Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          dZL+gGy0I0PZBvh+ojyCp+6rW3rS7rL9Vxo0Q0iwfao=
Subject key identifier:   19:B0:C7:37:56:73:A9:F7:87:EC:96:3F:FD:DB:6C:AD:67:25:F8:8A
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       01965B02EF1D4293FD64AFE45599E7365C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          052C
Signing time:             Tue 22 Apr 2025 01:00:40 +0000
Manifest this update:     Tue 22 Apr 2025 01:00:40 +0000
Manifest next update:     Wed 23 Apr 2025 01:00:40 +0000
Files and hashes:         1: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: 1PN+19k0lIwmJuaABf5G/KhbkUFB1kfSUxCsaeZH24o=)
                          2: mzLij97rDFnqDN0duCdCx-Rq3j8.roa (hash: P5wlmqQrgR6CiI5pzh35DLiXF58sMvrykYTh7m5zA7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:02:ef:1d:42:93:fd:64:af:e4:55:99:e7:36:5c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Apr 22 01:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=19b0c7375673a9f787ec963ffddb6cad6725f88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:fc:74:9b:7c:e4:1f:db:9e:e3:3b:a6:51:
                    2a:7a:1f:bb:07:2c:bf:5c:94:32:7c:6f:d3:8c:a3:
                    f6:cf:f0:32:94:45:d7:16:50:e9:32:4d:ab:29:7a:
                    dc:7a:98:a8:96:0e:c2:5a:d3:64:d4:bf:f6:e7:d1:
                    c0:27:02:81:f6:4b:77:b3:dc:8c:69:4c:cb:d6:a4:
                    54:4d:14:eb:34:0a:0b:db:46:04:01:1e:c8:99:b0:
                    54:96:66:7a:72:25:70:75:7d:24:a4:9e:c9:f3:24:
                    d3:7d:ce:56:f3:1c:7c:4c:c1:d9:4f:c3:62:32:b0:
                    18:c0:ec:c1:d8:c2:b9:0e:c2:d7:76:71:73:a5:c0:
                    0b:fa:3d:9a:ec:47:5e:1e:54:be:73:bb:f9:c4:c8:
                    c8:d8:6b:f7:e2:4f:89:d9:d7:de:4c:0b:43:08:fa:
                    a5:0f:a4:db:8c:ac:f9:58:bb:83:31:68:56:d1:ca:
                    67:50:57:a7:1d:2f:19:79:49:f8:3c:54:1a:6a:39:
                    e4:e8:cf:71:80:82:d0:65:21:66:1e:8f:c1:30:e8:
                    2b:b9:fb:e8:3e:a5:53:54:3e:e2:12:54:33:42:17:
                    99:47:d4:85:6d:de:74:6e:88:5d:82:04:94:21:59:
                    48:12:ae:a4:ef:28:ed:b6:ec:0d:ef:2a:8c:e7:66:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B0:C7:37:56:73:A9:F7:87:EC:96:3F:FD:DB:6C:AD:67:25:F8:8A
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:71:4f:69:1f:57:27:79:40:f5:4d:80:01:32:a7:d8:6b:9a:
         ba:4b:26:1b:c7:f7:04:b6:9f:cf:22:eb:b2:8f:dd:e2:1e:f9:
         2d:a8:9a:68:35:5c:4f:e1:1b:64:6d:01:7d:df:83:8c:58:2f:
         29:5e:fb:7b:65:14:09:ac:0c:61:eb:01:cf:fa:00:43:20:14:
         e5:fd:1c:53:bd:99:f0:d6:35:0f:69:ff:c0:cf:0d:10:32:9a:
         8d:3a:ba:47:f2:d1:95:72:24:6c:75:f2:33:43:c6:5b:89:dc:
         76:f3:91:23:d0:bb:40:74:20:fc:b1:7e:82:3d:99:7f:b0:e3:
         3e:d8:2c:1f:f1:92:33:93:5e:34:03:55:e4:1a:06:80:3e:bc:
         90:5f:f9:fd:8a:5a:14:8e:32:e2:b8:3d:ef:0c:13:d4:c4:d4:
         dd:4c:e7:0f:10:dd:15:81:03:9d:22:08:41:b2:74:c2:ef:8a:
         da:e3:a5:72:d4:90:ad:ec:ef:dc:7f:4e:46:a0:97:38:19:a9:
         38:b2:7f:e6:9e:1a:0a:a1:96:1f:11:6d:cd:f3:a5:2e:4b:32:
         d6:98:e5:49:fe:02:68:b8:94:b2:ec:3e:2c:cb:9e:2e:5c:1c:
         eb:b6:68:0c:68:2e:29:ad:f8:06:c5:a5:07:1f:ad:cc:59:95:
         83:05:6e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAu8dQpP9ZK/kVZnnNlw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTc5ZDFkNWZhN2ZkMmE0NDViNWRkOGVlOGYyNjM3YjQx
ZjBkNDAwHhcNMjUwNDIyMDEwMDQwWhcNMjUwNDIzMDEwMDQwWjAzMTEwLwYDVQQD
EygxOWIwYzczNzU2NzNhOWY3ODdlYzk2M2ZmZGRiNmNhZDY3MjVmODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI78dJt85B/bnuM7plEqeh+7Byy/
XJQyfG/TjKP2z/AylEXXFlDpMk2rKXrcepiolg7CWtNk1L/259HAJwKB9kt3s9yM
aUzL1qRUTRTrNAoL20YEAR7ImbBUlmZ6ciVwdX0kpJ7J8yTTfc5W8xx8TMHZT8Ni
MrAYwOzB2MK5DsLXdnFzpcAL+j2a7EdeHlS+c7v5xMjI2Gv34k+J2dfeTAtDCPql
D6TbjKz5WLuDMWhW0cpnUFenHS8ZeUn4PFQaajnk6M9xgILQZSFmHo/BMOgrufvo
PqVTVD7iElQzQheZR9SFbd50bohdggSUIVlIEq6k7yjttuwN7yqM52Z5ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmwxzdWc6n3h+yWP/3bbK1nJfiKMB8GA1UdIwQY
MBaAFG1XnR1fp/0qRFtd2O6PJje0Hw1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDct
ZjYzOTU4NjBmYzk4LzEvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDctZjYzOTU4NjBmYzk4
LzEvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnFPaR9X
J3lA9U2AATKn2GuauksmG8f3BLafzyLrso/d4h75LaiaaDVcT+EbZG0Bfd+DjFgv
KV77e2UUCawMYesBz/oAQyAU5f0cU72Z8NY1D2n/wM8NEDKajTq6R/LRlXIkbHXy
M0PGW4ncdvORI9C7QHQg/LF+gj2Zf7DjPtgsH/GSM5NeNANV5BoGgD68kF/5/Ypa
FI4y4rg97wwT1MTU3UznDxDdFYEDnSIIQbJ0wu+K2uOlctSQrezv3H9ORqCXOBmp
OLJ/5p4aCqGWHxFtzfOlLksy1pjlSf4CaLiUsuw+LMueLlwc67ZoDGguKa34BsWl
Bx+tzFmVgwVupQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:49 2025 by rpki-client