Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File:                     VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier:          1SI+KOwirEPHmUInA6yn2+Fik9coHMfoPAwquawUFac=
Subject key identifier:   B9:C6:22:2D:AF:F9:25:8B:D6:C7:38:99:29:81:07:E2:A7:F2:22:FB
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer:       /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial:       01977941F8612B4504596F163DF920B12DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number:          055B
Signing time:             Mon 16 Jun 2025 15:00:55 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:55 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:55 +0000
Files and hashes:         1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
                          2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: IkcNSq05i5pgTox+YMafnQayc1ZTG6wF4ONXe3rYlCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:f8:61:2b:45:04:59:6f:16:3d:f9:20:b1:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
        Validity
            Not Before: Jun 16 15:00:55 2025 GMT
            Not After : Jun 17 15:00:55 2025 GMT
        Subject: CN=b9c6222daff9258bd6c73899298107e2a7f222fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:f4:cd:a7:4d:f5:ed:2e:5a:d0:a4:c6:b7:
                    1c:64:e7:d3:a3:56:26:bd:da:74:b8:1a:35:eb:5f:
                    4c:70:bd:07:e5:b1:9e:c4:c9:4e:4a:56:4f:75:24:
                    e5:4e:3a:3c:f3:ca:0b:49:7c:f8:27:0c:c2:2e:14:
                    c0:ee:34:f2:8c:d4:5a:b9:74:b8:7c:b0:41:92:da:
                    f1:07:7f:91:1b:cc:c5:d3:09:db:5b:e3:e0:7b:86:
                    e9:f1:99:d6:9d:32:f7:21:37:cf:c8:06:95:81:dd:
                    e0:9d:d2:f5:e4:e1:8e:ae:06:a9:fd:0f:c6:55:ff:
                    b5:98:70:f1:38:ad:e8:a9:d5:0a:dd:7c:de:cc:3a:
                    6d:42:b3:32:37:a4:c5:b8:42:7b:d9:74:92:2c:d7:
                    cf:af:38:1a:47:4d:ef:ff:47:2c:79:1d:2a:8d:26:
                    41:62:08:8c:77:38:81:97:87:5c:06:52:9c:f4:2b:
                    7c:bc:f4:9e:91:df:3a:a7:ab:f6:40:69:89:33:17:
                    61:bb:5d:87:56:a2:1e:5e:f1:8f:2c:45:e2:c2:fa:
                    9e:49:c9:a7:79:ad:66:43:33:45:76:39:74:95:2e:
                    27:f3:f4:a7:dd:11:c8:10:f7:27:8f:13:46:f4:97:
                    4c:ad:bc:ce:ff:c8:b7:6c:1a:82:81:ff:1c:32:e3:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:22:2D:AF:F9:25:8B:D6:C7:38:99:29:81:07:E2:A7:F2:22:FB
            X509v3 Authority Key Identifier:
                keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:85:b5:46:bf:43:c1:cd:ff:88:de:d1:e9:16:3e:46:17:
         db:85:82:86:a8:a5:67:09:e7:0d:5f:77:cd:39:46:85:37:64:
         d5:d3:93:5a:c9:6f:11:b2:26:26:ca:ce:bf:93:61:fb:84:46:
         a6:07:fb:f4:43:5a:06:cc:ee:be:f1:1c:64:cc:cc:b5:df:df:
         43:61:2a:e3:c0:35:05:86:4a:26:27:da:ac:f4:c7:24:3f:b0:
         79:71:f9:89:20:c6:db:c8:19:d2:15:ec:fe:f5:01:19:b4:f9:
         48:d5:15:2f:bd:8e:ef:e3:82:6e:20:24:25:48:3d:ee:e5:1d:
         81:a1:6c:22:89:3a:ce:f8:de:20:15:b6:d1:d8:ce:d9:f8:93:
         d5:eb:c2:c2:c4:1a:07:83:08:e5:e7:50:d1:08:98:a5:6c:fa:
         84:22:83:5c:44:6b:af:4d:25:5a:ea:ba:f0:d3:d1:b9:ca:0c:
         8c:3e:35:3d:28:c7:3f:78:04:e3:d7:8f:d4:e3:9d:97:e1:64:
         b2:5e:aa:0c:43:69:be:a5:5b:e5:31:12:23:e7:36:34:6d:04:
         7f:d5:69:9f:06:b0:23:07:41:d5:6b:b3:88:91:96:f9:68:d8:
         8a:d2:72:13:22:78:e2:5b:78:34:de:61:4c:ae:20:43:87:f9:
         ed:19:c0:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QfhhK0UEWW8WPfkgsS2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzQyZjJjNzdhMTgyMjhjOWZhOWFiMzc5ODQyNjYwZDA3
OTI5MDgwHhcNMjUwNjE2MTUwMDU1WhcNMjUwNjE3MTUwMDU1WjAzMTEwLwYDVQQD
EyhiOWM2MjIyZGFmZjkyNThiZDZjNzM4OTkyOTgxMDdlMmE3ZjIyMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyX0zadN9e0uWtCkxrccZOfTo1Ym
vdp0uBo1619McL0H5bGexMlOSlZPdSTlTjo888oLSXz4JwzCLhTA7jTyjNRauXS4
fLBBktrxB3+RG8zF0wnbW+Pge4bp8ZnWnTL3ITfPyAaVgd3gndL15OGOrgap/Q/G
Vf+1mHDxOK3oqdUK3XzezDptQrMyN6TFuEJ72XSSLNfPrzgaR03v/0cseR0qjSZB
YgiMdziBl4dcBlKc9Ct8vPSekd86p6v2QGmJMxdhu12HVqIeXvGPLEXiwvqeScmn
ea1mQzNFdjl0lS4n8/Sn3RHIEPcnjxNG9JdMrbzO/8i3bBqCgf8cMuONgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnGIi2v+SWL1sc4mSmBB+Kn8iL7MB8GA1UdIwQY
MBaAFFXELyx3oYIoyfqas3mEJmDQeSkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUt
MDA3Y2Y2NmM2ZjM5LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUtMDA3Y2Y2NmM2ZjM5
LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeGFtUa/
Q8HN/4je0ekWPkYX24WChqilZwnnDV93zTlGhTdk1dOTWslvEbImJsrOv5Nh+4RG
pgf79ENaBszuvvEcZMzMtd/fQ2Eq48A1BYZKJifarPTHJD+weXH5iSDG28gZ0hXs
/vUBGbT5SNUVL72O7+OCbiAkJUg97uUdgaFsIok6zvjeIBW20djO2fiT1evCwsQa
B4MI5edQ0QiYpWz6hCKDXERrr00lWuq68NPRucoMjD41PSjHP3gE49eP1OOdl+Fk
sl6qDENpvqVb5TESI+c2NG0Ef9VpnwawIwdB1WuziJGW+WjYitJyEyJ44lt4NN5h
TK4gQ4f57RnASA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:54:48 2025 by rpki-client