Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          aNnZ6vvlfY2l6kylVf3+n0qdFXyxV0l7eXo58jGXK8U=
Subject key identifier:   AE:8C:73:D4:57:29:60:14:FC:DB:AD:4A:81:2F:7D:D0:3E:C5:7F:3F
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       01976CCFDA7A98893EDFD7D3C1299545747F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          129B
Signing time:             Sat 14 Jun 2025 05:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:50 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: 7BnSTeuhuCGweb/gHmJemqnwWJlHO0xOg64izw/zcQ8=)
                          2: m3PogkJItz_iNaq0_EdnA6-ldI4.roa (hash: nYagGPxBVRS3j7ztvVbYe4dLyrJG3Tb3hiHq/vtvQQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:da:7a:98:89:3e:df:d7:d3:c1:29:95:45:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Jun 14 05:00:50 2025 GMT
            Not After : Jun 15 05:00:50 2025 GMT
        Subject: CN=ae8c73d457296014fcdbad4a812f7dd03ec57f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:f4:34:4e:73:dd:3f:5d:b8:2d:1e:e6:da:
                    0b:ce:19:1a:89:b7:b2:eb:7b:39:25:da:09:95:a5:
                    e7:56:56:7f:55:74:f7:a5:a2:48:8b:24:19:46:cb:
                    ca:f7:f7:fe:9f:91:f4:7a:51:49:c0:26:a2:c0:4f:
                    93:1f:13:48:50:82:5d:0f:27:b3:ae:bb:26:51:bf:
                    12:99:a9:e8:9d:25:5d:fe:99:47:ba:d9:ea:b0:11:
                    eb:d4:57:12:47:61:42:47:57:9f:10:09:3d:22:c5:
                    68:01:63:2b:aa:b9:7c:93:14:83:a5:6a:5c:8c:d2:
                    ac:1f:75:a4:80:79:3e:1f:85:38:6b:cd:ac:47:30:
                    04:0d:e2:ef:50:c1:6c:e3:36:9c:ef:3b:e5:f9:ec:
                    63:16:00:6d:83:7a:ff:19:80:21:07:ec:72:53:12:
                    da:cb:1a:87:a3:da:27:15:ca:a0:e5:0b:c7:be:5b:
                    0d:3d:99:8a:02:74:9d:a3:c6:b4:a2:4c:2d:46:8e:
                    1b:4d:81:55:fe:38:bd:9b:72:e3:46:b8:4f:95:94:
                    aa:04:42:54:e6:ed:94:f6:b8:a1:ea:6c:a2:a7:da:
                    b7:27:5a:bf:3a:d5:91:fa:99:7c:35:d8:f8:69:eb:
                    27:95:aa:e4:d6:cb:97:a2:22:9e:48:e4:57:26:8a:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:73:D4:57:29:60:14:FC:DB:AD:4A:81:2F:7D:D0:3E:C5:7F:3F
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:02:5a:a8:d4:3f:df:bb:7f:37:8c:14:57:1c:06:80:43:0b:
         21:47:8a:38:54:6a:5f:e9:ef:fe:6b:25:d7:91:75:00:9c:b0:
         a7:a2:b9:6e:ee:5d:07:25:05:ad:7e:e6:f7:e0:62:f6:38:e1:
         8c:4e:79:2e:a5:37:dc:69:f3:5c:b6:88:24:6b:93:cd:70:ee:
         39:c9:4b:24:42:94:c9:cd:52:34:77:1b:a9:75:0b:39:f4:af:
         aa:98:30:1a:bd:dd:b5:b6:3f:ef:ec:76:67:f5:3a:1f:c3:3a:
         e0:71:dc:88:1f:05:13:66:35:b6:42:44:11:08:95:d4:3e:28:
         c9:a3:a1:1c:11:37:61:ee:0b:cd:dd:aa:79:80:c0:3f:d1:41:
         66:7b:aa:33:14:38:d3:61:de:1f:b6:19:e4:eb:9f:3e:3d:59:
         8a:8f:0f:b1:f7:d7:e1:cb:48:38:2f:8d:01:97:73:23:bd:72:
         71:9b:a3:45:b1:3a:d9:5e:21:94:e7:71:41:ae:86:fe:63:26:
         35:ec:10:c5:87:a5:36:78:cf:72:b8:6d:b3:b2:d4:ce:b3:81:
         b7:8a:04:b1:72:ef:55:2a:c8:e2:8c:24:f2:32:f4:17:82:80:
         2a:cf:c4:cc:75:77:1a:ba:b6:13:25:73:11:e8:a9:90:26:b8:
         22:2c:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:05 2025 by rpki-client