Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier:          v++iqzItNg7DUvlwZdSGTmtvIpOdLurlDl7yEaO8VBI=
Subject key identifier:   2C:F9:F1:B1:92:12:86:C4:5B:F8:CF:7B:72:B3:F9:25:4B:8D:FD:F7
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer:       /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial:       019750B3AB092E6CDF2A4E46B9B4F952A8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number:          03EC
Signing time:             Sun 08 Jun 2025 18:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:41 +0000
Files and hashes:         1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: NFiZgfCKdbp0iIQpziEqUKtnZEzxdpIC8vZ9rm1GY4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:ab:09:2e:6c:df:2a:4e:46:b9:b4:f9:52:a8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Validity
            Not Before: Jun  8 18:00:41 2025 GMT
            Not After : Jun  9 18:00:41 2025 GMT
        Subject: CN=2cf9f1b1921286c45bf8cf7b72b3f9254b8dfdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:93:9a:9d:c8:e9:9f:3f:a1:ba:51:7c:f6:
                    99:d7:d8:18:bf:51:a1:fa:d5:be:6a:d3:fb:1d:fa:
                    17:4d:17:d9:8b:92:cc:d5:17:3e:34:28:24:6f:35:
                    ef:f6:6d:bd:52:84:c6:83:05:be:87:ce:f6:87:6d:
                    b7:f4:62:d3:75:2f:d7:7e:c2:e6:8a:b7:f5:08:ec:
                    b1:6f:26:34:cb:c2:1e:19:2f:35:77:e3:89:8e:27:
                    50:4e:40:21:9e:4e:e6:9b:06:0c:46:36:6b:a5:7c:
                    2e:fc:84:68:94:fd:a1:01:b4:ef:34:ee:c6:09:d3:
                    6a:a0:4a:06:a1:f4:9e:07:fa:65:ac:ef:f3:78:88:
                    54:ba:de:76:f8:58:11:6f:cb:27:a7:69:18:00:99:
                    2b:8d:d0:46:eb:d8:48:39:c3:0e:d1:f6:b7:50:d0:
                    7f:90:2a:d9:b8:ee:32:f4:e9:0d:06:d4:9e:bd:53:
                    63:23:a6:bc:68:83:6f:b7:0a:6a:5a:7b:35:ed:ce:
                    d1:b7:fd:07:a2:92:31:f6:ec:17:9a:da:91:6d:97:
                    e5:3e:ce:06:f4:be:18:c1:f9:66:22:60:56:d6:75:
                    95:c7:60:0d:a8:91:b1:cb:e0:34:ca:f5:b4:74:20:
                    cf:78:c9:36:85:d8:b5:39:20:75:b4:1f:a2:72:23:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F9:F1:B1:92:12:86:C4:5B:F8:CF:7B:72:B3:F9:25:4B:8D:FD:F7
            X509v3 Authority Key Identifier:
                keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:37:e9:8f:e0:b2:e5:88:41:ed:60:bb:f3:e6:dc:99:e0:
         f3:77:9b:b3:56:07:bc:e1:75:d8:f4:af:c4:f0:ef:3d:92:96:
         88:32:a6:72:39:a6:6e:a1:f2:c8:bc:c0:fb:33:28:3f:08:8f:
         af:29:d3:f3:1a:f2:17:65:45:f6:3e:0f:fa:3a:2e:7d:33:a3:
         5d:e2:6a:0d:75:09:3b:2a:1f:f9:2f:2d:c6:dd:e1:ff:a6:1c:
         86:4f:e9:86:7b:6a:71:d9:7f:50:a9:ea:e9:0e:ca:14:7f:59:
         09:a2:43:ae:7c:c9:cd:ec:4a:d0:f2:bf:9f:d3:6a:ac:c4:7e:
         5a:72:51:73:b7:c4:bc:6a:37:09:4b:fa:03:36:d3:7b:49:41:
         26:c6:17:8c:7e:ce:d9:87:cf:c8:13:3e:bc:ae:20:41:91:78:
         16:3d:e3:53:82:62:bb:b0:e2:b8:b2:d6:3f:b2:d7:10:69:0b:
         ca:d7:49:9f:57:39:c9:ca:9d:cb:66:74:eb:56:7d:bd:40:fa:
         85:e7:0e:1f:c2:83:41:95:80:3c:9e:6a:c0:1c:3a:ae:20:59:
         3d:6f:2b:e1:b9:85:06:6c:06:e5:3d:14:0e:b7:e2:58:fa:23:
         5b:80:17:67:9e:a8:41:20:b0:88:4f:5b:e1:bd:21:1c:ce:9c:
         c8:a9:be:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs6sJLmzfKk5GubT5UqisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Zjg2ODFlZmIyZmE5ZGNkNDhjN2M0ZmFmM2Q3OGMzYTFh
ZDJkZDEwHhcNMjUwNjA4MTgwMDQxWhcNMjUwNjA5MTgwMDQxWjAzMTEwLwYDVQQD
EygyY2Y5ZjFiMTkyMTI4NmM0NWJmOGNmN2I3MmIzZjkyNTRiOGRmZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2Tmp3I6Z8/obpRfPaZ19gYv1Gh
+tW+atP7HfoXTRfZi5LM1Rc+NCgkbzXv9m29UoTGgwW+h872h2239GLTdS/XfsLm
irf1COyxbyY0y8IeGS81d+OJjidQTkAhnk7mmwYMRjZrpXwu/IRolP2hAbTvNO7G
CdNqoEoGofSeB/plrO/zeIhUut52+FgRb8snp2kYAJkrjdBG69hIOcMO0fa3UNB/
kCrZuO4y9OkNBtSevVNjI6a8aINvtwpqWns17c7Rt/0HopIx9uwXmtqRbZflPs4G
9L4YwflmImBW1nWVx2ANqJGxy+A0yvW0dCDPeMk2hdi1OSB1tB+iciOyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz58bGSEobEW/jPe3Kz+SVLjf33MB8GA1UdIwQY
MBaAFFb4aB77L6nc1Ix8T689eMOhrS3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzkt
ODNhOTM1MTVjYTYzLzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzktODNhOTM1MTVjYTYz
LzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0436Y/g
suWIQe1gu/Pm3Jng83ebs1YHvOF12PSvxPDvPZKWiDKmcjmmbqHyyLzA+zMoPwiP
rynT8xryF2VF9j4P+joufTOjXeJqDXUJOyof+S8txt3h/6Ychk/phntqcdl/UKnq
6Q7KFH9ZCaJDrnzJzexK0PK/n9NqrMR+WnJRc7fEvGo3CUv6AzbTe0lBJsYXjH7O
2YfPyBM+vK4gQZF4Fj3jU4Jiu7DiuLLWP7LXEGkLytdJn1c5ycqdy2Z061Z9vUD6
hecOH8KDQZWAPJ5qwBw6riBZPW8r4bmFBmwG5T0UDrfiWPojW4AXZ56oQSCwiE9b
4b0hHM6cyKm+sw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:20 2025 by rpki-client