Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          TjYQnalu9xgwC6kJQkhN+Xr0v8qqhFPT6mM3rEwFjAY=
Subject key identifier:   E2:C6:09:35:B9:AE:10:C0:66:37:8D:D9:EF:5C:AA:6C:B7:C0:50:93
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       0197458AF1FCF4333FF902CDA8FD9B6B1ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          1285
Signing time:             Fri 06 Jun 2025 14:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:23 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: y8S8La4qWJGIBPcPXzLOJZPUhKRq0qj7gipXR4ANvpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8a:f1:fc:f4:33:3f:f9:02:cd:a8:fd:9b:6b:1e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Jun  6 14:00:23 2025 GMT
            Not After : Jun  7 14:00:23 2025 GMT
        Subject: CN=e2c60935b9ae10c066378dd9ef5caa6cb7c05093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:ef:2b:45:1b:e9:30:23:50:de:2a:94:9a:
                    d7:a5:bd:be:19:ad:fd:38:f2:0c:8f:de:5e:7d:eb:
                    4d:b9:36:08:d4:0a:aa:3c:e0:87:17:fa:3c:cd:1c:
                    b2:51:aa:f0:eb:23:06:01:3b:ad:ef:b9:10:81:46:
                    a9:3f:a2:f0:d4:47:90:6e:8e:88:da:6c:3b:15:11:
                    0a:d9:55:e4:c8:de:66:dd:f8:b6:7f:9f:94:93:c7:
                    5f:6b:18:3a:eb:7b:39:16:3c:96:c8:2f:c5:36:a4:
                    67:c8:d1:3b:ab:ae:d0:95:d9:89:d0:36:63:17:35:
                    4e:19:4e:4a:c2:e1:21:94:c8:5f:65:c3:e1:d3:ed:
                    03:d1:8a:6c:01:d4:9b:86:18:6a:00:dc:ae:72:4f:
                    00:7e:20:f9:88:e1:5c:d1:ef:2e:cd:f1:5f:04:3e:
                    3a:1d:b6:cf:b8:be:60:dc:6a:81:80:b6:32:8e:3b:
                    be:80:af:ba:23:db:f5:d4:79:5d:e7:ab:fb:47:4b:
                    ac:a4:88:8e:41:51:33:af:95:cc:b7:2e:ad:9e:14:
                    07:dc:aa:14:a4:93:1c:bc:4c:66:88:cb:4f:76:d9:
                    4e:96:50:fb:27:df:2b:1e:2c:4e:28:8f:cf:64:43:
                    c8:1c:41:4d:34:df:fd:78:32:74:cb:fd:fc:36:84:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:09:35:B9:AE:10:C0:66:37:8D:D9:EF:5C:AA:6C:B7:C0:50:93
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:97:14:40:f7:ae:c0:eb:28:6a:89:b9:82:33:70:65:be:
         25:67:1d:d3:92:f7:aa:dc:af:a2:e9:b5:df:39:c6:80:7c:b3:
         10:98:bc:41:91:21:5b:04:58:ca:02:36:53:8c:30:f5:da:37:
         91:3f:11:91:33:95:71:f3:cf:bb:f3:bd:aa:9d:03:28:76:22:
         5c:6b:d3:75:4e:54:d7:55:bf:2b:eb:7e:3b:2d:ec:99:02:ef:
         14:8e:51:20:23:4a:5a:07:65:4f:ad:1f:75:dd:09:ae:f1:13:
         0f:f0:e2:d0:6b:0d:70:8f:75:96:6d:21:1e:c9:de:b6:3e:2b:
         60:00:8d:06:d3:c5:2c:89:e9:2a:c2:a4:b0:fe:9d:7c:67:99:
         75:a3:82:d5:22:e5:b0:af:ea:3e:e3:f5:a9:f0:d3:ff:f5:78:
         c8:11:4a:58:31:57:22:e2:ff:09:ff:18:31:ab:08:88:df:28:
         74:0a:fb:f4:1f:36:60:95:79:a1:09:74:6d:52:b8:fc:c0:46:
         70:13:a5:85:1a:3d:f1:ba:74:a0:d1:23:1a:6e:5a:0d:e7:96:
         94:6d:24:a3:91:58:dd:23:86:ba:82:21:9d:ab:46:e8:08:0f:
         cc:94:84:c7:f7:e1:6e:94:89:a1:c5:2f:43:32:93:df:4f:a7:
         f7:af:4f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFivH89DM/+QLNqP2bax7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmZiYTJjNjIwYzE4NTNkOWFkNDc1YTA1MGJlMjE3MTcx
OGI2NjIwHhcNMjUwNjA2MTQwMDIzWhcNMjUwNjA3MTQwMDIzWjAzMTEwLwYDVQQD
EyhlMmM2MDkzNWI5YWUxMGMwNjYzNzhkZDllZjVjYWE2Y2I3YzA1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+jvK0Ub6TAjUN4qlJrXpb2+Ga39
OPIMj95efetNuTYI1AqqPOCHF/o8zRyyUarw6yMGATut77kQgUapP6Lw1EeQbo6I
2mw7FREK2VXkyN5m3fi2f5+Uk8dfaxg663s5FjyWyC/FNqRnyNE7q67QldmJ0DZj
FzVOGU5KwuEhlMhfZcPh0+0D0YpsAdSbhhhqANyuck8AfiD5iOFc0e8uzfFfBD46
HbbPuL5g3GqBgLYyjju+gK+6I9v11Hld56v7R0uspIiOQVEzr5XMty6tnhQH3KoU
pJMcvExmiMtPdtlOllD7J98rHixOKI/PZEPIHEFNNN/9eDJ0y/38NoQdIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLGCTW5rhDAZjeN2e9cqmy3wFCTMB8GA1UdIwQY
MBaAFFT/uixiDBhT2a1HWgUL4hcXGLZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMt
Y2QzYWNjMTA2NWM3LzEvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmU0YTYtZmUxOC00ZDRjLTk4MGMtY2QzYWNjMTA2NWM3
LzEvVlAtNkxHSU1HRlBaclVkYUJRdmlGeGNZdG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbGXFED3
rsDrKGqJuYIzcGW+JWcd05L3qtyvoum13znGgHyzEJi8QZEhWwRYygI2U4ww9do3
kT8RkTOVcfPPu/O9qp0DKHYiXGvTdU5U11W/K+t+Oy3smQLvFI5RICNKWgdlT60f
dd0JrvETD/Di0GsNcI91lm0hHsnetj4rYACNBtPFLInpKsKksP6dfGeZdaOC1SLl
sK/qPuP1qfDT//V4yBFKWDFXIuL/Cf8YMasIiN8odAr79B82YJV5oQl0bVK4/MBG
cBOlhRo98bp0oNEjGm5aDeeWlG0ko5FY3SOGuoIhnatG6AgPzJSEx/fhbpSJocUv
QzKT30+n969PWw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:43 2025 by rpki-client