Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          h2Xat1V+QNjnqXM3eBqgXONm9xU3hp7GBU8TlaGMm9c=
Subject key identifier:   11:4B:DB:C8:BD:73:49:63:26:98:68:DE:13:03:65:D5:AC:AC:BA:B7
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       01976C992F0EB2722BAEA4CB9CC6A16A971E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 04:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 04:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 04:01:07 +0000
Files and hashes:         1: 5pSATMPZ0p7gsB8mMb7VRMdgILk.roa (hash: n6iETK+1U2jYxCvuN/hxrmzW6QRPJ6PVi/YnvpAOe54=)
                          2: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: eDwl8+YwqkqoFiES4OTAV/umTu4eQYE2S21VaaesDdA=)
                          3: HOzDSyhci1oqkFYg_HbCSVURV70.roa (hash: nhIbLdZhFO91+DXj7DSINlsbz0bS+HiCo4ktiLJuf1I=)
                          4: HTtaJI7F0HZATXXascx3TmNByxo.roa (hash: d5j76fTLUAV6ovcqXej2UO/z7lwi9LauG77wR6/wZRE=)
                          5: Zc3EPNVFRcdWBGFghDwIYYsiutk.roa (hash: m81UKM1wAmpf9BPJ2gZjuvXEWH2Fd1esmxulacEVZrY=)
                          6: jEK1d3vUN0cIlA-uXNamjthkOwI.roa (hash: 41tF5GEIsjhhQFzZ4Z9ebWeIwUkdNFTY9RSR2SItUCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:2f:0e:b2:72:2b:ae:a4:cb:9c:c6:a1:6a:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Jun 14 04:01:07 2025 GMT
            Not After : Jun 15 04:01:07 2025 GMT
        Subject: CN=114bdbc8bd734963269868de130365d5acacbab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:14:1e:a0:34:1d:61:e2:14:ec:2c:ac:19:
                    f1:a8:91:d2:e4:41:25:8d:8c:eb:80:38:81:6f:8e:
                    81:ab:b3:0b:e3:2d:be:f3:d2:66:f2:2e:2f:3e:eb:
                    93:3a:f6:e0:cb:0f:47:aa:9f:40:cd:f1:61:7b:d4:
                    98:2d:1b:b3:1c:53:4e:d5:48:74:e5:66:91:c8:9f:
                    4e:54:63:67:09:9b:a8:fe:15:0a:13:ae:ae:f0:02:
                    9d:df:d3:bc:de:40:7c:47:94:a0:24:4c:00:5b:a1:
                    ac:04:98:12:58:5e:b0:28:52:61:c5:0c:3e:a3:99:
                    cf:63:b1:c2:dc:dc:91:e3:03:7b:a2:97:c1:74:35:
                    f4:b3:4a:d8:6f:2a:7d:69:3c:8f:c3:0a:f2:79:12:
                    05:d8:b2:d2:4e:f7:54:6b:d9:60:63:fc:13:b4:10:
                    68:fb:87:d4:4f:28:9d:ab:f6:17:c7:80:1f:c2:71:
                    0d:7d:01:60:1a:98:34:2c:70:2f:07:2d:cd:8a:6f:
                    80:9a:64:3c:03:9c:26:cd:9d:54:b9:a7:04:cf:92:
                    41:19:36:43:c7:f1:8c:be:c4:3f:7b:d6:c3:b2:b6:
                    d0:e6:ca:3b:b7:e3:d6:fe:11:a8:3e:b0:9f:6a:a5:
                    e1:2a:ec:6a:46:2c:86:8e:4a:03:b8:61:b7:71:18:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:DB:C8:BD:73:49:63:26:98:68:DE:13:03:65:D5:AC:AC:BA:B7
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:21:70:7d:bc:22:f0:6f:73:91:19:ab:f4:5b:06:54:05:89:
         03:4b:b0:ac:a5:5e:66:0b:7b:44:c7:2c:95:4d:d4:d9:92:01:
         18:55:16:62:03:0d:f7:c4:fd:1b:5d:84:20:38:a3:5a:7a:52:
         77:36:22:03:35:c0:fb:40:32:f1:38:f6:95:6a:59:5d:e9:bc:
         68:57:c3:6e:68:f1:ce:59:06:80:c9:29:64:ae:9b:a9:01:34:
         89:91:f0:6e:cc:34:48:82:08:96:3e:99:d6:74:5e:76:a0:a2:
         b2:20:5d:9a:0f:fd:ad:16:94:b6:ee:d4:b5:2d:41:38:ed:f5:
         c3:68:af:57:73:ab:dc:01:af:8d:ff:56:97:dd:0d:bd:c2:b1:
         3c:d2:95:7d:a4:a5:25:ed:0c:54:9b:5b:13:0f:75:2d:74:b0:
         c1:ff:88:2d:7e:cc:09:8d:a4:b2:f8:83:00:39:e7:77:d3:46:
         2c:42:e2:d3:5e:54:ef:66:c3:63:4e:3c:25:ea:67:32:1b:45:
         4e:32:de:cc:79:0e:5c:4e:c6:5f:96:42:7f:15:d1:cf:80:3f:
         e5:4d:08:e2:b3:c5:1f:1a:18:45:6b:13:b2:5a:1b:a7:36:5a:
         51:be:0c:15:4f:40:98:ee:ec:32:c2:00:91:22:f4:f7:fe:21:
         72:c6:c1:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmS8OsnIrrqTLnMahapceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0
YmIxMzgwHhcNMjUwNjE0MDQwMTA3WhcNMjUwNjE1MDQwMTA3WjAzMTEwLwYDVQQD
EygxMTRiZGJjOGJkNzM0OTYzMjY5ODY4ZGUxMzAzNjVkNWFjYWNiYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOcUHqA0HWHiFOwsrBnxqJHS5EEl
jYzrgDiBb46Bq7ML4y2+89Jm8i4vPuuTOvbgyw9Hqp9AzfFhe9SYLRuzHFNO1Uh0
5WaRyJ9OVGNnCZuo/hUKE66u8AKd39O83kB8R5SgJEwAW6GsBJgSWF6wKFJhxQw+
o5nPY7HC3NyR4wN7opfBdDX0s0rYbyp9aTyPwwryeRIF2LLSTvdUa9lgY/wTtBBo
+4fUTyidq/YXx4AfwnENfQFgGpg0LHAvBy3Nim+AmmQ8A5wmzZ1UuacEz5JBGTZD
x/GMvsQ/e9bDsrbQ5so7t+PW/hGoPrCfaqXhKuxqRiyGjkoDuGG3cRi2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFL28i9c0ljJpho3hMDZdWsrLq3MB8GA1UdIwQY
MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt
NmY2MjFkNzM2YWZmLzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm
LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCFwfbwi
8G9zkRmr9FsGVAWJA0uwrKVeZgt7RMcslU3U2ZIBGFUWYgMN98T9G12EIDijWnpS
dzYiAzXA+0Ay8Tj2lWpZXem8aFfDbmjxzlkGgMkpZK6bqQE0iZHwbsw0SIIIlj6Z
1nRedqCisiBdmg/9rRaUtu7UtS1BOO31w2ivV3Or3AGvjf9Wl90NvcKxPNKVfaSl
Je0MVJtbEw91LXSwwf+ILX7MCY2ksviDADnnd9NGLELi015U72bDY048JepnMhtF
TjLezHkOXE7GX5ZCfxXRz4A/5U0I4rPFHxoYRWsTslobpzZaUb4MFU9AmO7sMsIA
kSL09/4hcsbBoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:24 2025 by rpki-client