Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File:                     CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier:          j/fC8rmHvE9Y6xEtZrpAPNvthGL/XLSqtGkSw5cylf4=
Subject key identifier:   AA:31:93:96:32:89:51:9E:0D:3D:01:BA:17:ED:92:8F:9C:92:7D:48
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer:       /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial:       0197741B9C616ADF16466577F66BD8A32E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number:          1594
Signing time:             Sun 15 Jun 2025 15:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 15:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 15:00:55 +0000
Files and hashes:         1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: lT5TKFQJCRAzV3InQb/W8eNdO47jps/GpGJ32Ulo2Vw=)
                          2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:1b:9c:61:6a:df:16:46:65:77:f6:6b:d8:a3:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
        Validity
            Not Before: Jun 15 15:00:55 2025 GMT
            Not After : Jun 16 15:00:55 2025 GMT
        Subject: CN=aa3193963289519e0d3d01ba17ed928f9c927d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:43:d9:e3:a6:c5:0f:35:8d:2b:cd:cb:6c:
                    45:45:86:dd:b4:c8:74:aa:c9:f7:86:c0:d1:6f:97:
                    95:f2:a3:20:e5:84:3f:ff:4c:83:b6:7e:04:1a:3b:
                    c6:a7:7d:03:ef:03:e3:46:62:26:60:03:ce:f7:9e:
                    04:b2:6b:5d:c6:4b:98:a7:42:0f:9a:aa:01:f6:3e:
                    2f:17:55:d9:c4:81:f3:55:9f:38:3b:1d:a7:6c:c1:
                    23:10:9b:fd:86:12:12:0b:3e:f6:d9:39:68:a3:73:
                    a9:45:f2:a9:b2:b4:42:06:3b:5f:92:84:8d:b4:de:
                    73:d3:d2:49:b3:18:47:3a:35:5c:d1:0b:08:2f:7d:
                    20:43:70:81:27:f2:e5:d2:87:9a:e7:f0:bd:99:5f:
                    10:5e:20:18:5b:52:2b:3c:1a:06:6f:84:8a:ab:4b:
                    03:75:5a:d9:5d:81:6d:e0:35:da:d0:5a:3d:d2:d5:
                    7b:6a:e5:cb:8e:d6:68:66:55:b5:54:6e:30:af:80:
                    95:a4:49:51:d2:73:f4:07:28:38:4b:9f:1c:8a:16:
                    9d:07:3c:51:4e:cf:84:34:6b:65:83:c7:33:3e:39:
                    29:54:52:c9:d8:76:2e:37:bb:03:f0:10:2c:fb:eb:
                    9a:65:01:fd:14:19:60:09:ca:ca:2a:d2:6a:65:05:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:31:93:96:32:89:51:9E:0D:3D:01:BA:17:ED:92:8F:9C:92:7D:48
            X509v3 Authority Key Identifier:
                keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:04:31:72:0d:43:66:fd:54:42:af:ab:16:bc:6a:3b:84:
         b9:81:f7:af:b1:79:e9:af:dc:e7:10:eb:23:eb:fc:3d:54:ca:
         b5:9a:bb:1a:cd:02:45:7c:0b:77:53:f3:69:5a:7b:06:09:a4:
         39:7b:2f:9a:0a:8b:2c:6b:74:d9:cf:51:c9:7a:c1:6f:f7:1e:
         db:b2:cb:95:72:3e:75:a1:cb:9c:ea:08:b8:77:52:c0:0e:7a:
         27:b7:5a:3b:b9:f5:df:57:cc:6f:97:ac:ce:e9:83:26:7d:49:
         d6:19:88:4a:c5:40:1a:03:67:05:90:77:af:d8:a1:8e:e7:fa:
         31:36:d9:f8:01:d6:27:ff:d9:84:7b:0d:9e:a1:13:5c:a6:a1:
         df:1e:a8:bf:0d:aa:bc:d6:88:08:29:36:ae:29:c5:53:11:f9:
         2e:0e:46:84:37:ab:14:c1:96:af:5b:47:90:64:ff:db:93:3a:
         1e:1b:c4:71:41:0b:b6:a9:01:51:a7:1a:ac:b2:7a:38:30:b0:
         ec:64:61:38:fe:8b:f7:a0:83:3f:1b:dd:1b:99:14:4b:de:1d:
         24:16:56:33:85:3d:b8:49:a9:13:fc:a8:20:f5:8a:f8:c7:48:
         24:6d:d2:34:e2:53:7d:7a:92:ff:8f:8f:2e:1a:44:92:22:31:
         a2:a7:66:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0G5xhat8WRmV39mvYoy5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjUwNjE1MTUwMDU1WhcNMjUwNjE2MTUwMDU1WjAzMTEwLwYDVQQD
EyhhYTMxOTM5NjMyODk1MTllMGQzZDAxYmExN2VkOTI4ZjljOTI3ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx21D2eOmxQ81jSvNy2xFRYbdtMh0
qsn3hsDRb5eV8qMg5YQ//0yDtn4EGjvGp30D7wPjRmImYAPO954EsmtdxkuYp0IP
mqoB9j4vF1XZxIHzVZ84Ox2nbMEjEJv9hhISCz722Tloo3OpRfKpsrRCBjtfkoSN
tN5z09JJsxhHOjVc0QsIL30gQ3CBJ/Ll0oea5/C9mV8QXiAYW1IrPBoGb4SKq0sD
dVrZXYFt4DXa0Fo90tV7auXLjtZoZlW1VG4wr4CVpElR0nP0Byg4S58cihadBzxR
Ts+ENGtlg8czPjkpVFLJ2HYuN7sD8BAs++uaZQH9FBlgCcrKKtJqZQVFdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoxk5YyiVGeDT0Buhftko+ckn1IMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawQEMXIN
Q2b9VEKvqxa8ajuEuYH3r7F56a/c5xDrI+v8PVTKtZq7Gs0CRXwLd1PzaVp7Bgmk
OXsvmgqLLGt02c9RyXrBb/ce27LLlXI+daHLnOoIuHdSwA56J7daO7n131fMb5es
zumDJn1J1hmISsVAGgNnBZB3r9ihjuf6MTbZ+AHWJ//ZhHsNnqETXKah3x6ovw2q
vNaICCk2rinFUxH5Lg5GhDerFMGWr1tHkGT/25M6HhvEcUELtqkBUacarLJ6ODCw
7GRhOP6L96CDPxvdG5kUS94dJBZWM4U9uEmpE/yoIPWK+MdIJG3SNOJTfXqS/4+P
LhpEkiIxoqdmUw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:28 2025 by rpki-client