Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File:                     vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier:          BlxueUhi8uXi0ewFp6nZeapg0924n51cQc/Za1XAHds=
Subject key identifier:   40:37:C6:92:C2:F2:4C:94:50:F1:AD:B2:6A:51:3A:A3:49:D0:E7:A1
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer:       /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial:       01976B85D089CADACA6EB6F161FA04DC8237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number:          0182
Signing time:             Fri 13 Jun 2025 23:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:21 +0000
Files and hashes:         1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: GWiCZy5T5Yom/+6QxR7QlWjam2Un/uMu9lXSeOcoFbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:d0:89:ca:da:ca:6e:b6:f1:61:fa:04:dc:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
        Validity
            Not Before: Jun 13 23:00:21 2025 GMT
            Not After : Jun 14 23:00:21 2025 GMT
        Subject: CN=4037c692c2f24c9450f1adb26a513aa349d0e7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:55:5b:a3:0a:86:6d:52:34:3d:2c:27:c6:
                    ad:59:64:b0:04:be:74:02:ad:c1:76:d5:26:9f:a1:
                    a4:4f:ef:17:bf:c5:55:5b:f4:ca:40:92:2a:b0:5b:
                    cc:f5:b5:e0:cb:56:99:48:00:7f:ea:f8:7b:e4:f0:
                    59:96:65:d3:9d:e4:b2:7d:b0:e8:21:1c:46:64:56:
                    e9:aa:49:32:54:93:bb:d2:07:d9:67:d9:de:ba:96:
                    9a:ec:6d:3e:3d:e6:3a:b2:ad:c7:8c:a0:15:56:0a:
                    d3:fd:ed:d0:a9:4e:f4:50:1b:a9:a8:b1:86:0e:89:
                    ea:e3:d5:15:d6:14:e0:fa:01:a1:6a:c8:1f:37:2a:
                    23:92:77:85:a5:1f:2b:ba:fe:4b:ab:c2:6c:5a:43:
                    49:a0:11:68:07:a4:79:a5:72:20:43:71:f4:8b:40:
                    94:70:2b:a1:45:89:69:0c:f6:57:5b:56:b2:3c:d3:
                    e9:fd:8a:9c:7b:39:5a:b7:f3:6d:1e:6c:03:cf:0e:
                    9d:4d:50:ed:68:f5:99:6a:08:a3:6e:bc:ca:5d:83:
                    ba:f4:f6:00:17:68:7f:89:d9:1b:a8:b3:89:d8:3c:
                    cc:95:d7:cb:52:4e:b7:66:c5:e6:27:3c:1a:c8:47:
                    73:49:fc:51:cd:bd:35:8d:be:08:91:31:40:4f:47:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:C6:92:C2:F2:4C:94:50:F1:AD:B2:6A:51:3A:A3:49:D0:E7:A1
            X509v3 Authority Key Identifier:
                keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:3b:e9:63:08:05:ec:50:0c:80:54:40:da:3d:83:d0:cd:
         40:e6:ea:91:10:7a:45:91:94:d9:9e:37:54:38:2a:d7:83:f4:
         56:e5:e9:0e:57:b7:47:46:1c:46:5a:36:05:be:88:fe:6e:94:
         7b:11:d9:4d:58:6e:23:02:18:53:90:03:e0:6c:af:1c:d4:ff:
         f3:13:2f:71:6a:8e:5d:fc:c9:90:ae:cc:1e:bb:11:ca:b7:b5:
         9d:73:97:65:88:13:c9:7a:37:f8:fc:a6:c3:5b:d1:6e:f8:d9:
         5b:5a:f5:72:83:51:56:fc:28:5c:b1:5a:b1:35:f6:5e:6e:8a:
         85:ef:b0:6b:ed:ac:ff:b5:85:89:1f:dc:5b:4a:60:92:a5:e9:
         46:a4:34:ea:89:df:94:9b:a2:a3:79:11:fe:1a:67:0d:9b:59:
         ce:fb:f5:72:80:99:7b:fb:58:ba:e5:6e:7d:0e:21:f3:bc:ec:
         6d:ff:e5:63:29:05:19:34:7a:df:f4:09:66:ae:d2:72:4d:0d:
         a3:b8:7e:24:f0:46:db:e0:75:89:a8:5a:e5:22:f1:69:e6:f9:
         68:ea:6c:2a:b8:6a:78:36:c3:8d:35:f5:02:dd:10:4d:82:a1:
         50:c9:12:3c:ab:90:8b:2f:16:c5:01:0e:6b:4f:b6:1f:89:2a:
         36:e6:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:37:32 2025 by rpki-client