Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          xAvXXuCpZZgnnBLWwSME6fzsOagg+y0h05jT+yDJTYg=
Subject key identifier:   B8:46:F3:1E:20:19:21:EC:11:42:BD:FE:98:08:35:D8:71:04:48:F6
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       01977AC215F7BA6F96BEE2F2965046D7B3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          1597
Signing time:             Mon 16 Jun 2025 22:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:29 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: k8lTYUKRCglg3hIcnKyWVgyHSi7Ko2pQMrv3B3oYP38=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:15:f7:ba:6f:96:be:e2:f2:96:50:46:d7:b3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Jun 16 22:00:29 2025 GMT
            Not After : Jun 17 22:00:29 2025 GMT
        Subject: CN=b846f31e201921ec1142bdfe980835d8710448f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:26:93:23:83:4a:38:f8:30:b0:1c:7e:1d:
                    5a:b1:05:c3:e9:a5:c9:2a:c0:b1:1a:0e:18:0d:e6:
                    9a:a1:26:3d:80:e3:85:21:5e:d1:be:0c:d6:4d:5d:
                    1e:f6:35:3c:85:0b:6b:00:6c:52:93:0b:d6:22:a6:
                    59:9a:70:2e:d4:ee:5d:a2:2a:00:b7:0f:ed:e7:9a:
                    be:63:37:1a:9b:c2:de:b1:cf:a0:1c:dc:3f:3d:06:
                    92:dd:5f:14:0d:0c:0d:9e:c9:d5:36:90:49:1a:10:
                    c3:07:70:f1:d1:93:c3:da:91:a1:43:fb:26:39:a4:
                    24:5e:e0:af:b2:ae:3d:0d:54:53:38:5b:f6:81:0a:
                    89:b5:03:4a:83:6f:12:c6:64:c9:65:ce:a2:ad:43:
                    c8:f7:14:7c:b3:0f:4e:0d:48:d6:3d:02:00:de:7d:
                    2a:93:e7:31:bb:53:10:b9:a8:af:b1:10:d8:d8:39:
                    a4:94:dc:b0:f2:de:86:db:29:16:2c:82:78:8a:70:
                    0c:ac:81:88:4f:14:18:d6:e3:1b:d0:05:da:d6:c1:
                    07:57:7e:b3:42:56:74:64:20:45:bb:b2:37:95:f8:
                    06:ef:1c:b5:90:90:ac:38:2a:4d:e5:4c:7d:05:7e:
                    1b:56:d6:fa:01:77:a4:b9:54:fe:89:46:91:cd:dd:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:F3:1E:20:19:21:EC:11:42:BD:FE:98:08:35:D8:71:04:48:F6
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:15:a9:37:c9:55:52:ea:af:1e:ae:98:45:8b:0d:bb:58:55:
         40:35:05:a1:9f:28:27:6a:2b:16:4c:0a:60:4f:bb:30:50:66:
         8c:3f:f8:3c:1f:84:81:80:13:6b:ed:c5:7b:fb:c4:d5:e6:5f:
         c3:5b:64:79:48:bd:3f:b3:17:d5:5e:43:1f:9d:b4:5f:7f:c0:
         f9:13:d8:14:96:5e:e9:53:4b:7a:7a:6c:a6:cc:f4:41:52:93:
         cc:6c:19:f0:6b:2b:c5:5a:5a:22:a7:d9:8c:58:fb:55:30:e9:
         b1:cf:ad:de:66:15:b2:d8:0d:cf:19:85:cb:9e:a4:a8:18:e8:
         c0:03:c5:71:ca:78:e8:54:d8:d5:8d:e1:69:6a:82:fe:cc:ff:
         b6:d4:81:8a:f2:f3:da:f1:32:07:b1:47:87:70:e2:87:0b:d0:
         ee:4a:50:95:f2:c4:65:84:d7:46:39:57:28:12:24:ec:07:24:
         c9:74:60:73:83:7d:3c:a7:71:fb:44:9e:1d:77:1d:fd:f2:f9:
         54:68:e1:f3:01:c9:a9:2c:b1:08:2a:b5:e0:8b:5f:bd:68:7d:
         d0:c1:dc:cc:00:a7:5b:4a:32:bd:b8:b2:4d:4c:4c:d3:cc:88:
         03:fc:3c:26:06:7c:f9:04:85:b8:a8:c0:65:17:e9:6e:61:ed:
         85:9e:13:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6whX3um+WvuLyllBG17P+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm
YWFiYWMwHhcNMjUwNjE2MjIwMDI5WhcNMjUwNjE3MjIwMDI5WjAzMTEwLwYDVQQD
EyhiODQ2ZjMxZTIwMTkyMWVjMTE0MmJkZmU5ODA4MzVkODcxMDQ0OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFQmkyODSjj4MLAcfh1asQXD6aXJ
KsCxGg4YDeaaoSY9gOOFIV7RvgzWTV0e9jU8hQtrAGxSkwvWIqZZmnAu1O5doioA
tw/t55q+Yzcam8Lesc+gHNw/PQaS3V8UDQwNnsnVNpBJGhDDB3Dx0ZPD2pGhQ/sm
OaQkXuCvsq49DVRTOFv2gQqJtQNKg28SxmTJZc6irUPI9xR8sw9ODUjWPQIA3n0q
k+cxu1MQuaivsRDY2DmklNyw8t6G2ykWLIJ4inAMrIGITxQY1uMb0AXa1sEHV36z
QlZ0ZCBFu7I3lfgG7xy1kJCsOCpN5Ux9BX4bVtb6AXekuVT+iUaRzd3M0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhG8x4gGSHsEUK9/pgINdhxBEj2MB8GA1UdIwQY
MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt
MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy
LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRWpN8lV
UuqvHq6YRYsNu1hVQDUFoZ8oJ2orFkwKYE+7MFBmjD/4PB+EgYATa+3Fe/vE1eZf
w1tkeUi9P7MX1V5DH520X3/A+RPYFJZe6VNLenpspsz0QVKTzGwZ8GsrxVpaIqfZ
jFj7VTDpsc+t3mYVstgNzxmFy56kqBjowAPFccp46FTY1Y3haWqC/sz/ttSBivLz
2vEyB7FHh3DihwvQ7kpQlfLEZYTXRjlXKBIk7AckyXRgc4N9PKdx+0SeHXcd/fL5
VGjh8wHJqSyxCCq14ItfvWh90MHczACnW0oyvbiyTUxM08yIA/w8JgZ8+QSFuKjA
ZRfpbmHthZ4TVg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:54 2025 by rpki-client