Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          fI8GdV9ZPINbfhjJJBePsTPMiB+/Ezs6C+8wM1aVfW0=
Subject key identifier:   BC:EB:88:A9:76:C0:6F:26:61:BB:EC:66:65:C3:FC:31:37:85:7F:C1
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       01975234FC35CD9C894BE5274961C8843C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          04A4
Signing time:             Mon 09 Jun 2025 01:01:33 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:33 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:33 +0000
Files and hashes:         1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=)
                          2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: isgyw7rnHbmUMOvFJPVOjzS8jrUvriULzhmoiD3GIvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:fc:35:cd:9c:89:4b:e5:27:49:61:c8:84:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Jun  9 01:01:33 2025 GMT
            Not After : Jun 10 01:01:33 2025 GMT
        Subject: CN=bceb88a976c06f2661bbec6665c3fc3137857fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:b9:1e:7d:cc:58:aa:a6:9f:54:61:8e:cd:
                    65:48:84:2f:d3:0d:89:91:d2:a8:11:29:9b:9d:a1:
                    3d:85:8e:3a:a6:41:51:b0:dd:c6:ef:65:cf:cc:ae:
                    cf:55:3b:34:24:13:ca:5a:61:38:0e:69:52:0e:33:
                    9d:b0:cc:e8:e7:0d:c8:54:11:1f:e4:6a:8d:5d:8a:
                    2c:42:3c:f0:e9:d1:78:59:71:b2:02:78:3b:a2:cb:
                    2c:37:5b:40:1c:34:2c:f9:15:67:85:cb:1b:c4:5c:
                    e1:16:fc:15:82:33:08:9c:2a:8a:38:e4:9a:f2:6d:
                    e3:b1:1f:e7:5b:6e:c0:bb:7a:45:6c:11:89:09:40:
                    ac:1f:82:8a:54:4a:22:b5:6e:61:87:d2:67:fa:46:
                    6d:6e:ac:fd:a8:8e:4f:1a:7d:9f:80:41:6e:3d:47:
                    88:8f:65:2b:d3:6a:80:8b:78:52:71:21:9a:aa:ed:
                    02:a5:0c:e3:dc:3f:6b:25:44:e3:1c:b8:cf:47:ee:
                    a5:f1:63:a9:f6:2b:50:d5:91:11:bf:db:f1:c1:b5:
                    0e:ce:e6:af:f1:e6:43:7c:10:21:01:ef:9f:f9:de:
                    8c:e9:4d:50:cb:18:e6:af:cf:60:9b:aa:7c:e6:19:
                    24:b8:77:d5:b5:5b:bc:47:59:d1:8b:37:f4:23:9a:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:88:A9:76:C0:6F:26:61:BB:EC:66:65:C3:FC:31:37:85:7F:C1
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:87:27:d0:95:0b:17:62:02:a7:66:8f:fa:c2:69:9a:fb:3d:
         41:92:59:0e:cf:50:ec:10:aa:06:fb:b8:f2:76:ec:bf:cd:c3:
         f7:9f:5b:dc:73:ea:59:bb:95:43:8f:b7:36:2c:e7:05:80:85:
         96:a1:fb:e1:a0:7c:22:eb:b9:bd:58:36:15:ea:b6:14:84:db:
         07:0d:80:46:a6:a8:82:c2:c7:9e:3e:0e:37:4b:06:57:0b:c4:
         92:5c:50:40:bc:a6:62:a7:fc:c8:04:65:20:cd:b2:e6:6d:80:
         e7:ab:11:fc:07:4c:e2:94:ef:04:70:5a:03:7d:06:3b:12:60:
         a3:14:77:79:25:37:3b:77:66:84:27:49:b2:40:c6:a5:0f:66:
         60:8b:2c:29:c9:6c:f5:3a:d0:df:56:89:ff:47:5b:9f:af:85:
         98:b7:ea:5c:d1:9b:f4:6d:cb:80:9f:07:78:45:1a:3c:4d:30:
         ee:c3:34:15:23:4c:f2:a1:48:4b:e3:d3:7c:66:24:ba:b9:33:
         dc:df:b7:2f:66:04:5a:e3:0f:a9:6d:0e:69:65:56:10:cd:ae:
         d7:a9:ac:76:14:5b:c8:85:90:e2:fd:9b:4a:9c:ff:71:a5:bf:
         07:fe:7a:b3:0d:61:45:7e:f6:e3:53:28:87:89:35:32:55:ca:
         9d:22:75:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNPw1zZyJS+UnSWHIhDyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi
MmNlYTEwHhcNMjUwNjA5MDEwMTMzWhcNMjUwNjEwMDEwMTMzWjAzMTEwLwYDVQQD
EyhiY2ViODhhOTc2YzA2ZjI2NjFiYmVjNjY2NWMzZmMzMTM3ODU3ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLS5Hn3MWKqmn1Rhjs1lSIQv0w2J
kdKoESmbnaE9hY46pkFRsN3G72XPzK7PVTs0JBPKWmE4DmlSDjOdsMzo5w3IVBEf
5GqNXYosQjzw6dF4WXGyAng7osssN1tAHDQs+RVnhcsbxFzhFvwVgjMInCqKOOSa
8m3jsR/nW27Au3pFbBGJCUCsH4KKVEoitW5hh9Jn+kZtbqz9qI5PGn2fgEFuPUeI
j2Ur02qAi3hScSGaqu0CpQzj3D9rJUTjHLjPR+6l8WOp9itQ1ZERv9vxwbUOzuav
8eZDfBAhAe+f+d6M6U1Qyxjmr89gm6p85hkkuHfVtVu8R1nRizf0I5rCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzriKl2wG8mYbvsZmXD/DE3hX/BMB8GA1UdIwQY
MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt
ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5
LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYcn0JUL
F2ICp2aP+sJpmvs9QZJZDs9Q7BCqBvu48nbsv83D959b3HPqWbuVQ4+3NiznBYCF
lqH74aB8Iuu5vVg2Feq2FITbBw2ARqaogsLHnj4ON0sGVwvEklxQQLymYqf8yARl
IM2y5m2A56sR/AdM4pTvBHBaA30GOxJgoxR3eSU3O3dmhCdJskDGpQ9mYIssKcls
9TrQ31aJ/0dbn6+FmLfqXNGb9G3LgJ8HeEUaPE0w7sM0FSNM8qFIS+PTfGYkurkz
3N+3L2YEWuMPqW0OaWVWEM2u16msdhRbyIWQ4v2bSpz/caW/B/56sw1hRX7241Mo
h4k1MlXKnSJ1Sw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:05:49 2025 by rpki-client