Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File:                     we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier:          skYmD2zItcq9PBPmLM+clsGKPn9ImcKyB1Ghg7SlsmA=
Subject key identifier:   53:99:82:23:FD:7C:26:4F:41:75:C2:07:A4:2D:1C:66:FF:BE:2E:B5
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer:       /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial:       01977B66E63E04CA07255EA4C9E610B883EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number:          1596
Signing time:             Tue 17 Jun 2025 01:00:30 +0000
Manifest this update:     Tue 17 Jun 2025 01:00:30 +0000
Manifest next update:     Wed 18 Jun 2025 01:00:30 +0000
Files and hashes:         1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
                          2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: B4eXs5UUhGWntbzQlKontMaG/RRx/EWM4rSICo8j4jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:66:e6:3e:04:ca:07:25:5e:a4:c9:e6:10:b8:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
        Validity
            Not Before: Jun 17 01:00:30 2025 GMT
            Not After : Jun 18 01:00:30 2025 GMT
        Subject: CN=53998223fd7c264f4175c207a42d1c66ffbe2eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:7c:7e:bb:11:40:e1:5a:e3:71:36:8f:81:
                    19:ed:a9:ec:24:b3:fd:de:9d:00:4c:ed:40:e8:f8:
                    ed:ca:83:e6:05:4a:c7:89:1e:1a:4c:0a:b2:a4:57:
                    7e:5e:f5:13:80:65:7a:35:98:7e:68:af:89:0d:1d:
                    63:d5:fa:2a:64:02:6c:6b:6b:44:29:43:27:7e:06:
                    71:3e:0e:68:2b:56:e0:6a:95:06:b5:87:ee:0b:ff:
                    9f:7e:6e:97:0b:a0:bf:75:81:10:49:54:97:d6:56:
                    04:fb:5f:4c:9a:fb:79:38:45:93:d1:b3:7d:fe:7b:
                    88:6d:3b:52:90:7b:26:c8:f6:cf:bf:d1:c3:b8:1a:
                    35:29:4e:6e:2a:39:66:7b:63:f5:14:35:bb:ac:b7:
                    5d:3b:0a:69:dc:ef:2e:d2:9c:5b:33:e8:57:fa:04:
                    45:f1:12:8b:5e:a1:1b:64:0c:32:ad:a4:83:aa:b7:
                    25:13:a6:81:48:f6:07:d3:e6:b7:bb:79:50:c8:3a:
                    df:87:7b:5b:5c:c9:ab:6b:fd:fe:8f:d8:fa:c8:9d:
                    33:5e:0e:e2:27:ad:83:d3:9e:90:0f:47:8f:63:74:
                    8c:ee:11:9a:16:ae:3a:2b:e2:94:34:76:06:38:37:
                    d0:a9:7a:e6:08:6a:3d:b7:ce:01:8d:c9:f8:ff:2e:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:99:82:23:FD:7C:26:4F:41:75:C2:07:A4:2D:1C:66:FF:BE:2E:B5
            X509v3 Authority Key Identifier:
                keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:4d:26:aa:22:fb:8a:c2:e5:a4:61:29:6e:3e:7e:9d:cb:6b:
         14:6d:36:0d:21:c4:cf:f9:a7:9f:35:eb:28:2f:54:30:80:d2:
         7f:92:e3:69:71:6c:41:43:83:cc:12:7e:3d:d3:5c:d8:5e:b7:
         ff:e5:e6:ac:64:67:cb:9e:39:61:6d:31:94:d3:7f:fd:74:aa:
         6f:7c:88:aa:d6:13:9e:17:91:e6:a9:a3:bf:b8:de:ea:4d:3f:
         ab:c0:ea:d1:d3:a8:4a:84:85:25:cc:c1:67:c0:35:d3:ce:5d:
         7b:46:c0:49:5b:b6:0f:39:b7:90:84:f2:46:c9:77:74:92:2b:
         c2:e6:e1:04:d1:8f:95:51:b8:5b:51:f9:2c:a5:44:e8:3e:62:
         86:d2:0a:45:72:6e:2f:c5:16:f1:72:96:69:09:b9:88:4c:1d:
         81:95:2f:68:fd:d8:44:d2:55:9b:6d:7d:ef:c4:13:cb:1c:dd:
         85:c9:16:6e:29:36:95:3c:29:92:7d:ce:35:76:4b:a2:a2:ce:
         70:c5:ee:ee:71:53:36:cc:f8:8a:d3:79:21:2c:86:66:e0:e2:
         5c:41:06:40:64:66:c2:68:0d:96:9f:25:f6:ba:df:91:33:5f:
         a3:d6:4e:ff:af:1b:3c:43:a4:f9:8c:4d:91:30:75:0e:01:29:
         cc:79:8f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7ZuY+BMoHJV6kyeYQuIPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3
ZTk4ZmQwHhcNMjUwNjE3MDEwMDMwWhcNMjUwNjE4MDEwMDMwWjAzMTEwLwYDVQQD
Eyg1Mzk5ODIyM2ZkN2MyNjRmNDE3NWMyMDdhNDJkMWM2NmZmYmUyZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiZ8frsRQOFa43E2j4EZ7ansJLP9
3p0ATO1A6PjtyoPmBUrHiR4aTAqypFd+XvUTgGV6NZh+aK+JDR1j1foqZAJsa2tE
KUMnfgZxPg5oK1bgapUGtYfuC/+ffm6XC6C/dYEQSVSX1lYE+19Mmvt5OEWT0bN9
/nuIbTtSkHsmyPbPv9HDuBo1KU5uKjlme2P1FDW7rLddOwpp3O8u0pxbM+hX+gRF
8RKLXqEbZAwyraSDqrclE6aBSPYH0+a3u3lQyDrfh3tbXMmra/3+j9j6yJ0zXg7i
J62D056QD0ePY3SM7hGaFq46K+KUNHYGODfQqXrmCGo9t84Bjcn4/y66SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOZgiP9fCZPQXXCB6QtHGb/vi61MB8GA1UdIwQY
MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt
Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi
LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA100mqiL7
isLlpGEpbj5+nctrFG02DSHEz/mnnzXrKC9UMIDSf5LjaXFsQUODzBJ+PdNc2F63
/+XmrGRny545YW0xlNN//XSqb3yIqtYTnheR5qmjv7je6k0/q8Dq0dOoSoSFJczB
Z8A1085de0bASVu2Dzm3kITyRsl3dJIrwubhBNGPlVG4W1H5LKVE6D5ihtIKRXJu
L8UW8XKWaQm5iEwdgZUvaP3YRNJVm21978QTyxzdhckWbik2lTwpkn3ONXZLoqLO
cMXu7nFTNsz4itN5ISyGZuDiXEEGQGRmwmgNlp8l9rrfkTNfo9ZO/68bPEOk+YxN
kTB1DgEpzHmPmg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:57:25 2025 by rpki-client