Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File:                     VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier:          VF7qg9jQG2mpgzU74OXtYnsSiQvDDm1mweund1j/YUk=
Subject key identifier:   00:C8:F5:D3:95:02:81:50:4B:D1:AE:1A:66:97:62:B3:8D:B4:9A:27
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer:       /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial:       0197488CB6A1CE437DFB6CF79F4A5217E9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:10 +0000
Files and hashes:         1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: 2LK9Uj32uMpOjBg6xPukxHJITXwvRHpyEfpzPZDbJ+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:b6:a1:ce:43:7d:fb:6c:f7:9f:4a:52:17:e9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
        Validity
            Not Before: Jun  7 04:01:10 2025 GMT
            Not After : Jun  8 04:01:10 2025 GMT
        Subject: CN=00c8f5d3950281504bd1ae1a669762b38db49a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4b:9b:b2:3d:ea:90:29:b8:36:68:ae:12:df:
                    a6:0a:14:a4:a5:e5:c0:3e:3f:2e:d9:09:60:f8:fb:
                    df:a3:3b:e3:e8:4a:0f:c8:c2:b4:1d:b5:72:a6:13:
                    9c:fc:b3:d5:e4:eb:df:6d:b7:9d:a7:f3:03:8e:d6:
                    3f:c5:82:44:8f:4c:a8:8b:ef:f6:46:a9:9f:b6:e0:
                    29:0c:c5:18:83:5a:2a:0f:36:3b:8d:8f:f5:ee:3c:
                    55:a9:64:aa:50:7f:76:25:62:ae:c3:32:33:d2:52:
                    eb:a7:ac:97:e8:55:86:44:ce:69:01:a2:8d:62:4c:
                    66:4d:0b:5d:f3:d3:0c:39:76:0a:5e:8f:77:be:3b:
                    a9:c8:04:03:12:9f:36:06:04:e4:59:53:da:f9:73:
                    05:32:46:5e:7f:00:9d:a6:a6:25:0c:78:12:9f:d2:
                    80:7d:8b:4e:1b:31:da:84:e1:fa:d1:4b:8e:0f:08:
                    f7:50:b0:9c:c5:09:ac:0b:28:65:3a:e7:a8:12:34:
                    5d:ac:04:34:1d:23:bc:f2:dc:63:b6:c0:39:6a:f1:
                    19:32:2a:0a:dd:42:da:82:24:53:de:81:42:be:ac:
                    ac:65:9d:2f:10:ca:82:14:18:8c:31:cd:0a:c3:67:
                    03:18:2d:df:b3:13:2d:73:82:d1:7a:ba:a1:9c:13:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:F5:D3:95:02:81:50:4B:D1:AE:1A:66:97:62:B3:8D:B4:9A:27
            X509v3 Authority Key Identifier:
                keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:b8:a4:61:15:bb:a6:3d:b7:e6:94:50:40:03:43:b8:87:
         92:4a:73:60:4e:74:a2:17:3a:57:a3:73:67:eb:b1:5f:df:3e:
         bb:92:06:47:5f:d0:be:84:69:b2:fb:c5:69:6c:78:ba:83:c5:
         05:a9:42:fa:79:4f:6c:11:cb:59:4f:c3:5d:3e:d2:4b:44:e1:
         24:3d:f3:8d:51:93:9a:e2:df:30:37:42:67:35:df:73:f2:99:
         2e:1a:41:20:c5:b6:0d:52:3d:8e:8b:b6:98:63:bd:d9:c3:f8:
         bc:d5:c6:f9:4d:fc:4b:b1:b1:0a:20:6c:c1:2f:d4:e2:76:55:
         d3:13:ec:e1:ba:a1:fb:a5:36:54:c2:aa:0d:7d:30:82:a4:12:
         77:2f:86:b8:0f:3d:ba:95:8c:f4:fc:b1:74:a3:e9:7a:0a:c3:
         33:0a:7a:27:34:3e:c4:7f:aa:a4:2a:46:06:24:c3:93:a2:fa:
         c8:16:57:68:e9:15:63:ba:e3:47:09:ef:86:7b:b1:86:d3:2f:
         12:f7:7c:18:5f:1d:e8:43:41:8b:44:60:cc:74:94:59:cc:22:
         13:d4:3e:c9:f8:4c:c3:c0:13:d1:1c:f6:57:f2:99:ec:65:87:
         a9:18:c3:9a:e6:04:f5:2f:c2:98:52:5b:5c:77:a9:7f:e6:47:
         f3:29:5f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjLahzkN9+2z3n0pSF+m9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzc2Yjg0OGZjMjRiZDQ5MTc2ZTJmNGY5YzQ3NDMyNGFm
MjcwYjUwHhcNMjUwNjA3MDQwMTEwWhcNMjUwNjA4MDQwMTEwWjAzMTEwLwYDVQQD
EygwMGM4ZjVkMzk1MDI4MTUwNGJkMWFlMWE2Njk3NjJiMzhkYjQ5YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0ubsj3qkCm4NmiuEt+mChSkpeXA
Pj8u2Qlg+Pvfozvj6EoPyMK0HbVyphOc/LPV5Ovfbbedp/MDjtY/xYJEj0yoi+/2
RqmftuApDMUYg1oqDzY7jY/17jxVqWSqUH92JWKuwzIz0lLrp6yX6FWGRM5pAaKN
YkxmTQtd89MMOXYKXo93vjupyAQDEp82BgTkWVPa+XMFMkZefwCdpqYlDHgSn9KA
fYtOGzHahOH60UuODwj3ULCcxQmsCyhlOueoEjRdrAQ0HSO88txjtsA5avEZMioK
3ULagiRT3oFCvqysZZ0vEMqCFBiMMc0Kw2cDGC3fsxMtc4LRerqhnBNKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADI9dOVAoFQS9GuGmaXYrONtJonMB8GA1UdIwQY
MBaAFFR3a4SPwkvUkXbi9PnEdDJK8nC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iYThlNTgtZWQ2MC00YTdjLTk4OTEt
NjNmMjQ1MGJlZmVlLzEvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iYThlNTgtZWQ2MC00YTdjLTk4OTEtNjNmMjQ1MGJlZmVl
LzEvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBq4pGEV
u6Y9t+aUUEADQ7iHkkpzYE50ohc6V6NzZ+uxX98+u5IGR1/QvoRpsvvFaWx4uoPF
BalC+nlPbBHLWU/DXT7SS0ThJD3zjVGTmuLfMDdCZzXfc/KZLhpBIMW2DVI9jou2
mGO92cP4vNXG+U38S7GxCiBswS/U4nZV0xPs4bqh+6U2VMKqDX0wgqQSdy+GuA89
upWM9PyxdKPpegrDMwp6JzQ+xH+qpCpGBiTDk6L6yBZXaOkVY7rjRwnvhnuxhtMv
Evd8GF8d6ENBi0RgzHSUWcwiE9Q+yfhMw8AT0Rz2V/KZ7GWHqRjDmuYE9S/CmFJb
XHepf+ZH8ylf6g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:45:30 2025 by rpki-client