Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File:                     VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier:          lOF/ufINcZ3LeVtekwKXu7yNOXh8XpLys9mwrt0uAEs=
Subject key identifier:   5E:9B:3F:18:1F:BF:68:35:A5:35:F9:BF:D5:1B:AD:99:AE:4C:15:22
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer:       /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial:       01974AE9202C68375B37AA5905E033B14AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:21 +0000
Files and hashes:         1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: 5bQYC/r/710A634C+EM+M+nxdPgTn/aKLEl9w3k1P5k=)
                          2: ZI5xHGAAawem8l14dj3kmApEGWg.roa (hash: gQVQJokb8l7v3e3ujraYshzYQvAhAvVrZfuw7H2HApU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:20:2c:68:37:5b:37:aa:59:05:e0:33:b1:4a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
        Validity
            Not Before: Jun  7 15:01:21 2025 GMT
            Not After : Jun  8 15:01:21 2025 GMT
        Subject: CN=5e9b3f181fbf6835a535f9bfd51bad99ae4c1522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:2e:62:3a:30:63:1d:dc:5d:1b:c6:8a:51:
                    ba:ab:4c:37:bd:24:03:c3:69:bf:6d:d3:1f:02:66:
                    8b:e3:e3:a0:76:49:15:88:eb:4c:bc:c3:fb:6f:95:
                    48:a5:7c:84:4f:3e:a5:8e:56:13:82:13:80:47:4c:
                    76:bd:a9:ad:80:74:1c:7f:0d:9a:d8:78:50:66:40:
                    47:24:a5:30:cc:6b:38:4f:cd:28:b9:52:64:12:e2:
                    cf:29:d3:43:79:05:c9:33:ea:37:f5:2c:8c:e6:85:
                    1f:55:3a:b4:12:af:2c:5c:1c:6b:b1:92:c8:05:ae:
                    f2:51:b4:15:4d:fa:d6:e0:74:04:3f:ea:65:3d:b8:
                    aa:3c:7d:dd:8d:bc:aa:91:e6:dd:34:f8:75:30:9b:
                    4a:c7:74:e8:5b:d2:c5:d3:01:1b:44:28:6e:ab:72:
                    e3:33:3d:b6:c5:de:65:63:e5:5a:a8:a1:11:5d:c5:
                    59:65:65:b1:33:4f:20:be:ed:6d:cc:a0:33:ae:a8:
                    7e:7b:6c:93:32:21:1d:30:e8:3e:e8:09:e6:66:dc:
                    f4:52:48:44:bb:8d:cd:df:cd:68:3f:e9:75:6a:60:
                    64:5f:a7:53:f0:01:12:55:bd:d4:20:38:62:f8:17:
                    a6:19:52:29:05:d5:5f:be:e8:b8:52:6c:ea:bf:c3:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:3F:18:1F:BF:68:35:A5:35:F9:BF:D5:1B:AD:99:AE:4C:15:22
            X509v3 Authority Key Identifier:
                keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:10:30:87:ba:be:e0:22:e0:36:e0:29:20:28:92:6d:10:17:
         36:70:e3:bc:d0:3b:06:d3:e3:a5:38:66:53:0a:59:cc:53:c5:
         e2:98:80:66:88:c0:28:0e:42:7b:db:a6:77:44:e0:e8:50:df:
         f5:db:88:c6:26:19:2e:24:c9:15:37:cf:3f:b2:cd:a6:6b:54:
         9d:29:45:d3:6b:c7:8f:e1:26:e7:b0:63:82:71:3f:f4:21:10:
         89:ae:49:b1:b1:04:57:ff:83:f4:64:dd:b6:aa:5e:0e:b0:13:
         62:fc:1a:45:96:07:fe:1b:cd:d0:ca:0e:69:e0:16:f0:b2:17:
         4c:2d:2d:2c:39:6d:2f:c5:b6:ce:ab:1e:1f:a9:00:4a:90:5b:
         28:21:59:7e:52:18:dd:da:ff:56:3e:0f:ff:4c:ea:87:54:1c:
         73:8e:97:8b:aa:91:8c:2d:85:d5:74:4f:23:7d:4d:c1:e0:f8:
         c5:ab:9b:d6:a7:d7:69:a3:97:6d:45:c6:01:a2:c0:87:4e:7e:
         27:6f:f7:af:4f:94:ee:ce:9c:03:a4:cb:89:1a:fd:9e:ef:44:
         85:4b:66:63:a7:90:91:24:49:45:dd:d6:28:08:6d:7b:6f:2a:
         90:2d:64:51:db:1b:12:45:12:db:8e:d9:5e:34:8d:ef:a9:ed:
         c1:50:3c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6SAsaDdbN6pZBeAzsUrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDM0MzdlZTljNWE4Yzg0ZjhkMzQ4M2RjNWUwZmE0YmE4
OWNjM2QwHhcNMjUwNjA3MTUwMTIxWhcNMjUwNjA4MTUwMTIxWjAzMTEwLwYDVQQD
Eyg1ZTliM2YxODFmYmY2ODM1YTUzNWY5YmZkNTFiYWQ5OWFlNGMxNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHsuYjowYx3cXRvGilG6q0w3vSQD
w2m/bdMfAmaL4+OgdkkViOtMvMP7b5VIpXyETz6ljlYTghOAR0x2vamtgHQcfw2a
2HhQZkBHJKUwzGs4T80ouVJkEuLPKdNDeQXJM+o39SyM5oUfVTq0Eq8sXBxrsZLI
Ba7yUbQVTfrW4HQEP+plPbiqPH3djbyqkebdNPh1MJtKx3ToW9LF0wEbRChuq3Lj
Mz22xd5lY+VaqKERXcVZZWWxM08gvu1tzKAzrqh+e2yTMiEdMOg+6AnmZtz0UkhE
u43N381oP+l1amBkX6dT8AESVb3UIDhi+BemGVIpBdVfvui4Umzqv8M8ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6bPxgfv2g1pTX5v9UbrZmuTBUiMB8GA1UdIwQY
MBaAFFVDQ37pxajIT400g9xeD6S6icw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMt
NGE1ZjkyZTViZGUyLzEvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYjI1MjQtZmM3Yi00ZWNmLWE4MTMtNGE1ZjkyZTViZGUy
LzEvVlVORGZ1bkZxTWhQalRTRDNGNFBwTHFKekQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhAwh7q+
4CLgNuApICiSbRAXNnDjvNA7BtPjpThmUwpZzFPF4piAZojAKA5Ce9umd0Tg6FDf
9duIxiYZLiTJFTfPP7LNpmtUnSlF02vHj+Em57BjgnE/9CEQia5JsbEEV/+D9GTd
tqpeDrATYvwaRZYH/hvN0MoOaeAW8LIXTC0tLDltL8W2zqseH6kASpBbKCFZflIY
3dr/Vj4P/0zqh1Qcc46Xi6qRjC2F1XRPI31NweD4xaub1qfXaaOXbUXGAaLAh05+
J2/3r0+U7s6cA6TLiRr9nu9EhUtmY6eQkSRJRd3WKAhte28qkC1kUdsbEkUS247Z
XjSN76ntwVA8OA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:38 2025 by rpki-client