Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          T9ohQJLIV6nLzDyUgRUAHuqRMWIKs/T9MUKPIAJWbLQ=
Subject key identifier:   1E:9B:25:26:FE:16:CD:51:8E:2F:23:2D:B9:6A:E0:EC:D8:6D:8A:96
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       01976D3DAC6157561CAE39DC042609F7815E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 07:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:47 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: bMzL/1a7Y9lD8MKZmGK9PTN9KxxFFYTZealIJpeV68s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:ac:61:57:56:1c:ae:39:dc:04:26:09:f7:81:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: Jun 14 07:00:47 2025 GMT
            Not After : Jun 15 07:00:47 2025 GMT
        Subject: CN=1e9b2526fe16cd518e2f232db96ae0ecd86d8a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:f0:1b:e1:36:4d:00:c7:98:b8:d6:77:41:
                    44:74:06:22:e1:02:3f:79:4d:03:14:34:bb:cd:d2:
                    fe:aa:e6:c5:d9:db:59:05:b9:a9:a1:9d:26:cc:9f:
                    b3:98:4f:5f:a8:6a:89:82:f3:2e:4d:8e:67:8f:9b:
                    3b:40:74:3b:6d:b2:2f:ea:a1:6d:e7:78:05:c8:f1:
                    78:e2:5a:64:ac:8a:e2:10:cd:92:ef:1c:6e:9b:3c:
                    0f:9e:31:8e:61:40:98:98:cc:b9:99:d8:21:f5:51:
                    b7:3a:be:73:6f:e4:ba:31:c0:46:78:ca:8e:5e:86:
                    79:d7:95:3b:9f:b4:e6:03:52:9e:60:c4:7e:48:e4:
                    6d:37:c1:f7:f1:70:cc:a2:7d:af:b0:53:18:b8:fb:
                    c0:26:2e:99:49:aa:c8:2d:b4:49:48:10:eb:cc:39:
                    ec:c0:79:c6:5f:a5:46:50:19:6a:da:b4:d7:b0:5e:
                    5e:6f:08:79:d1:4e:ff:cf:14:a5:03:ff:89:02:57:
                    6b:b8:65:3d:38:12:c0:fb:f1:6d:e6:c0:27:f3:4f:
                    14:4c:a5:81:8b:8a:6a:ae:48:cf:9c:16:09:75:bd:
                    93:fc:60:20:c9:d7:6e:86:b2:c3:31:12:c6:c6:d0:
                    0e:cd:fa:df:21:dc:00:ce:f7:d2:b5:0b:0d:f7:b4:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:25:26:FE:16:CD:51:8E:2F:23:2D:B9:6A:E0:EC:D8:6D:8A:96
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:ce:71:05:37:a6:99:0c:3b:73:5a:20:dc:59:76:d3:cb:
         06:58:f6:35:60:24:d4:c0:d4:59:7c:76:e4:a5:d6:7c:92:8b:
         f0:46:f6:17:1e:63:8e:45:fd:e6:68:4c:4a:b9:ee:43:8a:0f:
         14:40:74:2e:bd:5e:6f:43:07:de:2b:b9:17:89:2a:d0:14:7e:
         7d:f6:ce:c5:6b:98:7a:59:e9:aa:8c:d7:08:1f:7d:51:75:8c:
         7b:f7:20:74:3f:f9:3b:73:f8:d5:fb:0d:84:45:85:2d:79:e7:
         71:01:50:62:7e:12:7c:8d:55:29:3c:4e:17:24:94:d3:9d:e6:
         4d:9e:6b:ed:da:0b:10:3a:9c:02:43:4a:84:5d:16:a1:0e:bc:
         78:04:db:d5:61:1a:38:3e:d1:35:38:2f:4a:d4:0f:9b:10:03:
         13:d7:6d:04:5f:1f:82:84:b4:88:68:3b:dd:b2:08:3c:9a:81:
         2c:06:d7:04:86:e2:37:bd:5a:bf:a9:ea:42:36:bd:78:63:5a:
         28:c9:14:4e:1d:3a:60:0b:8d:c9:46:38:b3:86:2b:97:4c:28:
         74:23:eb:b2:d4:c1:63:70:5f:0c:e3:7b:ec:64:02:de:77:8e:
         a1:b7:68:bd:8a:bf:84:e1:25:96:de:a4:dd:d3:38:d3:49:3d:
         b5:66:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:38 2025 by rpki-client