Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File:                     phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier:          BBnjwBjV/5EJ2HBUA9huennECu/OLG+AfKXwSB/q4UM=
Subject key identifier:   7D:C5:E2:E6:96:B4:26:D0:EB:0E:1A:2F:97:85:1E:84:33:45:B7:97
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer:       /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial:       0197790AF6D08F45E9FFBB9E51C4F8EF39AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 14:00:50 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:50 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:50 +0000
Files and hashes:         1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
                          2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
                          3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: 3vHtE6CBGMpxbPxy7CEFtyFUaxxplADm3uTaFgFU1/o=)
                          4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0a:f6:d0:8f:45:e9:ff:bb:9e:51:c4:f8:ef:39:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Jun 16 14:00:50 2025 GMT
            Not After : Jun 17 14:00:50 2025 GMT
        Subject: CN=7dc5e2e696b426d0eb0e1a2f97851e843345b797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:4f:6b:a4:2f:98:e9:f9:6c:3c:76:37:99:
                    88:c1:9c:23:e1:2e:94:06:ae:79:8e:37:70:e9:fd:
                    83:52:5d:06:73:cc:87:41:c6:4b:78:22:2d:c4:a0:
                    9c:d1:65:68:0a:96:39:1d:d8:c4:5c:48:a6:78:69:
                    ac:77:d4:7b:56:96:56:b8:71:bd:ef:0f:6c:b2:17:
                    72:97:c2:62:9a:ad:15:61:16:32:2f:23:b8:5a:48:
                    23:24:89:77:1b:42:95:33:2e:9f:a2:cc:86:1f:c1:
                    60:98:f4:0d:f2:bb:f1:48:ee:e1:0f:0f:07:54:fb:
                    b0:17:1b:da:3c:d8:c7:6a:a7:5e:67:2c:f2:e3:1b:
                    2b:78:c6:fc:e3:77:b9:c6:03:15:b9:6b:46:11:19:
                    2d:2e:dc:92:b3:26:55:2a:e1:80:9a:69:34:ca:55:
                    ba:5d:6c:dd:c0:42:08:c0:9d:13:34:eb:4c:de:12:
                    12:f8:3e:89:df:bd:71:7c:2d:67:b9:74:ec:a7:47:
                    d0:e2:f8:5e:b9:14:3b:01:cc:2f:03:50:dd:31:b4:
                    8b:eb:a5:92:94:42:3a:a2:c6:43:b6:36:60:4e:04:
                    18:b4:9c:0c:c9:4e:3b:57:87:1f:9e:3f:3f:36:da:
                    d0:24:3c:ca:f5:c7:0d:b4:37:c6:80:60:10:f8:b3:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:E2:E6:96:B4:26:D0:EB:0E:1A:2F:97:85:1E:84:33:45:B7:97
            X509v3 Authority Key Identifier:
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:3e:2f:12:39:5f:02:84:f2:42:aa:95:b2:10:f7:28:f4:
         c7:be:38:84:5b:ae:45:b5:99:e7:58:32:ac:6c:d7:a6:89:6a:
         65:d0:22:e6:bd:d9:6c:a7:ea:cf:66:bb:77:10:3d:37:5f:8c:
         18:41:bd:9a:9d:6a:8c:dd:90:ba:f1:a8:99:b2:33:f1:64:db:
         27:1a:40:25:83:41:2f:2d:84:50:dc:7d:31:ae:de:2c:3f:47:
         63:eb:c2:1f:cf:40:90:96:c1:c7:0c:38:18:10:2a:b3:e1:0d:
         20:2b:6d:17:fc:e8:6f:1b:ac:7f:f9:1b:40:f9:c1:11:cb:c7:
         2b:c5:45:c8:e7:1c:e5:ad:db:dc:d0:5e:88:aa:15:77:e2:12:
         71:ba:f8:cb:70:a2:64:1c:e2:8a:32:86:ad:8d:1a:11:5d:ed:
         75:b7:b7:4b:af:71:c0:3b:e7:5c:af:fa:18:6d:88:b4:76:c6:
         a4:32:3f:99:b7:62:d7:61:85:99:46:f1:d0:e1:3e:50:31:37:
         52:89:28:28:87:77:1c:29:8f:45:36:24:ea:7e:a9:99:48:c1:
         aa:6c:02:d3:35:fa:11:d3:92:2d:b8:15:03:22:64:40:df:8e:
         b7:8b:94:17:59:dc:ca:63:3e:0d:23:cf:51:4d:de:cc:61:2b:
         84:1d:08:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5CvbQj0Xp/7ueUcT47zmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx
Zjk2NzYwHhcNMjUwNjE2MTQwMDUwWhcNMjUwNjE3MTQwMDUwWjAzMTEwLwYDVQQD
Eyg3ZGM1ZTJlNjk2YjQyNmQwZWIwZTFhMmY5Nzg1MWU4NDMzNDViNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTxPa6QvmOn5bDx2N5mIwZwj4S6U
Bq55jjdw6f2DUl0Gc8yHQcZLeCItxKCc0WVoCpY5HdjEXEimeGmsd9R7VpZWuHG9
7w9sshdyl8Jimq0VYRYyLyO4WkgjJIl3G0KVMy6fosyGH8FgmPQN8rvxSO7hDw8H
VPuwFxvaPNjHaqdeZyzy4xsreMb843e5xgMVuWtGERktLtySsyZVKuGAmmk0ylW6
XWzdwEIIwJ0TNOtM3hIS+D6J371xfC1nuXTsp0fQ4vheuRQ7AcwvA1DdMbSL66WS
lEI6osZDtjZgTgQYtJwMyU47V4cfnj8/NtrQJDzK9ccNtDfGgGAQ+LPIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3F4uaWtCbQ6w4aL5eFHoQzRbeXMB8GA1UdIwQY
MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt
YWVlYzdhODU5YzU5LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5
LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3M+LxI5
XwKE8kKqlbIQ9yj0x744hFuuRbWZ51gyrGzXpolqZdAi5r3ZbKfqz2a7dxA9N1+M
GEG9mp1qjN2QuvGombIz8WTbJxpAJYNBLy2EUNx9Ma7eLD9HY+vCH89AkJbBxww4
GBAqs+ENICttF/zobxusf/kbQPnBEcvHK8VFyOcc5a3b3NBeiKoVd+IScbr4y3Ci
ZBziijKGrY0aEV3tdbe3S69xwDvnXK/6GG2ItHbGpDI/mbdi12GFmUbx0OE+UDE3
UokoKId3HCmPRTYk6n6pmUjBqmwC0zX6EdOSLbgVAyJkQN+Ot4uUF1ncymM+DSPP
UU3ezGErhB0I8w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:05:23 2025 by rpki-client