Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          2lcwjws04wAaLjjZX3b3llE10hpuw3N2jUrZG2dNynM=
Subject key identifier:   C4:56:D2:4F:21:25:70:93:38:F3:1F:29:26:F3:39:37:7F:10:B7:59
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       0197488CAB6898782FC9B87428E99152E0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          04DC
Signing time:             Sat 07 Jun 2025 04:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:07 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: Xy6WJs+HEDFFT3eMCuCPJikW7rPa1AYxhHjoTNnLzMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:ab:68:98:78:2f:c9:b8:74:28:e9:91:52:e0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Jun  7 04:01:07 2025 GMT
            Not After : Jun  8 04:01:07 2025 GMT
        Subject: CN=c456d24f2125709338f31f2926f339377f10b759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:ae:34:d6:0a:c5:36:5e:15:46:44:3e:08:
                    80:7a:d5:80:ce:b5:1f:e1:d1:f3:99:4e:72:4a:74:
                    21:bf:3d:31:34:68:62:9c:34:bb:f7:23:9c:4f:b4:
                    e6:66:fc:4e:08:81:48:a0:07:fc:db:62:e0:25:fe:
                    bc:f4:80:c8:30:a2:c5:4b:15:aa:cd:f5:ce:a7:aa:
                    5f:96:4e:50:fd:19:de:a4:5f:14:45:b6:c4:7a:ad:
                    63:be:8b:0c:29:43:7b:46:10:da:f4:6f:ba:00:75:
                    e7:36:b1:a4:22:bd:6a:47:ba:fa:d4:3c:14:a1:5b:
                    1d:bb:cc:f7:b3:fd:6c:d4:b3:64:c7:6c:79:10:52:
                    7b:eb:07:f9:17:a9:ca:ae:4d:f6:5b:c4:bd:98:3f:
                    f0:b5:32:4d:c7:9a:f9:c8:36:ca:20:c8:b6:f5:2b:
                    af:95:c1:ae:b0:0f:02:9e:8c:2e:aa:c4:bd:68:b3:
                    c3:1e:4a:25:b3:77:da:96:53:c2:75:38:0b:8e:43:
                    86:83:d4:07:c1:e5:41:2b:29:c1:2e:91:51:0e:a4:
                    78:18:a7:64:d3:78:d4:af:30:65:f1:e5:36:cb:ab:
                    e7:12:4c:58:51:27:78:78:50:39:da:d1:93:a9:47:
                    37:91:48:ff:b0:33:54:95:f0:96:e7:0f:b4:0f:7f:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:D2:4F:21:25:70:93:38:F3:1F:29:26:F3:39:37:7F:10:B7:59
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:df:f2:bc:06:5d:48:52:6c:b8:84:b4:de:49:07:9e:58:75:
         7a:ed:da:59:c9:2b:98:30:df:02:b1:c0:3f:9f:ee:f5:5c:b2:
         bd:0c:26:ba:07:f5:18:6b:6b:ae:f0:c0:a5:5b:1b:8c:8d:09:
         1f:1d:44:26:b8:29:5e:03:c6:6c:f2:2d:67:45:73:13:b3:e3:
         17:6e:3f:f1:b3:f4:6c:b0:38:6c:3d:3e:c7:b6:6b:9a:86:cf:
         37:83:a8:39:5b:67:59:97:1d:f8:26:c4:a0:df:f0:77:a6:53:
         63:16:4b:0a:5f:29:e2:13:1c:00:a4:68:37:5c:86:a3:3e:f8:
         c8:28:4f:b4:63:9f:9b:ff:f1:63:85:54:6b:4f:72:84:0b:2a:
         3b:57:24:83:ce:b7:46:f6:28:f3:21:24:12:1a:40:b7:39:74:
         54:ff:c2:e9:c0:91:86:ef:6b:65:ea:fe:65:c9:7d:78:89:90:
         2e:94:8c:e0:9d:6d:8e:8e:a3:1b:59:23:20:31:14:0e:7b:39:
         ed:49:e6:ba:dd:bf:08:11:95:02:22:81:e0:31:d5:be:ba:03:
         16:62:4a:43:b1:ae:ea:a4:1d:46:07:c5:f4:31:8b:80:06:d2:
         7b:d0:93:4c:03:09:bb:fc:b3:e0:51:1e:bd:7e:2b:84:82:95:
         5c:96:75:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjKtomHgvybh0KOmRUuDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDA4NjM0Y2ZhNWU4MTY2OTNjMmI3OWUyZThiOGFlZWJh
ZjU5NzYwHhcNMjUwNjA3MDQwMTA3WhcNMjUwNjA4MDQwMTA3WjAzMTEwLwYDVQQD
EyhjNDU2ZDI0ZjIxMjU3MDkzMzhmMzFmMjkyNmYzMzkzNzdmMTBiNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthauNNYKxTZeFUZEPgiAetWAzrUf
4dHzmU5ySnQhvz0xNGhinDS79yOcT7TmZvxOCIFIoAf822LgJf689IDIMKLFSxWq
zfXOp6pflk5Q/RnepF8URbbEeq1jvosMKUN7RhDa9G+6AHXnNrGkIr1qR7r61DwU
oVsdu8z3s/1s1LNkx2x5EFJ76wf5F6nKrk32W8S9mD/wtTJNx5r5yDbKIMi29Suv
lcGusA8CnowuqsS9aLPDHkols3fallPCdTgLjkOGg9QHweVBKynBLpFRDqR4GKdk
03jUrzBl8eU2y6vnEkxYUSd4eFA52tGTqUc3kUj/sDNUlfCW5w+0D39UBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRW0k8hJXCTOPMfKSbzOTd/ELdZMB8GA1UdIwQY
MBaAFFXQhjTPpegWaTwreeLouK7rr1l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEt
MDU3NWQwYTQ2YmFhLzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEtMDU3NWQwYTQ2YmFh
LzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd/yvAZd
SFJsuIS03kkHnlh1eu3aWckrmDDfArHAP5/u9VyyvQwmugf1GGtrrvDApVsbjI0J
Hx1EJrgpXgPGbPItZ0VzE7PjF24/8bP0bLA4bD0+x7ZrmobPN4OoOVtnWZcd+CbE
oN/wd6ZTYxZLCl8p4hMcAKRoN1yGoz74yChPtGOfm//xY4VUa09yhAsqO1ckg863
RvYo8yEkEhpAtzl0VP/C6cCRhu9rZer+Zcl9eImQLpSM4J1tjo6jG1kjIDEUDns5
7Unmut2/CBGVAiKB4DHVvroDFmJKQ7Gu6qQdRgfF9DGLgAbSe9CTTAMJu/yz4FEe
vX4rhIKVXJZ1Og==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:09 2025 by rpki-client