Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File:                     vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier:          M/oVopaAhH2pTjIudK6rq5KYwGxkOEntfgbDsf+HmAw=
Subject key identifier:   EA:6A:4C:81:0C:45:2F:4A:49:86:41:65:2F:FF:C7:33:CD:3F:17:D2
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer:       /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial:       01976D3E909CA4B8C8371BEE4795CF0FDAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number:          0250
Signing time:             Sat 14 Jun 2025 07:01:45 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:45 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:45 +0000
Files and hashes:         1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: eaYSKH/EoWbvx+zs5Aic1GzeHSL21i4UagXXBms04IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:90:9c:a4:b8:c8:37:1b:ee:47:95:cf:0f:da:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
        Validity
            Not Before: Jun 14 07:01:45 2025 GMT
            Not After : Jun 15 07:01:45 2025 GMT
        Subject: CN=ea6a4c810c452f4a498641652fffc733cd3f17d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:66:5f:f8:31:fe:39:e5:89:3d:32:9b:98:
                    64:44:c5:aa:53:d0:be:8f:e7:8c:93:6e:29:09:f3:
                    20:58:25:de:67:34:44:88:9e:60:dd:99:0b:c6:14:
                    46:4c:d9:49:5b:4e:8d:34:3c:ab:85:56:fa:8d:fd:
                    1e:63:18:7d:6a:69:eb:d6:86:41:1f:2a:c3:19:ac:
                    c2:46:05:8d:9d:6c:06:e8:b1:2b:bc:c2:cc:ed:a9:
                    92:23:76:73:82:b4:a9:d2:5c:06:29:c6:20:e4:0f:
                    3b:ec:b3:ae:48:95:60:48:3a:9d:a1:c3:8d:f5:44:
                    34:e3:d9:70:af:be:ff:b7:2c:c8:98:6e:c7:da:9a:
                    c5:a2:e5:ca:5c:61:01:42:39:fe:b0:bb:0b:1d:5e:
                    88:8f:89:6e:71:01:92:7a:a6:f9:28:29:73:94:9d:
                    4c:a7:6d:8a:df:30:dd:e8:0c:1c:17:f6:78:33:33:
                    5b:f7:46:f6:3c:28:79:73:25:e4:47:2c:3f:f5:f3:
                    10:b4:af:3d:74:b5:27:6a:c4:6f:fb:25:c6:25:01:
                    e0:df:59:59:54:b7:9f:ec:09:9f:75:c8:fd:c9:20:
                    68:f2:e4:bd:0a:ea:b7:70:5c:c9:9f:d5:20:a0:e4:
                    dd:e1:ce:2f:c3:88:41:d7:56:76:a8:11:d6:d4:32:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:4C:81:0C:45:2F:4A:49:86:41:65:2F:FF:C7:33:CD:3F:17:D2
            X509v3 Authority Key Identifier:
                keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:2c:53:eb:af:8e:eb:81:91:97:73:cf:d3:6e:b2:be:ff:
         85:e9:c2:17:b8:12:f1:a6:3d:42:39:a4:c1:ce:ff:c1:10:45:
         7b:09:35:48:70:06:ef:0b:16:34:f0:83:7d:78:9b:a8:a1:a2:
         b2:04:3f:ed:ad:a8:f1:9d:9e:68:1e:38:26:e7:9f:8f:53:84:
         7d:5f:e5:b1:f0:b4:10:96:1d:fc:75:be:76:85:78:59:6a:34:
         bd:36:d0:77:a6:28:db:f9:7c:ec:65:cb:c4:f8:e1:e2:da:9a:
         e8:b3:4c:eb:5b:66:3f:a8:b3:5b:43:c8:ec:8d:01:4c:7b:1e:
         75:21:b7:da:36:78:47:d3:06:57:b9:b0:12:57:1a:93:29:37:
         c6:45:b1:13:21:53:1a:b4:6e:32:64:77:45:f9:60:d4:b2:89:
         12:d7:58:19:1e:f0:60:a2:20:10:f7:a3:18:ae:30:a1:55:70:
         48:47:d2:66:77:58:4f:0e:83:cf:59:60:d2:10:6d:b9:31:35:
         9b:e9:1d:00:98:f5:d7:19:d1:fa:4c:8e:0e:9a:bd:f9:e9:87:
         d5:df:c8:aa:93:00:0c:78:cd:3f:81:64:10:1c:79:06:d3:ed:
         c6:b6:02:93:af:07:da:a4:3e:5d:88:80:b4:6e:91:db:22:57:
         2a:3a:90:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPpCcpLjINxvuR5XPD9r+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm
NWY0MDcwHhcNMjUwNjE0MDcwMTQ1WhcNMjUwNjE1MDcwMTQ1WjAzMTEwLwYDVQQD
EyhlYTZhNGM4MTBjNDUyZjRhNDk4NjQxNjUyZmZmYzczM2NkM2YxN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05pmX/gx/jnliT0ym5hkRMWqU9C+
j+eMk24pCfMgWCXeZzREiJ5g3ZkLxhRGTNlJW06NNDyrhVb6jf0eYxh9amnr1oZB
HyrDGazCRgWNnWwG6LErvMLM7amSI3ZzgrSp0lwGKcYg5A877LOuSJVgSDqdocON
9UQ049lwr77/tyzImG7H2prFouXKXGEBQjn+sLsLHV6Ij4lucQGSeqb5KClzlJ1M
p22K3zDd6AwcF/Z4MzNb90b2PCh5cyXkRyw/9fMQtK89dLUnasRv+yXGJQHg31lZ
VLef7Amfdcj9ySBo8uS9Cuq3cFzJn9UgoOTd4c4vw4hB11Z2qBHW1DKVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpqTIEMRS9KSYZBZS//xzPNPxfSMB8GA1UdIwQY
MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct
N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm
LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxEsU+uv
juuBkZdzz9Nusr7/henCF7gS8aY9Qjmkwc7/wRBFewk1SHAG7wsWNPCDfXibqKGi
sgQ/7a2o8Z2eaB44Juefj1OEfV/lsfC0EJYd/HW+doV4WWo0vTbQd6Yo2/l87GXL
xPjh4tqa6LNM61tmP6izW0PI7I0BTHsedSG32jZ4R9MGV7mwElcakyk3xkWxEyFT
GrRuMmR3Rflg1LKJEtdYGR7wYKIgEPejGK4woVVwSEfSZndYTw6Dz1lg0hBtuTE1
m+kdAJj11xnR+kyODpq9+emH1d/IqpMADHjNP4FkEBx5BtPtxrYCk68H2qQ+XYiA
tG6R2yJXKjqQog==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:33:09 2025 by rpki-client