Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File:                     jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier:          c83FSj8fnCeqBiiL2hS1ULx2mANy0NWBHkk0Oc1QnRk=
Subject key identifier:   5D:5A:AB:6A:3F:38:9A:C5:BD:7D:1C:6F:9A:70:69:CF:A8:8C:9F:A7
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer:       /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial:       019770AC570E2D37BABF00F8E413636CAC7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 23:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:32 +0000
Files and hashes:         1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
                          2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
                          3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
                          4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: unyio0uNr+iR+jYPR/PkPcPWhc/eWoigF/Txx/GF7sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:57:0e:2d:37:ba:bf:00:f8:e4:13:63:6c:ac:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
        Validity
            Not Before: Jun 14 23:00:32 2025 GMT
            Not After : Jun 15 23:00:32 2025 GMT
        Subject: CN=5d5aab6a3f389ac5bd7d1c6f9a7069cfa88c9fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:bf:4c:7b:6a:e8:d2:ab:ee:91:ce:4f:74:
                    11:c2:e8:8a:a3:7f:0f:2b:58:26:6a:e7:49:5b:a5:
                    05:05:90:4e:3e:de:46:49:bc:3b:40:24:02:fb:af:
                    99:be:d7:05:d7:0b:87:bd:65:a1:b9:21:9b:cd:04:
                    b3:74:e3:3a:3e:06:09:35:f7:c2:cd:0b:57:91:11:
                    7c:f4:53:02:5f:52:97:1d:4f:60:6a:f5:6c:12:4e:
                    8f:a9:6e:e2:13:59:42:11:54:f4:a6:61:66:c8:09:
                    5e:e1:75:67:47:48:ea:6c:03:42:83:9f:10:71:1b:
                    c6:ef:79:a0:d8:e8:f4:3a:d6:19:c9:71:1e:da:ff:
                    5b:4c:d1:93:2f:d0:4c:63:eb:2e:e1:95:c0:58:76:
                    9b:e7:64:10:fe:89:1a:c0:79:d9:e2:60:ba:d6:dd:
                    b1:4c:b3:f8:5f:b3:0c:cd:db:fa:bc:3f:90:df:de:
                    3d:b2:16:cd:82:43:33:55:97:e1:22:09:1d:52:04:
                    c9:87:90:5f:10:b5:a9:2e:d0:1d:86:36:65:b8:74:
                    6e:8b:b9:ae:fd:66:08:2f:52:04:46:d4:83:5e:3c:
                    d1:c8:95:ce:d3:70:9a:69:a1:4d:fc:36:de:43:3b:
                    26:aa:bc:95:4f:a2:2c:c6:17:fc:21:6a:4c:ac:0a:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5A:AB:6A:3F:38:9A:C5:BD:7D:1C:6F:9A:70:69:CF:A8:8C:9F:A7
            X509v3 Authority Key Identifier:
                keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:83:df:60:11:df:c6:e2:43:a2:ad:58:c2:d5:58:55:0a:b5:
         84:03:83:57:e2:3c:ff:a1:50:4b:42:2e:49:e9:e8:aa:0e:0f:
         3e:24:68:69:89:97:5e:7f:20:6a:2c:49:63:88:28:63:30:eb:
         fb:dc:90:e2:a6:7b:36:84:b2:99:77:a8:2d:5d:0b:f4:43:f0:
         df:28:a3:b8:06:64:7d:27:e1:da:17:f7:34:ed:ce:b6:b3:5d:
         59:d7:67:c4:5b:e3:24:17:04:fe:d9:1d:2f:8e:9e:0d:1e:e0:
         25:20:10:8e:85:eb:3f:e1:e7:f4:d5:83:f1:0a:b0:3e:44:36:
         08:1b:56:3f:a6:0b:3e:5d:af:3e:81:1d:58:1f:7f:4a:21:ea:
         0b:b1:a5:41:b9:6a:fb:48:7f:6a:aa:3b:ee:24:85:b1:7c:cb:
         70:cf:d7:6c:a8:7d:ff:07:bd:ca:bf:ae:df:13:09:e5:ac:41:
         3c:f8:10:6a:92:38:52:fe:37:c4:b4:5d:6a:8e:5d:83:db:03:
         0e:f0:f7:85:21:a3:13:65:7c:fd:88:28:78:88:d1:aa:89:9b:
         ea:f3:59:86:59:71:53:13:55:71:41:4f:b0:74:db:b8:cb:45:
         d9:75:ec:84:3a:18:1b:23:48:bf:c6:51:fc:3a:9a:04:b6:af:
         10:6e:b4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrFcOLTe6vwD45BNjbKx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4
YzU1MzgwHhcNMjUwNjE0MjMwMDMyWhcNMjUwNjE1MjMwMDMyWjAzMTEwLwYDVQQD
Eyg1ZDVhYWI2YTNmMzg5YWM1YmQ3ZDFjNmY5YTcwNjljZmE4OGM5ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7e/THtq6NKr7pHOT3QRwuiKo38P
K1gmaudJW6UFBZBOPt5GSbw7QCQC+6+ZvtcF1wuHvWWhuSGbzQSzdOM6PgYJNffC
zQtXkRF89FMCX1KXHU9gavVsEk6PqW7iE1lCEVT0pmFmyAle4XVnR0jqbANCg58Q
cRvG73mg2Oj0OtYZyXEe2v9bTNGTL9BMY+su4ZXAWHab52QQ/okawHnZ4mC61t2x
TLP4X7MMzdv6vD+Q3949shbNgkMzVZfhIgkdUgTJh5BfELWpLtAdhjZluHRui7mu
/WYIL1IERtSDXjzRyJXO03CaaaFN/DbeQzsmqryVT6Isxhf8IWpMrAptFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1aq2o/OJrFvX0cb5pwac+ojJ+nMB8GA1UdIwQY
MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt
MDIxMjk1MzNhMzNkLzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk
LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxoPfYBHf
xuJDoq1YwtVYVQq1hAODV+I8/6FQS0IuSenoqg4PPiRoaYmXXn8gaixJY4goYzDr
+9yQ4qZ7NoSymXeoLV0L9EPw3yijuAZkfSfh2hf3NO3OtrNdWddnxFvjJBcE/tkd
L46eDR7gJSAQjoXrP+Hn9NWD8QqwPkQ2CBtWP6YLPl2vPoEdWB9/SiHqC7GlQblq
+0h/aqo77iSFsXzLcM/XbKh9/we9yr+u3xMJ5axBPPgQapI4Uv43xLRdao5dg9sD
DvD3hSGjE2V8/YgoeIjRqomb6vNZhllxUxNVcUFPsHTbuMtF2XXshDoYGyNIv8ZR
/DqaBLavEG602w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:10 2025 by rpki-client