Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File:                     vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier:          RxU8WoS8d8OiKgroYIoKqhrx9KOiwzfXUklxkMzLiFE=
Subject key identifier:   6C:82:35:0A:C4:7E:31:09:A3:41:4F:F7:63:2B:3A:6D:40:9C:7E:FA
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer:       /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial:       01974F6A62E482B39D9DF036106E9D1B388F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number:          0F89
Signing time:             Sun 08 Jun 2025 12:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 12:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 12:01:01 +0000
Files and hashes:         1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: 5wyaNXTiiLLpBYXmYogVzJfi5mAGQwp0WDqFqPCGFRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:62:e4:82:b3:9d:9d:f0:36:10:6e:9d:1b:38:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
        Validity
            Not Before: Jun  8 12:01:01 2025 GMT
            Not After : Jun  9 12:01:01 2025 GMT
        Subject: CN=6c82350ac47e3109a3414ff7632b3a6d409c7efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:9b:f7:73:ba:f4:c1:7e:47:77:58:84:bd:
                    51:a3:9b:bf:c4:3b:22:9d:8d:8a:07:be:d0:71:25:
                    6b:fe:91:ca:a5:e1:3a:48:8e:a0:0d:00:5b:7d:9f:
                    20:ec:93:71:70:9a:e9:e2:bd:8c:b8:fb:08:7a:8f:
                    6d:a9:29:ed:5f:41:85:42:b6:d1:6c:8b:20:f0:78:
                    86:5a:6d:08:d3:c1:d7:4e:90:82:63:c7:31:34:b1:
                    5f:f8:fe:21:9f:8b:a0:50:55:5c:b8:f2:7e:c2:c8:
                    96:a3:93:e2:85:28:60:9f:13:c5:76:59:58:8e:8d:
                    ff:72:e8:c9:22:fc:c2:70:da:17:b6:73:9f:55:8d:
                    fd:f3:64:37:c3:c8:7e:8a:ca:0e:00:bd:f5:8e:ca:
                    48:ed:7c:15:b9:41:79:b2:1b:54:7c:4f:1d:1e:c2:
                    28:df:1b:82:21:3b:f4:a8:7c:8c:d8:c1:6e:5f:e0:
                    40:fc:ec:9d:e0:71:a4:e8:e4:be:ef:c4:7e:0f:79:
                    4e:5a:87:6d:1d:f4:b6:14:a2:32:0a:52:34:74:d3:
                    b4:a5:9e:e6:63:1a:55:b9:26:27:ad:b4:0b:02:f6:
                    e1:5b:87:c0:6c:52:1c:1b:3a:18:e0:b3:99:16:cd:
                    ef:5c:04:3d:ae:f6:36:3c:2e:f5:fc:f8:55:cc:f7:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:35:0A:C4:7E:31:09:A3:41:4F:F7:63:2B:3A:6D:40:9C:7E:FA
            X509v3 Authority Key Identifier:
                keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:a1:e1:be:bb:4c:c0:ae:4d:c4:1f:55:7b:a1:30:4b:fb:
         3c:7b:be:d8:10:78:30:7f:3a:a6:3a:35:a0:fb:1c:e4:5e:61:
         4c:64:0d:5a:0a:19:7b:46:1d:ae:db:16:29:f4:a2:65:39:10:
         32:2a:bc:0c:b0:4c:44:0a:24:7e:05:1d:c2:b4:c8:8e:63:8d:
         32:c0:6d:f8:63:e0:b7:c6:f4:a5:d7:3f:36:c0:7b:7e:3b:2f:
         49:ea:93:49:61:71:94:88:e6:51:3f:78:d8:8d:d4:cf:15:fa:
         52:16:56:98:6e:f5:8b:e3:68:d7:a2:6c:98:ee:86:38:a8:60:
         9a:fb:72:0e:b0:bf:dd:79:22:7c:bb:8a:25:ec:8d:27:f3:93:
         c5:4b:32:7a:7c:92:f6:0b:f3:5e:0b:e4:1d:be:f6:12:92:97:
         4a:c4:ae:f4:0c:a4:fc:e7:22:65:22:46:0b:17:52:88:51:3c:
         4a:ed:9d:a7:3f:15:04:6c:24:af:23:b2:e9:c0:e9:5f:48:25:
         57:71:76:a2:f2:56:f9:2a:b3:c2:d9:f7:ae:b8:9d:25:8c:ad:
         a2:b4:46:0b:b5:63:0a:b8:61:3b:be:fa:87:b4:46:7d:61:b4:
         07:ee:0c:f4:03:58:63:b5:31:88:1b:26:31:17:01:40:23:86:
         58:de:5e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPamLkgrOdnfA2EG6dGziPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDIzNWZjM2NjMzRjNDU0OGM2YTg0ZTM1ZTQ5NTMzMjg1
MzliZTEwHhcNMjUwNjA4MTIwMTAxWhcNMjUwNjA5MTIwMTAxWjAzMTEwLwYDVQQD
Eyg2YzgyMzUwYWM0N2UzMTA5YTM0MTRmZjc2MzJiM2E2ZDQwOWM3ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXeb93O69MF+R3dYhL1Ro5u/xDsi
nY2KB77QcSVr/pHKpeE6SI6gDQBbfZ8g7JNxcJrp4r2MuPsIeo9tqSntX0GFQrbR
bIsg8HiGWm0I08HXTpCCY8cxNLFf+P4hn4ugUFVcuPJ+wsiWo5PihShgnxPFdllY
jo3/cujJIvzCcNoXtnOfVY3982Q3w8h+isoOAL31jspI7XwVuUF5shtUfE8dHsIo
3xuCITv0qHyM2MFuX+BA/Oyd4HGk6OS+78R+D3lOWodtHfS2FKIyClI0dNO0pZ7m
YxpVuSYnrbQLAvbhW4fAbFIcGzoY4LOZFs3vXAQ9rvY2PC71/PhVzPfZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyCNQrEfjEJo0FP92MrOm1AnH76MB8GA1UdIwQY
MBaAFL3SNfw8w0xFSMaoTjXklTMoU5vhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMt
MWVjZjFlZDY0ODdiLzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMtMWVjZjFlZDY0ODdi
LzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9ih4b67
TMCuTcQfVXuhMEv7PHu+2BB4MH86pjo1oPsc5F5hTGQNWgoZe0YdrtsWKfSiZTkQ
Miq8DLBMRAokfgUdwrTIjmONMsBt+GPgt8b0pdc/NsB7fjsvSeqTSWFxlIjmUT94
2I3UzxX6UhZWmG71i+No16JsmO6GOKhgmvtyDrC/3XkifLuKJeyNJ/OTxUsyenyS
9gvzXgvkHb72EpKXSsSu9Ayk/OciZSJGCxdSiFE8Su2dpz8VBGwkryOy6cDpX0gl
V3F2ovJW+Sqzwtn3rridJYytorRGC7VjCrhhO776h7RGfWG0B+4M9ANYY7UxiBsm
MRcBQCOGWN5elg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:05 2025 by rpki-client