Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File:                     vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier:          TH+7BLZxkMm9r5nMw5YOrvHR1uGqMwdAnhXdLs+cQP4=
Subject key identifier:   E4:62:CB:38:3D:9A:B0:A4:3F:6F:69:10:F9:FC:C4:50:14:24:39:50
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer:       /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial:       0197711AF695605E8D560CB4DFA081F1254A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number:          0203
Signing time:             Sun 15 Jun 2025 01:01:21 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:21 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:21 +0000
Files and hashes:         1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: jA/6VRKxt+2TvB2hp2fS2tsfHdsBIyBh/6UmPJM256c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:f6:95:60:5e:8d:56:0c:b4:df:a0:81:f1:25:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
        Validity
            Not Before: Jun 15 01:01:21 2025 GMT
            Not After : Jun 16 01:01:21 2025 GMT
        Subject: CN=e462cb383d9ab0a43f6f6910f9fcc45014243950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:ae:a0:7a:88:c6:e5:ba:fc:67:96:61:50:
                    e5:5d:7f:a0:7d:28:17:87:43:13:28:99:b2:4e:f8:
                    30:8f:38:1c:79:42:72:81:d1:8d:a9:ed:8b:9e:6e:
                    f0:28:fd:78:0e:a8:83:a4:02:6f:82:f3:b3:be:5b:
                    68:c3:75:8c:81:2e:9b:06:f4:36:18:cd:0c:5d:71:
                    85:81:b5:72:f6:93:ec:48:4f:34:56:1c:97:3c:32:
                    f4:93:2b:45:6f:bd:8a:cd:7e:80:9e:1e:8c:5e:64:
                    df:f2:a8:a9:86:14:5d:23:a8:6c:08:b2:94:95:31:
                    4f:19:ad:01:7a:cd:87:79:9a:3d:f2:f6:a6:2d:c3:
                    e9:52:ce:03:d4:3a:3b:9c:c1:6c:56:f6:69:38:a1:
                    ca:a6:59:2b:be:31:a0:1c:a7:d6:27:87:56:67:3c:
                    10:ea:06:d5:06:bf:ae:15:e0:2d:c8:d8:a1:2b:f0:
                    f1:a3:ed:a4:de:73:18:ee:4e:7c:ff:c2:01:a2:40:
                    28:e3:2f:ce:3d:98:b7:bb:35:fb:d2:26:d5:0c:02:
                    68:f5:f6:33:74:07:0f:df:b9:1a:8f:ce:20:e3:e3:
                    3f:9e:65:71:53:b6:b0:33:a3:ea:58:18:d1:3b:01:
                    44:c9:87:1d:5d:2e:80:31:8b:eb:3d:d1:db:a4:90:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:CB:38:3D:9A:B0:A4:3F:6F:69:10:F9:FC:C4:50:14:24:39:50
            X509v3 Authority Key Identifier:
                keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:ca:73:11:3a:a8:d4:d1:6d:32:b2:e3:88:1b:9f:f0:c1:
         e9:82:87:82:54:73:2d:93:12:38:fa:05:12:fb:64:9d:4c:e6:
         c1:f4:0f:d8:94:cd:eb:11:66:ce:6f:bb:f3:95:62:62:6e:a3:
         b6:01:c9:4c:4d:54:01:63:7d:47:e4:72:f4:1c:cf:07:a1:a1:
         7d:f3:cb:7c:80:a8:a8:d3:e4:e0:31:39:92:3c:ff:ba:7b:70:
         9a:6b:5d:3e:27:82:f0:01:34:a0:b8:18:2e:8e:af:67:14:e3:
         ef:95:6c:a7:dc:03:f7:f5:44:7e:b1:78:c1:09:74:19:08:88:
         81:5a:91:32:8d:f3:87:e6:98:75:21:49:4f:5d:e5:eb:c2:77:
         ea:b7:bf:21:e3:08:d9:e1:7b:89:53:04:23:e1:fb:d8:69:73:
         d1:7f:5c:1a:d8:f5:f5:a8:23:89:03:52:2d:8e:af:e0:ce:ee:
         1b:24:5c:38:06:d9:41:f7:86:3b:b5:59:b4:24:a6:d5:c0:9c:
         22:2a:76:65:13:10:04:0b:a5:18:e7:c6:ed:90:35:89:42:a7:
         d0:47:f4:b8:25:51:36:96:fd:ca:f6:be:09:df:e1:98:4a:b7:
         51:0a:1a:c2:20:c3:f8:2c:75:c3:76:2b:e4:d8:20:c2:2f:b4:
         47:13:e5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGvaVYF6NVgy036CB8SVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMDMxNzYwMmZiMGNhYTNhNTEwMDY4YmQ5ODlkNDZkYWUz
ODRkZDIwHhcNMjUwNjE1MDEwMTIxWhcNMjUwNjE2MDEwMTIxWjAzMTEwLwYDVQQD
EyhlNDYyY2IzODNkOWFiMGE0M2Y2ZjY5MTBmOWZjYzQ1MDE0MjQzOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApziuoHqIxuW6/GeWYVDlXX+gfSgX
h0MTKJmyTvgwjzgceUJygdGNqe2Lnm7wKP14DqiDpAJvgvOzvltow3WMgS6bBvQ2
GM0MXXGFgbVy9pPsSE80VhyXPDL0kytFb72KzX6Anh6MXmTf8qiphhRdI6hsCLKU
lTFPGa0Bes2HeZo98vamLcPpUs4D1Do7nMFsVvZpOKHKplkrvjGgHKfWJ4dWZzwQ
6gbVBr+uFeAtyNihK/Dxo+2k3nMY7k58/8IBokAo4y/OPZi3uzX70ibVDAJo9fYz
dAcP37kaj84g4+M/nmVxU7awM6PqWBjROwFEyYcdXS6AMYvrPdHbpJBjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORiyzg9mrCkP29pEPn8xFAUJDlQMB8GA1UdIwQY
MBaAFL4DF2AvsMqjpRAGi9mJ1G2uOE3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUt
MTRhYWVhMjA4ZjI1LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUtMTRhYWVhMjA4ZjI1
LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjzKcxE6
qNTRbTKy44gbn/DB6YKHglRzLZMSOPoFEvtknUzmwfQP2JTN6xFmzm+785ViYm6j
tgHJTE1UAWN9R+Ry9BzPB6GhffPLfICoqNPk4DE5kjz/untwmmtdPieC8AE0oLgY
Lo6vZxTj75Vsp9wD9/VEfrF4wQl0GQiIgVqRMo3zh+aYdSFJT13l68J36re/IeMI
2eF7iVMEI+H72Glz0X9cGtj19agjiQNSLY6v4M7uGyRcOAbZQfeGO7VZtCSm1cCc
Iip2ZRMQBAulGOfG7ZA1iUKn0Ef0uCVRNpb9yva+Cd/hmEq3UQoawiDD+Cx1w3Yr
5Nggwi+0RxPlNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:20 2025 by rpki-client