Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          TvXWaxysgbekdH3OanSHFnhEThYkag+0UzrA/Zgt9Ps=
Subject key identifier:   31:09:00:23:B4:B1:E4:0F:3B:7B:7A:02:AE:8A:6F:FE:B2:36:3D:B3
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       019751C602AE7F45504260FBCBBF496A3713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 23:00:20 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:20 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:20 +0000
Files and hashes:         1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: LUo7DxpyH2723JEg7tm0GN1HhNd+fOMDtlXev5zGIWE=)
                          2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:02:ae:7f:45:50:42:60:fb:cb:bf:49:6a:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: Jun  8 23:00:20 2025 GMT
            Not After : Jun  9 23:00:20 2025 GMT
        Subject: CN=31090023b4b1e40f3b7b7a02ae8a6ffeb2363db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:8b:51:1a:1c:eb:e8:75:db:f8:cd:f3:de:
                    d4:15:6a:e1:b1:49:c7:48:13:22:43:6c:48:96:48:
                    1e:2a:50:af:0f:cc:90:a6:bf:2d:ae:10:4f:3a:b2:
                    aa:7e:15:c5:29:b6:84:e8:9d:b6:17:f7:ae:8e:be:
                    ca:74:a4:79:5e:2e:8a:be:73:11:36:4c:d3:26:0f:
                    f7:68:9c:c3:e5:20:27:81:36:fc:21:cf:c0:71:31:
                    e4:4c:1c:d9:f0:b6:ff:7b:ca:d9:1a:d8:c1:ac:61:
                    a5:cd:b9:21:3f:0b:94:ca:16:7b:96:d7:be:7e:66:
                    33:7e:2f:0a:34:2a:9e:6b:8c:ac:00:16:47:1b:83:
                    61:98:18:69:07:d6:27:77:4a:04:73:be:dc:12:f0:
                    f2:a8:ba:67:11:59:0a:9a:fa:e3:9c:13:cf:4f:4e:
                    63:c4:1d:f6:86:4b:3d:c2:8c:22:24:36:12:00:8b:
                    40:4c:68:e0:cc:ed:03:ea:31:bc:2a:f3:51:db:74:
                    d7:a5:be:1a:11:64:34:03:1b:bf:f9:81:cc:57:8e:
                    b3:bc:12:c2:51:06:25:f3:98:ea:f9:91:a6:0c:ce:
                    ab:69:1d:9e:59:e3:2c:e4:3c:8b:e0:4a:f6:0e:fe:
                    b5:35:e7:fd:82:97:1b:fb:1e:4f:33:2a:d5:92:33:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:00:23:B4:B1:E4:0F:3B:7B:7A:02:AE:8A:6F:FE:B2:36:3D:B3
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:8a:d3:c8:0e:9d:a4:9e:ea:6f:64:2c:e5:2b:23:63:1c:
         b8:c7:54:7e:d0:41:d8:03:e1:16:26:d3:e2:d7:07:02:17:d6:
         13:90:87:7c:96:c9:86:7b:8c:14:f7:55:3e:15:c2:af:d5:08:
         61:e4:26:a8:66:08:34:6f:f6:8e:32:a8:34:ea:7c:c2:2a:84:
         0b:4e:a6:cb:6d:a6:4b:43:bf:56:50:3c:c3:e8:14:92:aa:7a:
         cc:bb:cf:a0:99:e6:63:86:f2:15:65:ec:50:47:7e:b9:f7:ed:
         40:fc:21:5a:45:fd:7f:39:cb:67:1f:04:6b:f8:c0:ba:49:e8:
         e3:14:03:76:5e:5b:a4:9a:c7:fd:98:3f:9a:22:5e:6f:97:35:
         db:29:e7:2e:93:a8:62:2c:27:a3:9e:90:66:30:43:89:99:e6:
         ee:d6:80:e2:cf:a0:e6:d0:13:e4:e2:52:88:6b:4a:bd:05:30:
         ef:94:16:e8:90:05:79:3c:1d:54:b6:6b:42:9b:07:be:0e:9a:
         93:34:c0:5f:5e:6f:14:9d:fd:9e:09:cb:a8:a2:52:d5:9e:4a:
         14:09:9d:c6:09:a0:73:b6:8b:c9:ed:1c:cf:36:7a:7c:bf:d7:
         b5:83:0c:e6:ce:01:55:f5:b0:d8:07:91:cf:0a:4b:3a:72:e0:
         da:ad:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:48:18 2025 by rpki-client