Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File:                     VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier:          5iLbyRAMsUjbOAjsaJK8jAJmLxYeDJx+DkO3i2SjJJc=
Subject key identifier:   84:7C:AF:23:B7:B9:00:72:67:5E:EC:5B:4B:1E:EF:9E:15:35:D2:E7
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       01976C6231DCCFD2AF8254444624ACD1CE4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number:          132A
Signing time:             Sat 14 Jun 2025 03:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:03 +0000
Files and hashes:         1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
                          2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: sFAggUH1jiS3qO7my4yrLgvgKOdej6R7oNUesLypBMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:31:dc:cf:d2:af:82:54:44:46:24:ac:d1:ce:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Jun 14 03:01:03 2025 GMT
            Not After : Jun 15 03:01:03 2025 GMT
        Subject: CN=847caf23b7b90072675eec5b4b1eef9e1535d2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:0c:a3:d8:1f:03:db:cb:03:e7:f8:d0:b7:
                    ab:25:3e:38:2a:23:bf:76:06:5f:ea:5c:8f:33:39:
                    89:eb:67:eb:df:7d:22:9e:a9:2f:6c:5f:67:3f:4a:
                    91:26:f9:ff:4a:09:bc:cb:78:43:52:2f:2a:73:1a:
                    d4:49:06:ed:88:f5:ee:8c:01:a1:51:f7:f3:fb:b6:
                    8d:44:f6:bb:47:20:67:7f:fb:ea:24:0d:59:61:dc:
                    07:e8:2c:a8:18:e8:12:9b:b0:9e:bc:38:fc:8a:a5:
                    ff:ac:e4:d1:ee:3a:96:c7:e2:43:04:3e:76:cb:9c:
                    00:50:6b:bb:e2:e5:24:88:7d:b2:da:92:f2:df:4c:
                    b7:2f:2d:0c:a3:05:67:67:46:0a:5a:d2:f3:31:29:
                    8b:29:d5:f9:45:7b:26:e2:fc:8f:d1:8b:16:9a:a0:
                    69:6a:51:03:9f:c6:6d:62:ce:52:d4:d1:50:91:bd:
                    e9:63:64:f9:4b:47:17:15:89:dd:37:67:06:32:fe:
                    45:f8:6a:0b:df:17:ef:eb:0c:d6:27:98:38:2d:b1:
                    86:48:85:d2:a7:ce:b6:86:34:e0:21:8c:00:cd:b8:
                    a7:f2:ff:64:fb:89:57:05:5e:cf:47:41:09:85:1b:
                    63:18:b8:c4:8e:68:f8:d2:dc:39:d3:12:01:b1:65:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7C:AF:23:B7:B9:00:72:67:5E:EC:5B:4B:1E:EF:9E:15:35:D2:E7
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:07:93:8e:86:e1:16:20:e1:a4:5a:76:59:6a:a5:f7:87:66:
         db:52:e5:68:68:65:6c:dd:ec:7c:87:bc:08:50:86:87:f4:cd:
         90:3b:26:35:18:9b:a9:5f:f9:54:35:c6:14:aa:e0:d1:17:7f:
         15:fb:2a:a8:77:d2:b5:52:da:25:8e:c3:c5:88:f1:f0:cc:7c:
         50:00:3c:39:5e:4e:b2:f6:ec:d4:a0:ed:b8:f4:13:a0:c8:26:
         e6:7d:16:41:0a:2f:74:04:f6:39:6f:89:ac:3c:50:61:cc:a8:
         0d:64:3e:d6:8a:7e:67:3a:40:79:cb:33:7a:5f:56:5e:88:7f:
         24:48:e6:21:71:93:b1:8f:9a:b7:a5:f7:ac:83:4e:eb:41:37:
         38:52:3c:9f:a1:a2:7b:3a:75:b6:a0:ae:fa:5d:12:56:3a:4f:
         2e:e5:65:d6:ba:af:2a:7b:69:b7:58:ed:46:50:02:06:20:c0:
         2f:22:45:ce:45:51:fe:d8:2f:4a:4e:99:da:ae:40:84:fd:be:
         36:c9:c2:02:c5:9f:96:43:89:f6:a1:b0:26:a9:1e:49:de:84:
         a5:b9:82:17:eb:b7:9d:07:ed:6a:ae:7f:04:35:28:44:55:bb:
         53:ac:4f:08:80:aa:64:17:f4:f2:25:9d:e1:7a:80:31:c8:3f:
         1d:2a:2d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYjHcz9KvglRERiSs0c5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1
M2Y0YzYwHhcNMjUwNjE0MDMwMTAzWhcNMjUwNjE1MDMwMTAzWjAzMTEwLwYDVQQD
Eyg4NDdjYWYyM2I3YjkwMDcyNjc1ZWVjNWI0YjFlZWY5ZTE1MzVkMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPMMo9gfA9vLA+f40LerJT44KiO/
dgZf6lyPMzmJ62fr330inqkvbF9nP0qRJvn/Sgm8y3hDUi8qcxrUSQbtiPXujAGh
Uffz+7aNRPa7RyBnf/vqJA1ZYdwH6CyoGOgSm7CevDj8iqX/rOTR7jqWx+JDBD52
y5wAUGu74uUkiH2y2pLy30y3Ly0MowVnZ0YKWtLzMSmLKdX5RXsm4vyP0YsWmqBp
alEDn8ZtYs5S1NFQkb3pY2T5S0cXFYndN2cGMv5F+GoL3xfv6wzWJ5g4LbGGSIXS
p862hjTgIYwAzbin8v9k+4lXBV7PR0EJhRtjGLjEjmj40tw50xIBsWVF6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR8ryO3uQByZ17sW0se754VNdLnMB8GA1UdIwQY
MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt
NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3
LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAeTjobh
FiDhpFp2WWql94dm21LlaGhlbN3sfIe8CFCGh/TNkDsmNRibqV/5VDXGFKrg0Rd/
FfsqqHfStVLaJY7DxYjx8Mx8UAA8OV5Osvbs1KDtuPQToMgm5n0WQQovdAT2OW+J
rDxQYcyoDWQ+1op+ZzpAecszel9WXoh/JEjmIXGTsY+at6X3rINO60E3OFI8n6Gi
ezp1tqCu+l0SVjpPLuVl1rqvKntpt1jtRlACBiDALyJFzkVR/tgvSk6Z2q5AhP2+
NsnCAsWflkOJ9qGwJqkeSd6EpbmCF+u3nQftaq5/BDUoRFW7U6xPCICqZBf08iWd
4XqAMcg/HSotdw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:31 2025 by rpki-client