Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File:                     VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier:          LYXUP0CZn9X1Y42wFHgEWl1wE2pDXpG4PpmvIBCf+U4=
Subject key identifier:   0C:64:87:B7:1D:77:50:50:C5:89:D4:37:3A:D2:75:A7:29:CC:A9:B5
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer:       /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial:       01976A05FDB18391636FA5722046DC86095D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number:          06BC
Signing time:             Fri 13 Jun 2025 16:01:06 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:06 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:06 +0000
Files and hashes:         1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: TGDUiGG2bTqCTr6kLZIlmWcrlzg0O6wuCPuxl5nWQTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:fd:b1:83:91:63:6f:a5:72:20:46:dc:86:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
        Validity
            Not Before: Jun 13 16:01:06 2025 GMT
            Not After : Jun 14 16:01:06 2025 GMT
        Subject: CN=0c6487b71d775050c589d4373ad275a729cca9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:d9:85:19:d3:01:1b:e7:1c:54:fc:b0:d0:
                    c7:7c:3d:29:65:bb:90:05:f7:19:70:26:f0:df:7c:
                    58:d0:d0:b1:34:8a:10:7b:b8:8d:f8:38:d6:45:70:
                    55:d4:2c:e8:72:44:03:76:30:02:fb:56:6a:42:58:
                    a3:30:e6:a1:ef:07:9c:b4:fd:ba:d2:06:e0:b3:30:
                    c2:35:2e:44:f7:67:b8:5c:92:2b:37:1e:fc:b1:34:
                    9e:2b:01:09:b2:d1:b1:26:ce:ad:7d:01:2a:f9:72:
                    5d:00:8a:7e:6f:2f:d2:f2:78:23:22:03:af:d3:cb:
                    78:cd:f2:d5:84:f6:56:f8:c0:0d:e9:b2:18:cb:56:
                    e7:b3:74:30:6a:62:09:d2:87:c2:78:3b:49:9a:9d:
                    5f:ba:fb:94:3f:00:d7:46:df:4d:39:f3:24:b3:ae:
                    6c:73:ee:2b:fe:25:d7:19:60:d1:f4:41:fa:1c:81:
                    22:11:30:18:ee:b5:fd:b6:e7:43:ed:20:6a:44:2a:
                    d0:b4:62:3a:f7:ae:d1:77:54:bd:92:d0:1e:85:b5:
                    6f:f1:b1:40:cd:7c:e5:44:b5:3a:43:17:ce:c2:d9:
                    8f:68:a1:57:1e:a0:cd:17:19:85:69:4b:d0:b8:fd:
                    80:f5:28:f8:ef:61:4b:c0:cc:0b:dc:92:db:40:37:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:64:87:B7:1D:77:50:50:C5:89:D4:37:3A:D2:75:A7:29:CC:A9:B5
            X509v3 Authority Key Identifier:
                keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:45:6a:68:8d:40:98:e7:33:05:c6:c0:96:ce:35:96:93:
         35:14:fd:bd:d9:50:bf:d1:ea:6c:82:fa:c7:46:40:5d:f0:06:
         ef:c9:87:62:48:82:6a:52:3e:0a:10:da:d8:6a:9e:1f:64:be:
         27:ae:6b:55:29:da:12:91:29:d6:65:e6:71:c4:a2:df:f8:88:
         bc:f3:e4:88:5a:7e:d3:69:37:bb:7a:66:6a:39:d3:5b:f3:e9:
         e5:e2:7b:3d:9e:7c:e9:c7:c6:5d:13:b9:fa:b1:45:3a:17:3a:
         02:f3:23:78:c5:ea:ea:8d:88:7d:92:64:92:2d:ca:ee:dd:20:
         18:cc:4c:9c:b0:69:aa:38:9c:15:f9:90:b2:79:80:4e:37:7c:
         c4:a0:b0:43:bd:df:35:71:4b:78:98:fb:48:c2:77:ba:39:14:
         39:8a:cc:59:57:80:06:95:32:50:64:68:9d:5c:61:8b:fd:f9:
         db:3f:20:5c:81:b2:79:a8:11:84:15:de:a6:a6:b1:8f:5e:3e:
         97:81:e3:8f:7d:4a:c5:c6:2e:46:75:36:30:7c:89:35:03:b4:
         46:99:e4:3e:8e:69:eb:4e:4e:fd:08:bd:59:03:0e:c7:68:3e:
         af:a5:5a:b4:d2:96:2c:83:bc:ad:5f:c2:1f:1c:2b:f4:1b:c3:
         3c:f1:4e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBf2xg5Fjb6VyIEbchgldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTg2MmFkMTM5MGU0ZGJmODgyYjUyMjdiYzkzMzUwZjJk
ODA3MTMwHhcNMjUwNjEzMTYwMTA2WhcNMjUwNjE0MTYwMTA2WjAzMTEwLwYDVQQD
EygwYzY0ODdiNzFkNzc1MDUwYzU4OWQ0MzczYWQyNzVhNzI5Y2NhOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wTZhRnTARvnHFT8sNDHfD0pZbuQ
BfcZcCbw33xY0NCxNIoQe7iN+DjWRXBV1CzockQDdjAC+1ZqQlijMOah7wectP26
0gbgszDCNS5E92e4XJIrNx78sTSeKwEJstGxJs6tfQEq+XJdAIp+by/S8ngjIgOv
08t4zfLVhPZW+MAN6bIYy1bns3QwamIJ0ofCeDtJmp1fuvuUPwDXRt9NOfMks65s
c+4r/iXXGWDR9EH6HIEiETAY7rX9tudD7SBqRCrQtGI6967Rd1S9ktAehbVv8bFA
zXzlRLU6QxfOwtmPaKFXHqDNFxmFaUvQuP2A9Sj472FLwMwL3JLbQDfYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxkh7cdd1BQxYnUNzrSdacpzKm1MB8GA1UdIwQY
MBaAFFWYYq0TkOTb+IK1InvJM1Dy2AcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUt
MDcxZmIxZjNiOTg1LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUtMDcxZmIxZjNiOTg1
LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+NFamiN
QJjnMwXGwJbONZaTNRT9vdlQv9HqbIL6x0ZAXfAG78mHYkiCalI+ChDa2GqeH2S+
J65rVSnaEpEp1mXmccSi3/iIvPPkiFp+02k3u3pmajnTW/Pp5eJ7PZ586cfGXRO5
+rFFOhc6AvMjeMXq6o2IfZJkki3K7t0gGMxMnLBpqjicFfmQsnmATjd8xKCwQ73f
NXFLeJj7SMJ3ujkUOYrMWVeABpUyUGRonVxhi/352z8gXIGyeagRhBXepqaxj14+
l4Hjj31KxcYuRnU2MHyJNQO0RpnkPo5p605O/Qi9WQMOx2g+r6VatNKWLIO8rV/C
Hxwr9BvDPPFOVA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:31 2025 by rpki-client