Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier:          ILocTaaskzk7G8oBWXPxKpxOeLfxyzf1Q/MLY6aQdq4=
Subject key identifier:   B9:F9:3F:3C:28:48:60:87:E3:1D:BD:04:CA:1F:81:F8:2E:6A:8E:FA
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer:       /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial:       0197711A984275987F688AB69B3AE4A8E94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 01:00:57 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:57 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:57 +0000
Files and hashes:         1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
                          2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: r7Bugn9Co5IVoQewKrBUuqaOOt05JFR49ucZjSzYsXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:98:42:75:98:7f:68:8a:b6:9b:3a:e4:a8:e9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Validity
            Not Before: Jun 15 01:00:57 2025 GMT
            Not After : Jun 16 01:00:57 2025 GMT
        Subject: CN=b9f93f3c28486087e31dbd04ca1f81f82e6a8efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:2f:23:85:88:b8:24:5e:72:9d:53:85:34:
                    3a:e1:91:36:c8:a0:69:07:f7:36:dd:04:b6:25:34:
                    fb:95:a8:b8:3f:41:70:b2:1d:99:ef:8e:3a:f2:fe:
                    03:f1:da:42:c6:97:78:50:e2:6e:8b:53:15:e2:94:
                    b2:04:cf:08:5b:8f:59:20:b2:e9:6e:ac:13:31:df:
                    cb:0d:5b:a2:04:6b:16:92:5a:e2:25:39:df:87:4e:
                    da:23:48:82:d8:43:b8:11:07:dc:ac:89:1a:c6:e9:
                    a8:86:8c:67:2b:48:ec:5b:ec:5a:eb:c3:1d:c2:f4:
                    a2:00:21:d6:22:ad:2b:bb:5f:49:17:02:e7:f6:54:
                    a1:0b:34:4a:7f:9e:e0:39:d6:3b:8e:9a:1f:b4:db:
                    25:29:c8:a6:f3:07:ea:4a:88:ba:1b:8c:a8:94:88:
                    e9:5c:1c:74:07:3a:30:27:eb:5d:b7:4d:59:5f:bf:
                    6b:7f:b9:20:82:91:aa:e0:a9:cb:37:32:8f:a9:f2:
                    08:7e:90:fa:f5:62:cb:f4:e6:53:cf:76:ca:0f:b3:
                    3c:fa:51:f4:00:f8:9b:b8:72:72:35:40:29:4b:5b:
                    db:e9:b9:4e:09:8c:a2:10:ac:02:9c:f6:f5:35:73:
                    ce:db:f6:02:fe:62:16:4d:5d:68:d1:a3:f0:78:d8:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:3F:3C:28:48:60:87:E3:1D:BD:04:CA:1F:81:F8:2E:6A:8E:FA
            X509v3 Authority Key Identifier:
                keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:98:7c:0d:63:f4:0f:46:ab:0f:bf:81:54:0a:9c:df:3c:
         7f:9e:22:65:39:bf:7a:06:38:41:23:ea:d2:d8:03:63:d5:f3:
         8b:b6:01:95:7b:d7:7f:43:a2:64:0e:1d:62:88:65:39:32:a0:
         34:ff:91:e7:29:37:56:fe:85:23:f3:f3:23:4a:0e:de:9e:5d:
         47:80:3a:b5:e7:ad:50:fa:2f:b4:84:2b:0e:49:db:7a:4f:22:
         56:07:f7:97:0b:07:b0:e9:06:2d:5c:55:e0:89:d2:c5:47:cd:
         9e:56:a2:6f:bf:58:02:a4:f2:d1:02:4d:ea:bf:cb:61:ed:a4:
         ce:05:c5:09:9a:23:b1:fe:b1:51:a3:e2:08:d3:cb:ee:4e:01:
         70:a9:89:cd:e2:28:54:18:f7:08:9f:06:0a:50:de:70:57:cd:
         e9:6a:09:43:89:12:54:d3:e5:24:d7:44:e0:12:77:dc:3b:3e:
         c0:8d:cd:07:39:38:d4:cb:91:7d:2e:14:39:47:a3:3a:53:b6:
         c4:8b:06:0c:65:f1:57:5c:18:88:1b:9c:ab:30:9e:47:35:75:
         76:e8:6e:c6:51:9b:8c:d6:68:14:a0:d8:23:91:1c:27:c7:11:
         38:15:3b:68:3d:fe:f1:8c:dc:d5:75:e8:46:ef:4d:58:6c:b0:
         c7:3a:91:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGphCdZh/aIq2mzrkqOlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2E2NTkyYzBmZTM0ZmFiZWZjYzQzNzE5Mjg3Yjg0NGQ0
N2NhMDMwHhcNMjUwNjE1MDEwMDU3WhcNMjUwNjE2MDEwMDU3WjAzMTEwLwYDVQQD
EyhiOWY5M2YzYzI4NDg2MDg3ZTMxZGJkMDRjYTFmODFmODJlNmE4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRcvI4WIuCRecp1ThTQ64ZE2yKBp
B/c23QS2JTT7lai4P0Fwsh2Z74468v4D8dpCxpd4UOJui1MV4pSyBM8IW49ZILLp
bqwTMd/LDVuiBGsWklriJTnfh07aI0iC2EO4EQfcrIkaxumohoxnK0jsW+xa68Md
wvSiACHWIq0ru19JFwLn9lShCzRKf57gOdY7jpoftNslKcim8wfqSoi6G4yolIjp
XBx0BzowJ+tdt01ZX79rf7kggpGq4KnLNzKPqfIIfpD69WLL9OZTz3bKD7M8+lH0
APibuHJyNUApS1vb6blOCYyiEKwCnPb1NXPO2/YC/mIWTV1o0aPweNi0UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn5PzwoSGCH4x29BMofgfguao76MB8GA1UdIwQY
MBaAFC/KZZLA/jT6vvzENxkoe4RNR8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut
MWVjZDk5MThiM2E2LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2
LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWaYfA1j
9A9Gqw+/gVQKnN88f54iZTm/egY4QSPq0tgDY9Xzi7YBlXvXf0OiZA4dYohlOTKg
NP+R5yk3Vv6FI/PzI0oO3p5dR4A6teetUPovtIQrDknbek8iVgf3lwsHsOkGLVxV
4InSxUfNnlaib79YAqTy0QJN6r/LYe2kzgXFCZojsf6xUaPiCNPL7k4BcKmJzeIo
VBj3CJ8GClDecFfN6WoJQ4kSVNPlJNdE4BJ33Ds+wI3NBzk41MuRfS4UOUejOlO2
xIsGDGXxV1wYiBucqzCeRzV1duhuxlGbjNZoFKDYI5EcJ8cROBU7aD3+8Yzc1XXo
Ru9NWGywxzqRwA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:31 2025 by rpki-client