Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File:                     Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier:          pfEYfoFwdwiOVZ1sxGIGAA1ObMCLjecloKnQyCZUye0=
Subject key identifier:   EA:14:C1:DD:4D:42:1E:FD:27:5C:A2:39:3E:72:B7:22:E1:71:05:5A
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer:       /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial:       01975A923928FC0E48C1D2638E06547C9B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number:          1017
Signing time:             Tue 10 Jun 2025 16:00:21 +0000
Manifest this update:     Tue 10 Jun 2025 16:00:21 +0000
Manifest next update:     Wed 11 Jun 2025 16:00:21 +0000
Files and hashes:         1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
                          2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: 7hTDmlqezobILIy+vpZlLQzwRXEgzFpaIxM9e48F9nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:92:39:28:fc:0e:48:c1:d2:63:8e:06:54:7c:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
        Validity
            Not Before: Jun 10 16:00:21 2025 GMT
            Not After : Jun 11 16:00:21 2025 GMT
        Subject: CN=ea14c1dd4d421efd275ca2393e72b722e171055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:86:b2:5f:10:d9:26:9d:fc:6f:43:72:06:
                    e3:46:5c:bb:18:4a:38:57:d1:cc:86:a9:ac:83:48:
                    42:24:08:29:04:41:b8:23:29:b2:6a:fc:ec:e0:07:
                    3f:a7:42:e3:7e:b9:bc:60:a9:e8:2a:a1:ce:31:92:
                    7a:1f:cd:a5:2c:84:5b:06:39:33:aa:bf:f7:2c:33:
                    ad:08:3c:78:36:06:b5:84:6d:1c:da:fd:cc:63:10:
                    4f:5c:94:58:7d:c0:df:b4:1b:9d:df:2c:ab:af:8a:
                    18:d1:fb:55:e3:35:57:5f:c6:05:de:ea:44:f2:97:
                    00:17:c7:18:8e:f8:44:9e:48:21:c6:b4:ef:ae:fa:
                    6a:5c:70:40:69:42:db:88:13:63:77:27:18:cf:c7:
                    4d:4a:55:64:cf:f3:40:4d:8e:b9:f2:f1:26:7e:a5:
                    dc:bf:2c:d4:ab:49:0d:b7:69:4e:21:20:b8:1a:c6:
                    5a:dc:ee:a0:6d:9c:58:56:9d:86:68:cf:a6:62:d2:
                    21:6f:e9:23:b4:64:2a:f4:4a:e1:59:b7:45:72:13:
                    2a:52:d3:9e:11:42:12:01:c2:da:a3:80:eb:b9:de:
                    8d:fa:b7:cd:b6:b0:9d:59:c9:84:2c:b3:3b:85:e3:
                    92:7c:f6:e9:1b:26:74:13:c2:7b:d1:dc:35:54:62:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:C1:DD:4D:42:1E:FD:27:5C:A2:39:3E:72:B7:22:E1:71:05:5A
            X509v3 Authority Key Identifier:
                keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:6b:b9:c6:00:88:bd:73:df:3e:67:bc:85:fe:a3:d7:b6:
         86:16:a8:a8:2b:08:01:0b:00:0f:4f:e0:5e:a7:bf:a3:b7:29:
         5f:3c:f7:e6:38:a4:64:ca:63:f1:3c:c5:be:71:7e:91:69:e5:
         3d:20:a7:3c:a2:1c:32:71:05:ea:3f:5f:9b:a5:c4:16:a2:f6:
         07:2c:63:4c:b4:ca:62:d5:95:2e:59:24:11:73:70:19:59:d6:
         b3:70:c0:51:4d:91:db:a5:77:91:52:72:48:40:23:1f:10:c0:
         35:28:8a:a8:31:4c:ec:fd:27:58:c8:ee:6e:84:b9:de:9b:a5:
         ac:f6:71:e4:9b:aa:cc:14:82:90:ec:10:f4:4f:2b:19:d1:ba:
         0a:03:e7:03:13:64:f2:ee:81:0b:1e:67:df:d4:07:ad:aa:b5:
         ab:25:47:18:7d:60:e1:17:1e:1f:23:aa:f1:30:d4:24:6d:4e:
         de:7b:9d:d8:f1:81:83:ba:fe:33:2e:c4:dd:00:d0:f3:54:c9:
         b1:74:8c:4c:20:f1:dd:f3:e9:04:a6:51:b0:30:f5:92:a8:eb:
         ed:9a:d4:36:8e:ba:ca:a0:a6:2b:bf:63:84:e1:26:c1:83:53:
         c9:a6:d8:bd:62:21:ea:67:b1:3c:e1:9d:eb:cc:73:d6:cc:9a:
         af:ef:26:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdakjko/A5IwdJjjgZUfJtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjUwNjEwMTYwMDIxWhcNMjUwNjExMTYwMDIxWjAzMTEwLwYDVQQD
EyhlYTE0YzFkZDRkNDIxZWZkMjc1Y2EyMzkzZTcyYjcyMmUxNzEwNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46KGsl8Q2Sad/G9DcgbjRly7GEo4
V9HMhqmsg0hCJAgpBEG4Iymyavzs4Ac/p0Ljfrm8YKnoKqHOMZJ6H82lLIRbBjkz
qr/3LDOtCDx4Nga1hG0c2v3MYxBPXJRYfcDftBud3yyrr4oY0ftV4zVXX8YF3upE
8pcAF8cYjvhEnkghxrTvrvpqXHBAaULbiBNjdycYz8dNSlVkz/NATY658vEmfqXc
vyzUq0kNt2lOISC4GsZa3O6gbZxYVp2GaM+mYtIhb+kjtGQq9ErhWbdFchMqUtOe
EUISAcLao4Drud6N+rfNtrCdWcmELLM7heOSfPbpGyZ0E8J70dw1VGLQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoUwd1NQh79J1yiOT5ytyLhcQVaMB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKBrucYA
iL1z3z5nvIX+o9e2hhaoqCsIAQsAD0/gXqe/o7cpXzz35jikZMpj8TzFvnF+kWnl
PSCnPKIcMnEF6j9fm6XEFqL2ByxjTLTKYtWVLlkkEXNwGVnWs3DAUU2R26V3kVJy
SEAjHxDANSiKqDFM7P0nWMjuboS53pulrPZx5JuqzBSCkOwQ9E8rGdG6CgPnAxNk
8u6BCx5n39QHraq1qyVHGH1g4RceHyOq8TDUJG1O3nud2PGBg7r+My7E3QDQ81TJ
sXSMTCDx3fPpBKZRsDD1kqjr7ZrUNo66yqCmK79jhOEmwYNTyabYvWIh6mexPOGd
68xz1syar+8m/Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:49:10 2025 by rpki-client