Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File:                     P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier:          aBqT7IBlnQNQ22FuHS315bTXYz4+zbB08u50NiSkIIA=
Subject key identifier:   15:42:70:CD:B1:BA:C0:C4:6F:3D:4C:92:12:30:8B:CC:07:6A:E2:E6
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       019770ACA1BC2BD8BBFC4DCD520B78E15AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 23:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:51 +0000
Files and hashes:         1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: zNLmd46IjN5LhVBdGGY9afLODyfgGJHiVvZGcLQM0Vs=)
                          2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:a1:bc:2b:d8:bb:fc:4d:cd:52:0b:78:e1:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: Jun 14 23:00:51 2025 GMT
            Not After : Jun 15 23:00:51 2025 GMT
        Subject: CN=154270cdb1bac0c46f3d4c9212308bcc076ae2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:09:f7:44:8d:a0:ff:2b:83:47:37:1f:8f:
                    33:d5:c7:a5:84:a6:d3:82:94:a6:a9:27:cd:b6:68:
                    87:6e:ab:38:47:8a:3b:ce:ed:48:08:74:78:66:f8:
                    2d:a6:9a:b4:5b:05:c4:27:ec:e7:4a:fc:10:f0:09:
                    88:c7:2f:3f:f0:f8:74:5f:68:b6:12:f4:33:69:ab:
                    30:38:58:b1:8e:13:6b:94:14:3f:79:1f:c2:4d:72:
                    7d:37:df:97:d3:9f:53:d8:d9:cb:46:0b:07:6e:dd:
                    40:61:19:41:35:f2:e6:e2:45:c0:33:e4:0a:62:cf:
                    3e:68:41:ab:b2:67:0e:2b:a3:3a:61:ba:aa:a2:44:
                    a3:0e:62:ea:c8:28:d0:a2:2e:e4:2e:bc:40:c0:af:
                    04:18:9a:1a:4f:a0:01:40:cd:3a:33:73:55:de:14:
                    d3:c5:a5:88:ca:c5:5d:ae:b0:23:63:00:2b:49:86:
                    a0:0a:f2:e0:30:61:89:44:f2:af:cb:44:fb:71:21:
                    54:22:c4:82:15:db:31:6a:88:d6:9b:9c:df:74:2d:
                    5a:93:b7:a2:fe:2d:b1:1f:1f:06:1d:ab:b1:af:e9:
                    7d:ba:c9:84:a0:e1:95:2c:32:39:a4:d5:e6:17:31:
                    5d:7b:1a:03:2c:b1:71:de:6e:36:c3:d5:d7:e2:9e:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:70:CD:B1:BA:C0:C4:6F:3D:4C:92:12:30:8B:CC:07:6A:E2:E6
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:46:a3:81:25:47:77:e3:51:da:0a:8b:3a:09:46:95:7a:
         6b:48:58:16:e2:4f:79:8a:eb:95:24:23:de:01:36:18:2b:99:
         d5:12:82:ce:11:cf:c4:e5:76:30:bc:f0:35:7f:d5:80:f2:f6:
         dc:1d:b1:f9:8e:b5:c6:ce:61:7b:2e:ef:a9:21:bf:24:9e:df:
         e1:86:d7:18:ef:89:50:00:37:3b:42:75:31:af:8d:02:2a:51:
         48:ae:8f:40:4b:1b:a8:d4:90:f3:c9:92:68:39:20:b1:82:d3:
         82:a5:06:e6:1e:00:ad:73:36:85:a3:3e:56:df:a5:2a:75:e9:
         b6:f7:17:7b:c9:a3:f1:b8:9c:72:b3:16:51:87:c0:20:f2:34:
         38:5a:28:68:a0:ea:db:c6:98:79:cd:84:4e:f5:7a:db:64:23:
         d8:7b:3e:15:bf:bc:30:de:bd:3a:01:99:69:0a:9f:63:e8:30:
         02:6d:c7:4a:94:3b:1e:a2:9e:68:6e:30:dc:1f:8a:82:cb:e7:
         08:99:ac:9d:4d:c3:2f:4a:8e:58:a6:3f:06:b4:54:a5:02:10:
         58:55:b9:b3:d5:7a:28:38:8e:b4:e0:f0:32:9e:a0:e4:f4:ca:
         80:07:5c:6d:d7:f0:b4:38:3c:91:03:97:62:54:4e:aa:55:32:
         f6:d3:ab:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrKG8K9i7/E3NUgt44Vq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDZjMzUxZWU4OWM5ZjU1NTgxNjc1MzA3MDQ4ODViOGJl
NDZlYWEwHhcNMjUwNjE0MjMwMDUxWhcNMjUwNjE1MjMwMDUxWjAzMTEwLwYDVQQD
EygxNTQyNzBjZGIxYmFjMGM0NmYzZDRjOTIxMjMwOGJjYzA3NmFlMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxigJ90SNoP8rg0c3H48z1celhKbT
gpSmqSfNtmiHbqs4R4o7zu1ICHR4Zvgtppq0WwXEJ+znSvwQ8AmIxy8/8Ph0X2i2
EvQzaaswOFixjhNrlBQ/eR/CTXJ9N9+X059T2NnLRgsHbt1AYRlBNfLm4kXAM+QK
Ys8+aEGrsmcOK6M6YbqqokSjDmLqyCjQoi7kLrxAwK8EGJoaT6ABQM06M3NV3hTT
xaWIysVdrrAjYwArSYagCvLgMGGJRPKvy0T7cSFUIsSCFdsxaojWm5zfdC1ak7ei
/i2xHx8GHauxr+l9usmEoOGVLDI5pNXmFzFdexoDLLFx3m42w9XX4p7sRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVCcM2xusDEbz1MkhIwi8wHauLmMB8GA1UdIwQY
MBaAFD9Gw1Huicn1VYFnUwcEiFuL5G6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMt
MDU5NzhhNWExZDY5LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mYzdhZWUtMjMzYy00ZDY0LTkyOTMtMDU5NzhhNWExZDY5
LzEvUDBiRFVlNkp5ZlZWZ1dkVEJ3U0lXNHZrYnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuhGo4El
R3fjUdoKizoJRpV6a0hYFuJPeYrrlSQj3gE2GCuZ1RKCzhHPxOV2MLzwNX/VgPL2
3B2x+Y61xs5hey7vqSG/JJ7f4YbXGO+JUAA3O0J1Ma+NAipRSK6PQEsbqNSQ88mS
aDkgsYLTgqUG5h4ArXM2haM+Vt+lKnXptvcXe8mj8biccrMWUYfAIPI0OFooaKDq
28aYec2ETvV622Qj2Hs+Fb+8MN69OgGZaQqfY+gwAm3HSpQ7HqKeaG4w3B+Kgsvn
CJmsnU3DL0qOWKY/BrRUpQIQWFW5s9V6KDiOtODwMp6g5PTKgAdcbdfwtDg8kQOX
YlROqlUy9tOrEg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:47 2025 by rpki-client