Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File:                     VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier:          sQ2mn4N06a1NLAA0XDkggGVCosV/yf9j4jCDm7KfsCs=
Subject key identifier:   DE:82:2A:00:B0:8D:BE:CF:07:A6:81:83:B1:75:D2:F2:14:D5:A6:8C
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer:       /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial:       019773088BDE31F80C4414AA1BFFA783F841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number:          0215
Signing time:             Sun 15 Jun 2025 10:00:29 +0000
Manifest this update:     Sun 15 Jun 2025 10:00:29 +0000
Manifest next update:     Mon 16 Jun 2025 10:00:29 +0000
Files and hashes:         1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: ZPzAjwNxTaCZrQzayASiu27IzA44hULcW99tRZAOiPs=)
                          2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:08:8b:de:31:f8:0c:44:14:aa:1b:ff:a7:83:f8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
        Validity
            Not Before: Jun 15 10:00:29 2025 GMT
            Not After : Jun 16 10:00:29 2025 GMT
        Subject: CN=de822a00b08dbecf07a68183b175d2f214d5a68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:aa:d7:43:87:c9:7b:57:79:9b:fc:cf:07:
                    6e:61:c8:4e:28:13:7a:78:81:c4:89:da:5e:7b:b7:
                    fe:8c:41:53:4f:13:02:af:2d:3f:95:52:b1:34:2f:
                    fe:06:b1:ca:6c:14:c2:93:5c:50:db:7a:20:0d:e4:
                    a8:a1:2f:72:19:11:fb:66:84:b4:05:76:b7:1b:93:
                    9d:51:99:24:55:76:7b:a6:82:3f:9e:73:99:de:1c:
                    2e:75:3d:20:32:90:b3:95:1e:28:1b:7c:e7:fb:44:
                    c6:64:de:04:3e:96:24:3e:fc:5e:29:96:ef:9a:a4:
                    f0:60:88:44:29:ff:6f:10:9f:e8:33:3d:63:cb:5e:
                    13:19:36:c2:64:9e:6f:01:59:1c:31:8a:d3:18:e0:
                    9d:4d:3d:96:c6:e5:7e:a6:13:d0:f1:e7:9c:12:9f:
                    16:34:4f:22:4d:d3:06:bd:7b:b1:0d:1d:b6:bb:18:
                    24:69:71:05:d2:42:91:03:f0:85:92:7b:02:5b:15:
                    00:35:86:dc:33:79:42:b5:8c:a6:69:86:d4:16:ba:
                    25:48:9f:3f:86:5d:04:1b:af:e7:ac:6a:f5:9b:fe:
                    38:da:a8:9f:15:f2:db:20:5f:7c:71:a8:72:2f:84:
                    f3:09:ab:41:89:7e:fa:1e:1d:f5:04:da:68:58:bf:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:2A:00:B0:8D:BE:CF:07:A6:81:83:B1:75:D2:F2:14:D5:A6:8C
            X509v3 Authority Key Identifier:
                keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:00:22:51:47:66:d8:fb:e5:fb:3c:81:81:25:2d:b7:73:
         ff:3f:92:c3:f5:96:a8:60:c4:c2:ec:9d:38:dc:c3:0b:c6:ba:
         9c:da:f0:09:90:cc:cd:8e:a2:c9:03:e3:41:8d:e9:50:3e:36:
         9b:e1:63:b8:31:8e:e0:c2:c9:93:b8:b4:2f:cc:87:76:54:e3:
         8b:1e:b7:05:ab:50:ff:0e:43:31:c4:14:cd:47:14:41:39:e7:
         9b:8c:47:e1:b1:86:bb:c1:70:c2:6c:cb:47:ff:fd:32:5e:5a:
         b3:f0:00:c1:bc:66:f1:32:3a:03:32:3a:62:45:95:a9:cb:80:
         43:7f:97:45:d6:26:35:9d:0c:e1:b8:d2:0b:6e:c7:17:82:c8:
         55:25:68:1f:2b:06:ae:72:2c:a1:f2:e1:91:09:bb:e9:11:b1:
         40:54:0c:e0:2f:0f:1b:bc:c2:0b:98:cb:df:1e:d8:1f:aa:5e:
         92:e4:30:67:d0:26:35:07:b3:99:b7:6c:10:bd:cf:a4:9c:05:
         6d:a4:e3:c8:80:35:82:94:65:18:00:58:33:37:dc:fd:34:4f:
         91:81:14:a5:fb:22:38:41:4c:53:6e:f6:2c:f6:a6:ed:ea:e1:
         c4:16:75:68:4f:7d:77:09:1c:62:0e:2f:65:45:b6:3e:bd:7f:
         3e:60:c4:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCIveMfgMRBSqG/+ng/hBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjUwNjE1MTAwMDI5WhcNMjUwNjE2MTAwMDI5WjAzMTEwLwYDVQQD
EyhkZTgyMmEwMGIwOGRiZWNmMDdhNjgxODNiMTc1ZDJmMjE0ZDVhNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrqq10OHyXtXeZv8zwduYchOKBN6
eIHEidpee7f+jEFTTxMCry0/lVKxNC/+BrHKbBTCk1xQ23ogDeSooS9yGRH7ZoS0
BXa3G5OdUZkkVXZ7poI/nnOZ3hwudT0gMpCzlR4oG3zn+0TGZN4EPpYkPvxeKZbv
mqTwYIhEKf9vEJ/oMz1jy14TGTbCZJ5vAVkcMYrTGOCdTT2WxuV+phPQ8eecEp8W
NE8iTdMGvXuxDR22uxgkaXEF0kKRA/CFknsCWxUANYbcM3lCtYymaYbUFrolSJ8/
hl0EG6/nrGr1m/442qifFfLbIF98cahyL4TzCatBiX76Hh31BNpoWL/98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6CKgCwjb7PB6aBg7F10vIU1aaMMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXQAIlFH
Ztj75fs8gYElLbdz/z+Sw/WWqGDEwuydONzDC8a6nNrwCZDMzY6iyQPjQY3pUD42
m+FjuDGO4MLJk7i0L8yHdlTjix63BatQ/w5DMcQUzUcUQTnnm4xH4bGGu8FwwmzL
R//9Ml5as/AAwbxm8TI6AzI6YkWVqcuAQ3+XRdYmNZ0M4bjSC27HF4LIVSVoHysG
rnIsofLhkQm76RGxQFQM4C8PG7zCC5jL3x7YH6pekuQwZ9AmNQezmbdsEL3PpJwF
baTjyIA1gpRlGABYMzfc/TRPkYEUpfsiOEFMU272LPam7erhxBZ1aE99dwkcYg4v
ZUW2Pr1/PmDEZw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:25 2025 by rpki-client