:85:
                    8f:7c:15:25:eb:9e:f3:49:3b:ac:b9:3b:ad:3e:00:
                    ee:fa:3a:d6:9b:bb:fd:a6:36:f9:90:3e:c8:3f:7f:
                    24:59:8e:1f:5b:f9:e2:39:74:53:d2:30:e7:58:ad:
                    60:64:dc:96:c8:61:c9:23:94:d2:19:dc:d8:38:da:
                    a9:73:cd:41:a1:c6:d0:d0:fb:bd:56:8a:26:f2:39:
                    e1:28:33:5f:b2:89:c7:32:9b:f2:80:15:69:a4:ae:
                    03:35:5d:a2:9d:ad:00:4d:51:76:4e:7c:2a:9b:de:
                    27:7d:5d:17:1f:31:6b:a5:04:36:aa:11:69:ce:68:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:C8:D4:B2:C7:9A:0E:5E:50:44:CC:C8:CA:E3:A6:8D:A9:90:D2
            X509v3 Authority Key Identifier:
                keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:76:ec:f4:3e:f3:e6:5c:9e:9d:d8:5e:e4:3a:0d:0f:70:61:
         6c:b8:d1:72:63:23:a2:97:ce:3b:a0:b5:95:b5:a5:56:32:7c:
         8a:53:41:f4:bd:0c:69:c1:03:5b:e8:52:1b:66:7c:1f:0d:44:
         41:bf:c1:16:1d:52:56:54:fa:39:fa:1e:db:3e:6f:65:3a:d1:
         d3:2d:8c:09:e7:22:49:4f:be:ef:95:20:78:b7:b1:52:ea:66:
         12:5f:8e:2c:cb:98:7e:74:d0:8f:dd:68:82:df:74:14:29:c6:
         0a:de:a9:ca:8f:8a:26:6f:48:88:dd:b2:99:6d:80:12:ef:33:
         01:70:f3:fb:2e:15:82:63:a6:5c:37:61:4e:47:20:65:90:2e:
         64:a5:29:61:3c:6c:1a:7d:bd:7f:35:51:4d:61:01:4d:c3:0a:
         ec:ea:bf:f9:b8:10:66:80:f1:05:e2:ab:41:d9:34:ba:9d:5c:
         96:b8:61:27:e6:97:2f:d0:2e:24:e3:af:c7:dd:36:78:e2:9c:
         57:8b:2d:05:89:3b:f8:ec:2b:e3:c7:d7:c7:74:e2:4b:d7:42:
         68:63:65:b4:0c:ab:12:c9:7c:8e:2a:b6:b0:53:09:49:f0:df:
         be:40:3c:8f:2f:9d:29:80:55:17:e9:70:13:65:02:14:11:a7:
         90:56:26:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSogixHimLnHP7KDMAKe5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwNjA5MDMwMDQwWhcNMjUwNjEwMDMwMDQwWjAzMTEwLwYDVQQD
EyhjNGVjYzhkNGIyYzc5YTBlNWU1MDQ0Y2NjOGNhZTNhNjhkYTk5MGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoTUDfc0tJWhFQQ4Q1bGor7VsohY
QuWTT7kxrQ4Eon2B7AV/u9OfM0tNtFzkI3+YnXl2FieHCxfHfsnCNcVzsgtva8Z3
W0Hv/wyjHqh2sZNkWa0xqeC9MznfVw+PpjLD67Umy4MudLgd++5LT32tu21iQtn6
A/7FZlS32GkBWK26BzudEYWPfBUl657zSTusuTutPgDu+jrWm7v9pjb5kD7IP38k
WY4fW/niOXRT0jDnWK1gZNyWyGHJI5TSGdzYONqpc81BocbQ0Pu9Voom8jnhKDNf
sonHMpvygBVppK4DNV2ina0ATVF2Tnwqm94nfV0XHzFrpQQ2qhFpzmidwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTsyNSyx5oOXlBEzMjK46aNqZDSMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3bs9D7z
5lyendhe5DoND3BhbLjRcmMjopfOO6C1lbWlVjJ8ilNB9L0MacEDW+hSG2Z8Hw1E
Qb/BFh1SVlT6Ofoe2z5vZTrR0y2MCeciSU++75UgeLexUupmEl+OLMuYfnTQj91o
gt90FCnGCt6pyo+KJm9IiN2ymW2AEu8zAXDz+y4VgmOmXDdhTkcgZZAuZKUpYTxs
Gn29fzVRTWEBTcMK7Oq/+bgQZoDxBeKrQdk0up1clrhhJ+aXL9AuJOOvx902eOKc
V4stBYk7+Owr48fXx3TiS9dCaGNltAyrEsl8jiq2sFMJSfDfvkA8jy+dKYBVF+lw
E2UCFBGnkFYmlg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:30:57 2025 by rpki-client