Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          6ClesVEvCJVtqarQeUHsbUSU0YSJtXwM/UC4CWekbpA=
Subject key identifier:   DC:67:B0:FE:BD:D3:FA:CB:C9:5E:84:FC:18:DF:E6:78:A5:7B:05:59
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019678D62653B70E25166A438882E77A75CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          02EC
Signing time:             Sun 27 Apr 2025 20:00:22 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:22 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:22 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: jowHX39yA8iboyq8UIudSVR7xHTv5I4pP6qZleqP7Bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:26:53:b7:0e:25:16:6a:43:88:82:e7:7a:75:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Apr 27 20:00:22 2025 GMT
            Not After : Apr 28 20:00:22 2025 GMT
        Subject: CN=dc67b0febdd3facbc95e84fc18dfe678a57b0559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:23:24:f5:cb:de:2d:07:21:96:87:10:85:
                    52:06:b7:2d:16:fc:30:29:20:27:ac:c9:af:5d:8d:
                    b2:b0:8d:d6:08:b9:5a:1b:c5:f0:f1:28:a8:d8:32:
                    bd:4f:82:55:d4:fa:14:e5:0f:86:f9:47:57:97:9c:
                    37:f7:1b:48:46:50:fb:ff:93:36:62:ba:f5:eb:fb:
                    f1:51:a8:54:37:1d:77:90:f5:37:1a:58:a5:67:ee:
                    18:a8:4a:da:f5:5a:6e:9d:b6:48:5a:2c:84:43:f0:
                    5a:d6:6f:e2:4a:5e:ad:41:b7:15:f2:ac:0f:e9:6b:
                    73:ee:f7:9e:72:e2:75:dc:6b:76:88:9b:0a:41:5b:
                    33:2a:88:c6:58:16:2f:2f:73:b2:81:de:21:49:02:
                    20:47:3e:19:cc:8f:92:63:3a:e6:60:3d:1e:63:ad:
                    e2:94:bc:95:aa:68:f8:4e:a0:74:9d:64:15:b5:12:
                    0b:83:97:f5:d4:1f:32:a7:f9:08:b0:79:64:e7:b0:
                    81:62:2e:aa:b8:5c:c6:12:10:02:fc:52:53:66:b8:
                    86:65:2a:ea:d2:7d:37:a2:30:de:ea:16:ba:9a:f5:
                    a0:9c:3a:6e:4f:af:32:bd:4b:b1:4d:de:df:34:da:
                    bc:86:7e:0b:72:bd:01:67:24:66:ac:32:24:a0:4c:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:B0:FE:BD:D3:FA:CB:C9:5E:84:FC:18:DF:E6:78:A5:7B:05:59
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:18:2c:4a:75:24:e3:ad:3b:6a:fc:59:18:2e:c1:da:b5:b3:
         33:6d:a3:ec:03:48:e8:3a:81:b4:70:f0:3b:29:03:cb:47:98:
         73:43:c7:88:49:12:65:f4:76:d2:36:f0:ef:0f:85:e4:18:09:
         a7:72:01:22:ee:aa:f7:20:8a:4e:20:d9:b1:20:57:f7:e3:e5:
         37:c6:68:e1:5f:98:bd:7a:8d:c4:d0:98:0a:9f:72:ec:96:26:
         0e:81:1d:dd:0d:6e:92:26:34:37:3b:d6:a4:76:65:0b:98:af:
         e1:5f:c7:b5:e9:2e:d9:26:93:e2:c7:f5:3c:fa:80:2b:64:09:
         d3:c2:9e:bc:39:29:c5:ea:17:8e:19:92:eb:61:5e:e2:85:42:
         60:79:a0:1c:ad:4f:36:a7:07:31:6b:55:a4:e8:1c:29:00:af:
         f7:a9:21:de:ea:75:fb:97:83:39:35:c3:f2:45:a3:aa:55:19:
         91:fe:29:5e:07:1b:01:9b:80:65:86:ae:b6:34:13:49:29:d3:
         f0:92:d4:d9:79:1f:36:33:55:e1:12:cc:8e:81:39:15:ad:95:
         7e:30:97:1a:78:65:56:99:60:1e:6f:02:99:23:5a:d2:fb:27:
         44:c8:79:b4:a9:48:a7:17:2c:a9:7e:e5:ed:e0:9f:1e:77:3f:
         3a:71:69:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41iZTtw4lFmpDiILnenXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQyZDUyMzdiZTMzZmRjZDM2ZjA1ZDk0OWNjOTE4ZTQ5
NzI3MDkwHhcNMjUwNDI3MjAwMDIyWhcNMjUwNDI4MjAwMDIyWjAzMTEwLwYDVQQD
EyhkYzY3YjBmZWJkZDNmYWNiYzk1ZTg0ZmMxOGRmZTY3OGE1N2IwNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49YjJPXL3i0HIZaHEIVSBrctFvww
KSAnrMmvXY2ysI3WCLlaG8Xw8Sio2DK9T4JV1PoU5Q+G+UdXl5w39xtIRlD7/5M2
Yrr16/vxUahUNx13kPU3GlilZ+4YqEra9VpunbZIWiyEQ/Ba1m/iSl6tQbcV8qwP
6Wtz7veecuJ13Gt2iJsKQVszKojGWBYvL3Oygd4hSQIgRz4ZzI+SYzrmYD0eY63i
lLyVqmj4TqB0nWQVtRILg5f11B8yp/kIsHlk57CBYi6quFzGEhAC/FJTZriGZSrq
0n03ojDe6ha6mvWgnDpuT68yvUuxTd7fNNq8hn4Lcr0BZyRmrDIkoEwe+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxnsP690/rLyV6E/Bjf5nilewVZMB8GA1UdIwQY
MBaAFFS0LVI3vjP9zTbwXZScyRjklycJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTkt
Yjg1NTEzYzZmMjM2LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTktYjg1NTEzYzZmMjM2
LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRgsSnUk
4607avxZGC7B2rWzM22j7ANI6DqBtHDwOykDy0eYc0PHiEkSZfR20jbw7w+F5BgJ
p3IBIu6q9yCKTiDZsSBX9+PlN8Zo4V+YvXqNxNCYCp9y7JYmDoEd3Q1ukiY0NzvW
pHZlC5iv4V/Hteku2SaT4sf1PPqAK2QJ08KevDkpxeoXjhmS62Fe4oVCYHmgHK1P
NqcHMWtVpOgcKQCv96kh3up1+5eDOTXD8kWjqlUZkf4pXgcbAZuAZYautjQTSSnT
8JLU2XkfNjNV4RLMjoE5Fa2VfjCXGnhlVplgHm8CmSNa0vsnRMh5tKlIpxcsqX7l
7eCfHnc/OnFpVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:45 2025 by rpki-client