Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          TbrKtpjaRV8Rf/dexshT2l/JhfBJAKCucAMM9TSrpa4=
Subject key identifier:   E6:FF:66:F5:B6:60:15:A4:30:D7:6F:A0:2A:D1:B3:3B:A1:0E:FA:B4
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       0196534A482C6724E951EAB98FDD30074456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          045D
Signing time:             Sun 20 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 20 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 21 Apr 2025 13:01:38 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: k9RDKlRfKbQln65Uzj513hTj/+PPTu8aw/eAfkgpENM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:4a:48:2c:67:24:e9:51:ea:b9:8f:dd:30:07:44:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Apr 20 13:01:38 2025 GMT
            Not After : Apr 21 13:01:38 2025 GMT
        Subject: CN=e6ff66f5b66015a430d76fa02ad1b33ba10efab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:db:29:d5:fd:c1:31:b5:00:af:c1:75:21:
                    cc:17:25:95:25:7d:4e:2d:39:92:50:f5:3a:4a:c8:
                    36:09:ef:a7:16:e8:d1:01:67:bb:84:ec:76:12:de:
                    94:3e:fb:ca:45:b0:6d:1e:c5:e2:46:81:fe:f2:70:
                    ab:fe:63:91:c0:08:f5:81:fb:56:43:77:14:3b:50:
                    35:f2:76:cd:63:5f:7f:0b:a5:5e:a8:56:3a:88:dc:
                    f7:3f:51:84:3b:b7:9b:e8:56:9c:3b:25:b6:82:f7:
                    d5:4e:8a:6d:a6:00:01:2f:7f:d1:2a:e8:ed:2e:1c:
                    81:49:61:2d:51:91:11:88:a6:4e:7c:0c:f1:6b:79:
                    b3:89:bb:aa:fd:a4:74:d7:42:04:67:0b:d3:3e:b5:
                    ba:78:30:c2:5e:fa:28:67:2f:55:1f:9f:f5:01:45:
                    2f:40:2d:3e:a7:18:ea:7d:46:f8:27:d7:78:5c:45:
                    de:9a:18:59:3b:64:5c:9f:71:65:d4:ce:27:cf:81:
                    20:47:6d:13:b8:58:97:6c:f5:af:22:8a:2f:59:08:
                    73:b7:05:86:a3:ba:be:75:1c:4c:d8:31:fa:c2:82:
                    9c:ba:4a:97:a8:4f:19:da:82:aa:53:b4:b3:13:4c:
                    45:19:52:f7:14:8a:dd:4d:4c:64:42:7f:64:2f:a7:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:66:F5:B6:60:15:A4:30:D7:6F:A0:2A:D1:B3:3B:A1:0E:FA:B4
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:28:91:ee:0f:b2:4f:0e:7c:cc:73:b5:39:f9:18:b2:56:
         14:28:32:9f:39:ba:3b:31:d2:48:35:60:a1:97:b3:83:94:26:
         15:bc:1a:24:4f:3f:12:90:cc:4e:34:b8:5e:83:df:91:6b:78:
         90:e7:3b:91:5e:11:f1:98:e3:b3:14:cd:84:6d:45:81:90:1d:
         71:47:35:1b:31:b5:fc:3b:70:ef:b6:a8:93:ee:b5:39:89:8d:
         fb:a9:fd:34:26:20:16:99:55:51:1a:b2:5f:dd:e0:f2:82:d2:
         1f:73:4b:57:9e:ed:cf:02:51:aa:0f:8a:7c:23:90:1f:fd:02:
         95:e0:c4:d9:cc:95:d1:0f:db:ca:6a:fe:5b:02:19:81:d5:e2:
         ea:98:27:7b:f8:b7:dc:b3:48:84:0c:ec:00:04:ae:05:33:23:
         23:fc:15:5a:d1:9a:33:45:4c:cd:38:b7:ea:56:c7:03:55:ba:
         d1:35:c0:0b:d9:72:27:c8:02:e1:60:36:e3:cf:48:8b:32:e2:
         91:90:31:42:15:d0:51:02:95:7a:e1:59:59:35:73:67:90:6a:
         18:88:c4:f2:bc:7d:88:a7:85:40:35:7d:a7:cd:cc:79:6a:c7:
         f4:a0:94:97:91:e9:58:d1:87:8b:e6:4a:27:b5:ff:8d:7c:2c:
         c5:6e:71:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSkgsZyTpUeq5j90wB0RWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDA4NjM0Y2ZhNWU4MTY2OTNjMmI3OWUyZThiOGFlZWJh
ZjU5NzYwHhcNMjUwNDIwMTMwMTM4WhcNMjUwNDIxMTMwMTM4WjAzMTEwLwYDVQQD
EyhlNmZmNjZmNWI2NjAxNWE0MzBkNzZmYTAyYWQxYjMzYmExMGVmYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aHbKdX9wTG1AK/BdSHMFyWVJX1O
LTmSUPU6Ssg2Ce+nFujRAWe7hOx2Et6UPvvKRbBtHsXiRoH+8nCr/mORwAj1gftW
Q3cUO1A18nbNY19/C6VeqFY6iNz3P1GEO7eb6FacOyW2gvfVToptpgABL3/RKujt
LhyBSWEtUZERiKZOfAzxa3mzibuq/aR010IEZwvTPrW6eDDCXvooZy9VH5/1AUUv
QC0+pxjqfUb4J9d4XEXemhhZO2Rcn3Fl1M4nz4EgR20TuFiXbPWvIoovWQhztwWG
o7q+dRxM2DH6woKcukqXqE8Z2oKqU7SzE0xFGVL3FIrdTUxkQn9kL6e02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb/ZvW2YBWkMNdvoCrRszuhDvq0MB8GA1UdIwQY
MBaAFFXQhjTPpegWaTwreeLouK7rr1l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEt
MDU3NWQwYTQ2YmFhLzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEtMDU3NWQwYTQ2YmFh
LzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJ4oke4P
sk8OfMxztTn5GLJWFCgynzm6OzHSSDVgoZezg5QmFbwaJE8/EpDMTjS4XoPfkWt4
kOc7kV4R8ZjjsxTNhG1FgZAdcUc1GzG1/Dtw77aok+61OYmN+6n9NCYgFplVURqy
X93g8oLSH3NLV57tzwJRqg+KfCOQH/0CleDE2cyV0Q/bymr+WwIZgdXi6pgne/i3
3LNIhAzsAASuBTMjI/wVWtGaM0VMzTi36lbHA1W60TXAC9lyJ8gC4WA2489IizLi
kZAxQhXQUQKVeuFZWTVzZ5BqGIjE8rx9iKeFQDV9p83MeWrH9KCUl5HpWNGHi+ZK
J7X/jXwsxW5xrQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:31 2025 by rpki-client