Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          TyWZuVV533yiKtagmz6yVFDI1M1TVqwTvZT+Sxs5x7g=
Subject key identifier:   35:09:98:42:46:B6:D3:76:72:53:B3:FC:63:2C:85:E1:BC:97:47:06
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       0197485595FC541B3A57CEA53B369983B425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 03:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:57 +0000
Files and hashes:         1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: 4rBdT/YgG3Lnsarzm7oE2eFR0+gRL2dMGUg3bxKlWx0=)
                          3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
                          4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:95:fc:54:1b:3a:57:ce:a5:3b:36:99:83:b4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Jun  7 03:00:57 2025 GMT
            Not After : Jun  8 03:00:57 2025 GMT
        Subject: CN=3509984246b6d3767253b3fc632c85e1bc974706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:05:4b:0d:5e:0c:f9:0b:bb:a8:39:e3:c6:
                    23:05:50:ea:5a:62:69:ff:8c:fe:1d:9a:a0:fc:8e:
                    0e:f3:5a:66:e7:ba:b1:b1:7a:a7:72:6d:35:1b:20:
                    b0:54:4a:e2:61:23:60:9f:79:aa:4c:d4:39:3d:f9:
                    09:de:1b:f0:ac:0e:ac:bc:00:65:56:9c:8c:6a:39:
                    b4:9e:c0:58:c8:bc:5f:7e:6d:21:63:98:ae:5b:ea:
                    b8:38:a0:7e:33:1e:d4:78:08:8e:d5:51:7d:4a:65:
                    95:21:43:b0:4d:d6:50:d4:30:d3:79:77:0f:a0:8e:
                    9e:0b:94:d0:64:e2:14:ef:bd:64:9a:f2:55:a7:8e:
                    0a:75:e2:f6:d4:76:3d:60:66:f1:8f:00:ce:6f:49:
                    8c:22:04:fe:1b:4f:87:f8:d2:59:51:f4:11:83:e8:
                    5c:63:41:25:a5:b8:4d:b5:e9:70:7a:22:17:1a:01:
                    85:d4:bf:46:fe:26:e6:d5:6b:2d:ed:e7:bc:ab:ee:
                    52:7b:06:ee:ef:04:95:00:bb:a6:5c:bb:ba:43:84:
                    b5:34:60:f9:6c:9b:4a:60:1b:7d:b4:8f:32:38:9d:
                    17:f3:10:42:5d:0e:6e:96:2f:60:34:a8:8d:de:ec:
                    1f:18:e3:a4:74:da:c9:d7:af:cc:e1:6f:81:50:91:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:09:98:42:46:B6:D3:76:72:53:B3:FC:63:2C:85:E1:BC:97:47:06
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:de:18:2f:cc:87:96:32:95:c4:07:04:82:4a:cd:b0:8f:
         5a:6b:58:e7:99:a6:80:05:46:0f:04:86:2e:33:34:0e:a1:03:
         1f:a4:c8:43:fc:db:f8:d2:28:cd:01:d1:1d:d6:a4:5c:0a:68:
         fa:57:8c:8d:56:37:8d:05:f3:89:79:bb:53:91:ad:70:46:ce:
         df:3d:a8:95:72:29:4e:ce:f0:b5:ed:19:7c:0e:d2:76:f6:cd:
         02:cb:e7:2b:85:43:ff:ae:a7:71:57:d9:1d:07:92:99:96:39:
         03:42:40:57:5c:6e:91:b2:1d:5c:49:27:e1:16:07:7e:99:3c:
         f5:18:09:f3:30:81:89:36:40:44:59:cc:d9:c0:9a:12:75:92:
         29:b4:f1:df:f0:ab:48:ed:ce:96:1e:c5:51:1d:ea:6c:14:bd:
         70:a3:8f:be:96:6e:b0:ab:d1:c6:e6:fe:84:e6:32:47:34:68:
         28:64:e6:82:ab:1f:86:0a:2e:03:be:28:67:1b:a2:43:85:36:
         23:6a:1a:f3:b8:78:00:4d:ad:bc:24:40:83:b2:3f:74:41:f0:
         d3:09:93:b8:58:e5:4d:c8:3d:c4:76:5c:fd:ff:97:ca:4e:ff:
         bf:27:45:69:65:b9:aa:7f:77:ea:ef:57:2f:42:cc:56:72:4b:
         a2:fe:11:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVZX8VBs6V86lOzaZg7QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh
YWZjZWQwHhcNMjUwNjA3MDMwMDU3WhcNMjUwNjA4MDMwMDU3WjAzMTEwLwYDVQQD
EygzNTA5OTg0MjQ2YjZkMzc2NzI1M2IzZmM2MzJjODVlMWJjOTc0NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcUFSw1eDPkLu6g548YjBVDqWmJp
/4z+HZqg/I4O81pm57qxsXqncm01GyCwVEriYSNgn3mqTNQ5PfkJ3hvwrA6svABl
VpyMajm0nsBYyLxffm0hY5iuW+q4OKB+Mx7UeAiO1VF9SmWVIUOwTdZQ1DDTeXcP
oI6eC5TQZOIU771kmvJVp44KdeL21HY9YGbxjwDOb0mMIgT+G0+H+NJZUfQRg+hc
Y0ElpbhNtelweiIXGgGF1L9G/ibm1Wst7ee8q+5Sewbu7wSVALumXLu6Q4S1NGD5
bJtKYBt9tI8yOJ0X8xBCXQ5uli9gNKiN3uwfGOOkdNrJ16/M4W+BUJHWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUJmEJGttN2clOz/GMsheG8l0cGMB8GA1UdIwQY
MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt
MWIyNDQ4NGU1NWVjLzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj
LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPPeGC/M
h5YylcQHBIJKzbCPWmtY55mmgAVGDwSGLjM0DqEDH6TIQ/zb+NIozQHRHdakXApo
+leMjVY3jQXziXm7U5GtcEbO3z2olXIpTs7wte0ZfA7SdvbNAsvnK4VD/66ncVfZ
HQeSmZY5A0JAV1xukbIdXEkn4RYHfpk89RgJ8zCBiTZARFnM2cCaEnWSKbTx3/Cr
SO3Olh7FUR3qbBS9cKOPvpZusKvRxub+hOYyRzRoKGTmgqsfhgouA74oZxuiQ4U2
I2oa87h4AE2tvCRAg7I/dEHw0wmTuFjlTcg9xHZc/f+Xyk7/vydFaWW5qn936u9X
L0LMVnJLov4RbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:36 2025 by rpki-client