Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File:                     vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier:          R6EV4S3C9aJbjE7Snhjtd6hvmnoxgwtlj3iNSncbEZI=
Subject key identifier:   FD:58:DC:DB:17:BA:77:74:48:F9:4C:08:F8:83:F0:82:16:D6:88:7E
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer:       /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial:       01967F0F5904809922C3598337DA941247EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number:          1510
Signing time:             Tue 29 Apr 2025 01:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:34 +0000
Files and hashes:         1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: gibhI5HNmJm/gHoReWuAErBP70glCD9KPo8jiCTH/II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:59:04:80:99:22:c3:59:83:37:da:94:12:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
        Validity
            Not Before: Apr 29 01:00:34 2025 GMT
            Not After : Apr 30 01:00:34 2025 GMT
        Subject: CN=fd58dcdb17ba777448f94c08f883f08216d6887e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:b8:fa:dd:0d:59:de:0b:57:df:ec:1b:dd:
                    95:42:dc:9c:f1:11:95:d4:f1:f0:48:0f:ec:a5:f6:
                    f7:e3:86:33:d1:b0:f6:81:1f:6e:19:d7:71:e0:4a:
                    15:73:6f:ad:e0:f2:91:cb:73:d9:3d:85:8a:b1:27:
                    3e:a2:fa:74:ce:c7:5b:93:aa:5f:a1:42:e3:16:a7:
                    ce:7e:bf:52:ce:e6:6b:92:82:81:8e:54:06:8c:13:
                    f7:3e:1c:e8:c8:e6:2e:16:c2:d9:98:36:de:48:cc:
                    94:62:5c:c1:4c:99:69:71:50:9c:8b:8e:d5:f1:bc:
                    7d:82:82:ab:39:5c:f1:01:74:4c:54:d2:6f:dc:7e:
                    a1:63:07:fe:e0:b2:4a:04:03:f2:b4:1e:97:36:20:
                    d7:40:62:f3:cf:41:b2:46:19:05:8e:a9:06:09:c3:
                    c6:da:2e:32:96:b7:81:06:ee:ea:d1:2a:ba:71:d0:
                    a8:13:bf:c9:1e:19:5e:2c:96:10:95:06:a9:33:17:
                    39:0d:bf:a9:2d:7a:52:ae:5f:54:86:ec:65:1d:50:
                    39:87:d0:54:54:6d:82:4a:ba:df:a1:67:90:33:36:
                    b2:6d:66:02:04:51:b3:c3:df:7b:de:9e:48:f9:a9:
                    6b:4e:d4:4d:d9:71:c5:b7:13:f5:8b:f4:c7:bb:13:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:DC:DB:17:BA:77:74:48:F9:4C:08:F8:83:F0:82:16:D6:88:7E
            X509v3 Authority Key Identifier:
                keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:05:3d:d2:4e:51:8d:cd:c4:78:71:c9:1d:8a:97:f7:06:
         26:63:45:d7:62:97:c6:48:95:23:70:b5:10:c8:ad:5c:6b:e3:
         ec:69:f8:e3:c3:e9:ee:6c:af:c4:7b:6f:df:93:9a:e2:ae:ae:
         69:77:bf:5c:25:4b:a5:92:c9:e2:3d:17:17:1b:31:0d:e4:2e:
         74:14:74:94:43:cb:01:97:8b:8e:a7:f2:e3:5f:03:ad:6b:df:
         79:07:08:38:fe:34:c1:50:2d:31:a4:eb:a1:d0:2a:09:b0:17:
         52:1a:49:74:5a:b9:5b:f2:de:7a:64:1a:26:3d:60:e2:4d:ce:
         a7:b0:05:c9:e1:f7:1f:9a:a9:01:c2:ba:a6:71:fa:3d:50:09:
         9d:15:22:1f:60:c1:00:31:9d:dc:4c:e2:0e:4c:a3:19:0c:a0:
         f1:ea:8b:8f:2e:fc:a0:9d:80:59:76:08:7a:a9:48:47:a8:2a:
         af:0a:d2:af:d5:89:ff:5a:eb:e7:da:81:10:ce:da:29:dc:4b:
         92:db:60:a8:7a:98:d4:68:ea:d6:8d:3d:e9:a2:b0:f0:cc:e8:
         fd:6c:e9:54:33:c9:cd:95:ea:d8:8a:69:f3:ba:88:0f:dd:98:
         cb:91:9e:60:06:62:4e:cb:8f:9d:32:a5:e5:d3:8d:af:7f:2b:
         8c:18:57:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D1kEgJkiw1mDN9qUEkfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjNhOWQzNTIzZjRmMTU2NTg5YmEwYWEyNDlmZDM1MjVj
ODVmNmIwHhcNMjUwNDI5MDEwMDM0WhcNMjUwNDMwMDEwMDM0WjAzMTEwLwYDVQQD
EyhmZDU4ZGNkYjE3YmE3Nzc0NDhmOTRjMDhmODgzZjA4MjE2ZDY4ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ru4+t0NWd4LV9/sG92VQtyc8RGV
1PHwSA/spfb344Yz0bD2gR9uGddx4EoVc2+t4PKRy3PZPYWKsSc+ovp0zsdbk6pf
oULjFqfOfr9SzuZrkoKBjlQGjBP3PhzoyOYuFsLZmDbeSMyUYlzBTJlpcVCci47V
8bx9goKrOVzxAXRMVNJv3H6hYwf+4LJKBAPytB6XNiDXQGLzz0GyRhkFjqkGCcPG
2i4ylreBBu7q0Sq6cdCoE7/JHhleLJYQlQapMxc5Db+pLXpSrl9UhuxlHVA5h9BU
VG2CSrrfoWeQMzaybWYCBFGzw9973p5I+alrTtRN2XHFtxP1i/THuxOn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1Y3NsXund0SPlMCPiD8IIW1oh+MB8GA1UdIwQY
MBaAFL7zqdNSP08VZYm6CqJJ/TUlyF9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAt
ZGZlYWRlM2Q1NjQxLzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAtZGZlYWRlM2Q1NjQx
LzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9kFPdJO
UY3NxHhxyR2Kl/cGJmNF12KXxkiVI3C1EMitXGvj7Gn448Pp7myvxHtv35Oa4q6u
aXe/XCVLpZLJ4j0XFxsxDeQudBR0lEPLAZeLjqfy418DrWvfeQcIOP40wVAtMaTr
odAqCbAXUhpJdFq5W/LeemQaJj1g4k3Op7AFyeH3H5qpAcK6pnH6PVAJnRUiH2DB
ADGd3EziDkyjGQyg8eqLjy78oJ2AWXYIeqlIR6gqrwrSr9WJ/1rr59qBEM7aKdxL
kttgqHqY1Gjq1o096aKw8Mzo/WzpVDPJzZXq2Ipp87qID92Yy5GeYAZiTsuPnTKl
5dONr38rjBhXBw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:23:59 2025 by rpki-client