Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File:                     VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier:          N9Mly6+GQarY9tt0qJ9Q8OnCFrnq8RarOAmVU9cRwp4=
Subject key identifier:   79:16:3A:DE:ED:16:33:0B:25:D9:F5:0F:D2:14:90:24:FF:D2:02:BD
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer:       /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial:       0196789F8B564D53C8861EED8C58BE118899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number:          138F
Signing time:             Sun 27 Apr 2025 19:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:43 +0000
Files and hashes:         1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: QzEez7S6AB5Lg/Nd4cukyS+Umo+6AdxfIpWiO7NagzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:8b:56:4d:53:c8:86:1e:ed:8c:58:be:11:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
        Validity
            Not Before: Apr 27 19:00:43 2025 GMT
            Not After : Apr 28 19:00:43 2025 GMT
        Subject: CN=79163adeed16330b25d9f50fd2149024ffd202bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:5f:ad:bb:a1:31:87:dc:71:f8:56:5b:10:
                    2b:57:7e:ef:77:2d:23:aa:59:3d:19:3f:57:62:95:
                    cf:28:2f:94:cb:68:cb:99:06:9f:8c:e1:86:1f:65:
                    eb:53:b5:c8:14:61:92:6c:b4:21:c2:81:51:ef:80:
                    56:78:84:fa:aa:dc:14:6e:aa:c3:e6:60:16:be:be:
                    6c:01:a7:6e:44:3e:8d:47:9f:cf:f5:74:33:14:02:
                    34:8a:31:6a:76:51:da:bf:13:41:5a:d8:71:26:cb:
                    19:05:31:00:87:d1:60:f6:bc:3c:9f:c1:07:dd:73:
                    05:73:cd:c2:5e:87:f3:d7:51:12:70:20:5e:3c:e3:
                    e3:30:1a:69:2b:87:71:16:d8:e2:f9:34:24:1c:fa:
                    66:44:f3:25:e0:04:bb:89:a2:4d:b7:87:19:87:d7:
                    0e:e8:ab:01:fd:64:af:d8:db:87:ad:59:6a:1e:0e:
                    4e:7c:69:9a:6d:4e:14:9f:cc:8d:8f:bc:e1:a8:15:
                    8a:94:76:1e:62:f3:55:b1:09:a4:a2:ac:e1:df:53:
                    6b:b6:20:54:00:3e:4b:e0:ff:56:1c:db:4e:79:90:
                    8b:a4:99:43:ce:82:5e:d2:e0:d0:bd:dd:ba:71:6f:
                    35:8d:78:d3:cc:24:10:03:5b:59:63:a6:cd:50:a8:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:3A:DE:ED:16:33:0B:25:D9:F5:0F:D2:14:90:24:FF:D2:02:BD
            X509v3 Authority Key Identifier:
                keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c6:bc:f5:60:42:28:58:bb:e6:04:62:28:8d:9a:72:47:4b:
         f5:5e:42:39:e5:80:25:a3:a6:db:e3:05:23:db:9e:37:f1:cd:
         be:22:73:51:0a:fd:b0:b8:81:05:78:81:c3:d6:c6:ee:1f:d5:
         f9:58:f6:08:c8:2a:0c:b2:cb:46:f4:58:00:1d:bf:fe:9d:27:
         8f:08:bc:e0:53:35:da:6b:db:9f:f7:f4:43:70:5b:72:e2:86:
         bc:a0:66:e7:5b:9d:98:b8:eb:c6:07:67:84:53:cb:11:08:a5:
         76:f7:d0:b2:3b:73:e1:82:bb:40:9d:d2:9a:7a:21:fb:f0:ca:
         59:ee:98:f0:c2:74:7b:a4:46:cd:79:06:2b:2e:bc:63:85:4b:
         4c:fc:99:8e:cb:ae:da:ca:f0:82:e3:b6:76:1e:e3:8b:f4:a9:
         d5:83:3d:3b:36:d4:d2:e6:b1:31:eb:81:cf:94:16:1d:d9:d2:
         e7:53:a8:7e:c9:d8:66:cc:9d:3d:c2:0a:f6:4f:aa:dd:a1:27:
         3a:10:a3:a9:f5:11:f9:e5:15:51:89:0e:18:a2:8b:5e:92:43:
         a3:8d:04:39:6e:b3:97:41:25:f3:87:46:20:b7:49:d5:7f:83:
         b2:e9:9e:56:28:fa:58:6d:1e:f0:fa:44:ad:01:35:5e:6c:ed:
         b1:59:23:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n4tWTVPIhh7tjFi+EYiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTllNTk3N2Y2MWU3M2YzMDQ4MmRhZWIxYTVmMmRmNzJk
NWVkNDYwHhcNMjUwNDI3MTkwMDQzWhcNMjUwNDI4MTkwMDQzWjAzMTEwLwYDVQQD
Eyg3OTE2M2FkZWVkMTYzMzBiMjVkOWY1MGZkMjE0OTAyNGZmZDIwMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMVfrbuhMYfccfhWWxArV37vdy0j
qlk9GT9XYpXPKC+Uy2jLmQafjOGGH2XrU7XIFGGSbLQhwoFR74BWeIT6qtwUbqrD
5mAWvr5sAaduRD6NR5/P9XQzFAI0ijFqdlHavxNBWthxJssZBTEAh9Fg9rw8n8EH
3XMFc83CXofz11EScCBePOPjMBppK4dxFtji+TQkHPpmRPMl4AS7iaJNt4cZh9cO
6KsB/WSv2NuHrVlqHg5OfGmabU4Un8yNj7zhqBWKlHYeYvNVsQmkoqzh31NrtiBU
AD5L4P9WHNtOeZCLpJlDzoJe0uDQvd26cW81jXjTzCQQA1tZY6bNUKjy4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkWOt7tFjMLJdn1D9IUkCT/0gK9MB8GA1UdIwQY
MBaAFFWZ5Zd/Yec/MEgtrrGl8t9y1e1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYt
OTE4NWE1ZGI0ZWM1LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYtOTE4NWE1ZGI0ZWM1
LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8a89WBC
KFi75gRiKI2ackdL9V5COeWAJaOm2+MFI9ueN/HNviJzUQr9sLiBBXiBw9bG7h/V
+Vj2CMgqDLLLRvRYAB2//p0njwi84FM12mvbn/f0Q3BbcuKGvKBm51udmLjrxgdn
hFPLEQildvfQsjtz4YK7QJ3Smnoh+/DKWe6Y8MJ0e6RGzXkGKy68Y4VLTPyZjsuu
2srwguO2dh7ji/Sp1YM9OzbU0uaxMeuBz5QWHdnS51OofsnYZsydPcIK9k+q3aEn
OhCjqfUR+eUVUYkOGKKLXpJDo40EOW6zl0El84dGILdJ1X+DsumeVij6WG0e8PpE
rQE1XmztsVkjXw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:52:30 2025 by rpki-client