Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          RY23/6vfyzEkYMkt/BSN/uElG1LNA5lDU6IrV811JKI=
Subject key identifier:   18:72:B2:40:FD:AE:C8:2E:13:92:55:44:D1:9F:A9:53:2A:F9:C9:4B
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019779B00F8DFB5AD1C61123FE586EC999F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 17:01:10 +0000
Manifest this update:     Mon 16 Jun 2025 17:01:10 +0000
Manifest next update:     Tue 17 Jun 2025 17:01:10 +0000
Files and hashes:         1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
                          2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: 5JHuoOGKGdLoJYleXUfmyAqILWvxkNj13+H113DacjM=)
                          4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:b0:0f:8d:fb:5a:d1:c6:11:23:fe:58:6e:c9:99:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Jun 16 17:01:10 2025 GMT
            Not After : Jun 17 17:01:10 2025 GMT
        Subject: CN=1872b240fdaec82e13925544d19fa9532af9c94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:cb:b4:d1:47:c9:27:ce:71:6a:eb:de:bf:
                    66:75:bd:61:09:ec:aa:e5:12:3f:ba:e0:56:63:71:
                    87:50:36:78:f4:48:3d:bd:c8:97:24:52:73:51:eb:
                    c8:31:0b:46:f1:4f:43:33:15:bb:2a:d0:c9:0f:b6:
                    77:43:ad:2c:66:26:b9:ce:83:82:98:ae:d8:c7:f4:
                    21:9d:3b:87:eb:2f:39:85:71:36:0a:40:56:90:fb:
                    f9:29:e7:4c:f9:af:7f:4c:e3:26:25:c5:0d:ba:9f:
                    be:41:82:b1:1e:21:89:f7:01:f1:bc:b8:e0:8e:ac:
                    81:ef:39:3b:e6:67:27:01:1a:fb:46:a0:e1:c3:fe:
                    81:3b:71:04:d8:31:17:f3:67:3b:69:0d:cf:e9:43:
                    9e:5b:f9:02:c4:cc:c1:a7:12:47:d8:cd:d7:5c:4d:
                    65:45:bd:d9:2c:55:3a:5d:e2:61:3d:c3:61:03:09:
                    9c:24:88:83:18:f2:e1:f6:f6:b2:c7:9f:a8:36:80:
                    c4:7d:df:4a:25:5d:60:c2:1d:cc:4f:21:01:e2:33:
                    66:37:74:c5:f0:af:6b:1c:9e:b3:61:f8:56:03:b9:
                    b9:71:31:32:09:12:b3:bc:a5:4a:b6:ea:78:da:ea:
                    d1:8e:98:cb:8f:07:34:0e:cf:d0:ac:31:d0:00:1f:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:B2:40:FD:AE:C8:2E:13:92:55:44:D1:9F:A9:53:2A:F9:C9:4B
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:43:d1:f7:63:33:44:da:55:7c:4a:d8:f6:9e:54:47:1a:
         d4:47:a8:e8:12:9c:bc:c9:8d:90:9f:d5:b7:b0:93:c0:d7:44:
         f4:ba:3a:25:5b:37:2c:7e:78:99:08:dd:d3:47:55:4b:79:45:
         b5:1d:d6:d4:b2:15:d6:e4:28:6e:0a:d0:22:31:d3:f4:06:ec:
         0c:e3:0c:be:21:00:d9:47:35:60:db:40:d7:62:92:65:fc:18:
         4f:17:28:e1:80:9d:b8:1c:26:f8:93:51:16:be:29:51:87:c1:
         9b:c0:52:be:44:d0:68:18:a7:64:a5:fa:53:5d:36:82:f3:7a:
         8e:52:81:2d:29:8d:c6:03:51:b0:f0:93:49:9e:30:f3:08:42:
         8a:41:db:eb:f7:3d:0b:bd:69:19:e4:f9:50:fa:0a:71:2e:1f:
         bd:66:a0:2e:0f:b5:b1:19:fc:4f:b5:a2:c9:ef:b8:6f:29:8d:
         19:19:f0:73:6c:4f:f1:07:f6:6a:9b:11:96:d3:55:e8:ec:f4:
         25:fb:4f:eb:5a:92:96:2d:39:1b:af:40:8e:5e:e8:98:61:7e:
         d6:50:5a:d2:fe:bb:15:d9:c4:9b:3d:49:91:ce:63:ed:f8:7c:
         a2:3a:50:fe:ce:04:e3:f6:3f:fb:c7:37:94:56:16:b6:92:38:
         14:24:f8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5sA+N+1rRxhEj/lhuyZn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjUwNjE2MTcwMTEwWhcNMjUwNjE3MTcwMTEwWjAzMTEwLwYDVQQD
EygxODcyYjI0MGZkYWVjODJlMTM5MjU1NDRkMTlmYTk1MzJhZjljOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9fLtNFHySfOcWrr3r9mdb1hCeyq
5RI/uuBWY3GHUDZ49Eg9vciXJFJzUevIMQtG8U9DMxW7KtDJD7Z3Q60sZia5zoOC
mK7Yx/QhnTuH6y85hXE2CkBWkPv5KedM+a9/TOMmJcUNup++QYKxHiGJ9wHxvLjg
jqyB7zk75mcnARr7RqDhw/6BO3EE2DEX82c7aQ3P6UOeW/kCxMzBpxJH2M3XXE1l
Rb3ZLFU6XeJhPcNhAwmcJIiDGPLh9vayx5+oNoDEfd9KJV1gwh3MTyEB4jNmN3TF
8K9rHJ6zYfhWA7m5cTEyCRKzvKVKtup42urRjpjLjwc0Ds/QrDHQAB/PIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhyskD9rsguE5JVRNGfqVMq+clLMB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLZD0fdj
M0TaVXxK2PaeVEca1Eeo6BKcvMmNkJ/Vt7CTwNdE9Lo6JVs3LH54mQjd00dVS3lF
tR3W1LIV1uQobgrQIjHT9AbsDOMMviEA2Uc1YNtA12KSZfwYTxco4YCduBwm+JNR
Fr4pUYfBm8BSvkTQaBinZKX6U102gvN6jlKBLSmNxgNRsPCTSZ4w8whCikHb6/c9
C71pGeT5UPoKcS4fvWagLg+1sRn8T7Wiye+4bymNGRnwc2xP8Qf2apsRltNV6Oz0
JftP61qSli05G69Ajl7omGF+1lBa0v67FdnEmz1Jkc5j7fh8ojpQ/s4E4/Y/+8c3
lFYWtpI4FCT4lQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:51:01 2025 by rpki-client