Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          au7OQyMYi2XW9hiLySSV50MT8KcOSKyOmk9ibWrmAo8=
Subject key identifier:   ED:66:45:B4:7E:95:18:42:9B:7F:38:34:8F:F6:AC:D7:CA:CB:00:E5
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       0197790ABA5F50181D2D2A05B9176975E8E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 14:00:35 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:35 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:35 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: MiAi9CsBLIGxbxrn/tNk+UnjwrahOgw5v8mqLEdQJjM=)
                          2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
                          3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
                          4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
                          5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
                          6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0a:ba:5f:50:18:1d:2d:2a:05:b9:17:69:75:e8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Jun 16 14:00:35 2025 GMT
            Not After : Jun 17 14:00:35 2025 GMT
        Subject: CN=ed6645b47e9518429b7f38348ff6acd7cacb00e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:82:1d:e4:29:15:d0:80:80:d3:bf:d6:6e:
                    78:3c:12:4c:5c:29:40:77:19:04:3c:99:35:5a:9a:
                    15:cb:16:a2:09:14:18:6e:e8:8f:00:39:c6:36:45:
                    d1:96:00:7f:e2:f7:6a:3f:64:a1:eb:27:1d:26:c6:
                    ae:a3:ac:48:75:e2:a9:f7:70:7a:1e:fb:c1:41:87:
                    8e:36:10:1b:4c:11:f4:83:5e:87:dc:db:37:7e:6c:
                    10:6a:c0:34:3c:a1:98:46:ce:fe:3c:64:c4:7c:58:
                    63:96:cc:fc:a4:36:06:fb:c8:ec:53:aa:93:73:e9:
                    8a:7b:52:9f:b7:b9:5e:99:1d:f2:1c:d3:2b:9d:0f:
                    98:8e:70:eb:fc:24:74:f6:ac:cb:4a:20:4b:be:34:
                    a9:52:43:07:7c:7e:b0:57:42:5a:4c:75:4e:43:bc:
                    6f:3a:f4:68:e4:38:e9:cc:b5:77:b6:14:48:f0:e5:
                    e9:ab:dc:ad:c3:99:63:71:14:42:c9:aa:80:80:0f:
                    b1:b0:7b:87:82:4e:0e:bd:3b:0f:46:2e:4a:18:89:
                    4d:02:2a:3a:0e:16:c1:78:89:ac:0b:23:cc:76:bc:
                    d1:24:98:88:20:0c:54:b2:36:fd:78:b0:cc:f4:44:
                    f1:ae:ad:98:68:e7:96:9c:8c:84:d1:91:ef:68:f0:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:45:B4:7E:95:18:42:9B:7F:38:34:8F:F6:AC:D7:CA:CB:00:E5
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:05:94:ac:a7:f4:27:59:2d:35:97:37:71:9d:61:f0:4e:fe:
         0d:90:fc:50:42:bd:d9:d6:b1:f6:47:c1:af:02:48:e9:44:3f:
         2b:83:cf:66:68:39:b0:d0:26:85:57:d0:e0:1c:f0:67:7f:9c:
         e3:ec:dd:e5:8b:2c:45:07:9a:1d:f2:ea:20:40:b9:76:b0:32:
         8a:c4:d8:e4:77:e3:b1:bc:7d:6d:46:08:f8:0c:54:f4:f9:a7:
         38:0c:52:ec:eb:40:5b:de:d3:d9:4d:e1:f9:8e:39:6c:66:c4:
         3f:86:f1:70:de:43:c2:54:7e:bd:c1:95:b2:5c:9a:d0:81:57:
         e5:63:55:6c:fe:da:e2:66:80:ba:bb:b5:ee:b7:4e:54:ad:a2:
         0d:d5:cb:b2:10:2e:6f:e4:c9:24:f1:ea:6b:f4:49:c9:7a:05:
         d6:85:ce:24:71:fb:06:cb:37:93:41:aa:77:a0:45:29:31:9d:
         fa:dd:73:f1:96:28:19:39:b5:56:14:13:4b:e0:54:c5:fc:b1:
         f0:fe:7a:cc:3c:22:d0:a4:7d:92:13:48:d1:4a:ad:4e:87:b1:
         a3:e6:ec:bb:72:54:62:97:d7:1e:ce:2e:33:df:30:c6:17:cd:
         85:30:d5:21:94:ed:5e:4c:c4:71:2f:cf:83:1d:fb:21:27:a2:
         48:41:1c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5CrpfUBgdLSoFuRdpdejlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5
M2U3ODkwHhcNMjUwNjE2MTQwMDM1WhcNMjUwNjE3MTQwMDM1WjAzMTEwLwYDVQQD
EyhlZDY2NDViNDdlOTUxODQyOWI3ZjM4MzQ4ZmY2YWNkN2NhY2IwMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7eCHeQpFdCAgNO/1m54PBJMXClA
dxkEPJk1WpoVyxaiCRQYbuiPADnGNkXRlgB/4vdqP2Sh6ycdJsauo6xIdeKp93B6
HvvBQYeONhAbTBH0g16H3Ns3fmwQasA0PKGYRs7+PGTEfFhjlsz8pDYG+8jsU6qT
c+mKe1Kft7lemR3yHNMrnQ+YjnDr/CR09qzLSiBLvjSpUkMHfH6wV0JaTHVOQ7xv
OvRo5DjpzLV3thRI8OXpq9ytw5ljcRRCyaqAgA+xsHuHgk4OvTsPRi5KGIlNAio6
DhbBeImsCyPMdrzRJJiIIAxUsjb9eLDM9ETxrq2YaOeWnIyE0ZHvaPBJYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1mRbR+lRhCm384NI/2rNfKywDlMB8GA1UdIwQY
MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt
NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2
LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQWUrKf0
J1ktNZc3cZ1h8E7+DZD8UEK92dax9kfBrwJI6UQ/K4PPZmg5sNAmhVfQ4BzwZ3+c
4+zd5YssRQeaHfLqIEC5drAyisTY5Hfjsbx9bUYI+AxU9PmnOAxS7OtAW97T2U3h
+Y45bGbEP4bxcN5DwlR+vcGVslya0IFX5WNVbP7a4maAuru17rdOVK2iDdXLshAu
b+TJJPHqa/RJyXoF1oXOJHH7Bss3k0Gqd6BFKTGd+t1z8ZYoGTm1VhQTS+BUxfyx
8P56zDwi0KR9khNI0UqtToexo+bsu3JUYpfXHs4uM98wxhfNhTDVIZTtXkzEcS/P
gx37ISeiSEEcpQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:43:59 2025 by rpki-client