Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File:                     pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier:          Nd6RVCZs7RkYJ9uEf53ARnNEfjdhxxXo5s27pa4KEGc=
Subject key identifier:   F0:CF:2A:FE:D7:4A:96:B5:0B:95:AA:12:26:59:2D:16:20:96:83:49
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer:       /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial:       01977677A352C7857CEB991B5D7245E2C96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 02:00:41 +0000
Manifest this update:     Mon 16 Jun 2025 02:00:41 +0000
Manifest next update:     Tue 17 Jun 2025 02:00:41 +0000
Files and hashes:         1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
                          2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: 1y0JRYwks/P9Urk673Zhg8K5kvUFHL+4MJ6nFoMkihw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:77:a3:52:c7:85:7c:eb:99:1b:5d:72:45:e2:c9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
        Validity
            Not Before: Jun 16 02:00:41 2025 GMT
            Not After : Jun 17 02:00:41 2025 GMT
        Subject: CN=f0cf2afed74a96b50b95aa1226592d1620968349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:81:e1:8a:62:4f:a6:33:69:ad:14:c4:df:
                    01:ef:1e:7c:50:1b:85:9a:95:49:fb:2f:c8:78:6d:
                    4d:c4:af:02:03:d6:b3:87:c2:c9:d9:e6:28:f0:8b:
                    42:fe:dc:2c:33:4e:19:1d:f8:1b:63:af:66:e2:dc:
                    af:67:c6:61:3c:7d:f1:4e:0d:fd:5f:b3:b1:8a:1e:
                    10:22:95:db:67:1c:cd:6c:d9:60:73:4f:47:e4:0b:
                    e0:25:2a:a5:a7:8d:1e:da:09:09:0b:82:15:1c:9d:
                    aa:69:61:c4:dc:c7:65:66:56:4a:82:e3:b8:3c:5f:
                    fb:ad:d4:1b:ab:e6:4b:6a:12:a3:c8:a4:98:32:23:
                    9c:72:c9:7f:af:ed:30:50:59:ee:66:40:a5:cf:28:
                    33:7b:80:cf:c9:0f:b9:fa:c8:7b:98:1c:60:fa:e3:
                    a0:c0:b6:d2:44:e4:40:f4:da:c5:cc:ff:ec:86:a5:
                    a2:f9:b7:fb:6a:34:db:10:bd:63:fe:99:10:a7:68:
                    5e:ae:95:47:f1:1e:3e:80:6e:54:0c:5a:9f:29:90:
                    e9:fb:b7:08:c3:75:ca:b8:13:38:05:30:86:f8:8e:
                    6b:49:06:f0:f4:13:93:8a:d8:2b:c8:8f:a0:55:d5:
                    21:c7:bf:7b:a0:b9:da:db:48:76:bb:40:a6:67:0f:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:2A:FE:D7:4A:96:B5:0B:95:AA:12:26:59:2D:16:20:96:83:49
            X509v3 Authority Key Identifier:
                keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:8b:fc:85:df:fa:31:18:f9:ab:b7:25:e3:a6:7a:fd:52:
         f1:c6:50:92:26:d4:5e:d9:e9:55:12:23:99:d2:04:2f:32:de:
         d1:b2:c9:07:a2:e4:15:03:e9:36:92:9e:1d:79:e5:27:a8:59:
         db:5c:5f:50:a1:b7:1d:7e:33:95:55:14:0b:dc:31:ee:cc:72:
         56:4f:fb:1b:05:08:95:5b:69:9c:0c:fe:a2:4c:ec:2c:d8:d0:
         46:50:32:02:31:f9:e2:31:af:ab:28:70:d4:63:7b:be:00:db:
         4b:4f:c8:0c:ad:98:29:e5:ee:81:e7:14:55:3c:6a:51:91:25:
         3b:66:8d:3f:e8:a7:6b:d8:e5:51:02:8d:b8:b8:84:63:5b:3d:
         d1:ce:81:e0:1f:6d:3c:6c:08:ca:03:ef:e9:f3:fc:27:f7:3f:
         a9:b4:fa:10:c9:83:e3:d9:1a:0e:e7:7c:cb:98:68:70:49:e3:
         bc:5f:45:92:fc:e3:01:8d:5b:43:e4:12:cd:68:b9:dd:c6:cb:
         13:7b:da:0d:08:3e:ae:a3:18:02:50:7e:11:33:16:1d:e8:aa:
         0c:f6:ea:bd:d6:62:9f:b6:a8:02:f0:af:81:2f:3c:06:d5:cc:
         90:4e:00:c8:18:49:8f:c6:14:b0:74:76:6a:27:91:be:e6:40:
         27:5c:40:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2d6NSx4V865kbXXJF4slvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OGE4N2M0NWQ5NzIwNDY0OTA1YjZhNmIwOTMzZjdjMzk1
MTE5MmQwHhcNMjUwNjE2MDIwMDQxWhcNMjUwNjE3MDIwMDQxWjAzMTEwLwYDVQQD
EyhmMGNmMmFmZWQ3NGE5NmI1MGI5NWFhMTIyNjU5MmQxNjIwOTY4MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKB4YpiT6Yzaa0UxN8B7x58UBuF
mpVJ+y/IeG1NxK8CA9azh8LJ2eYo8ItC/twsM04ZHfgbY69m4tyvZ8ZhPH3xTg39
X7Oxih4QIpXbZxzNbNlgc09H5AvgJSqlp40e2gkJC4IVHJ2qaWHE3MdlZlZKguO4
PF/7rdQbq+ZLahKjyKSYMiOccsl/r+0wUFnuZkClzygze4DPyQ+5+sh7mBxg+uOg
wLbSRORA9NrFzP/shqWi+bf7ajTbEL1j/pkQp2herpVH8R4+gG5UDFqfKZDp+7cI
w3XKuBM4BTCG+I5rSQbw9BOTitgryI+gVdUhx797oLna20h2u0CmZw/Q2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDPKv7XSpa1C5WqEiZZLRYgloNJMB8GA1UdIwQY
MBaAFKSKh8RdlyBGSQW2prCTP3w5URktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAt
NjgzMzg0YjE5ZWEzLzEvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAtNjgzMzg0YjE5ZWEz
LzEvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOmL/IXf
+jEY+au3JeOmev1S8cZQkibUXtnpVRIjmdIELzLe0bLJB6LkFQPpNpKeHXnlJ6hZ
21xfUKG3HX4zlVUUC9wx7sxyVk/7GwUIlVtpnAz+okzsLNjQRlAyAjH54jGvqyhw
1GN7vgDbS0/IDK2YKeXugecUVTxqUZElO2aNP+ina9jlUQKNuLiEY1s90c6B4B9t
PGwIygPv6fP8J/c/qbT6EMmD49kaDud8y5hocEnjvF9FkvzjAY1bQ+QSzWi53cbL
E3vaDQg+rqMYAlB+ETMWHeiqDPbqvdZin7aoAvCvgS88BtXMkE4AyBhJj8YUsHR2
aieRvuZAJ1xAvg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:09 2025 by rpki-client