Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File:                     7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier:          uwD49IbJa5iWWXXChnnOrldAbN0rurWmPLgDAc2yuRc=
Subject key identifier:   28:A6:5E:21:75:0B:4F:39:F7:A5:8F:F1:8D:4D:C0:6B:72:17:94:A3
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer:       /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial:       01976BBD1C397AD2D8DEDBC228C06EC33DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 00:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:44 +0000
Files and hashes:         1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: MzJKq1cA2oNSTr/BQN+bOoM2wmaN7O0IjsYzfb+x59A=)
                          2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
                          3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:1c:39:7a:d2:d8:de:db:c2:28:c0:6e:c3:3d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
        Validity
            Not Before: Jun 14 00:00:44 2025 GMT
            Not After : Jun 15 00:00:44 2025 GMT
        Subject: CN=28a65e21750b4f39f7a58ff18d4dc06b721794a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:5a:eb:b5:a0:47:08:a5:ff:ad:74:47:5d:
                    79:05:d5:fc:7c:6d:ba:1d:9e:96:3e:e8:67:b0:5d:
                    a2:33:86:30:7b:ac:16:f5:5e:bd:fa:a8:4c:b5:9e:
                    1a:1f:c6:4b:6e:2d:ac:73:e3:3d:9d:86:5d:83:ea:
                    fb:70:7e:52:f1:ef:b8:ba:7f:c7:55:e0:96:0b:ca:
                    41:be:89:29:4a:1d:db:25:0b:11:0c:f8:ec:8c:a9:
                    94:aa:6d:92:f8:7c:56:aa:be:e4:73:6c:5e:dc:52:
                    58:c6:a9:0c:15:7e:9f:ba:0f:65:02:e3:96:ad:c8:
                    3b:4b:f7:09:ee:7a:1a:b0:8b:57:b0:b4:2e:b3:a9:
                    51:4c:7b:39:0c:61:f5:58:ac:94:e4:74:9c:87:e7:
                    dc:02:16:3b:64:c7:fa:d2:90:37:08:cf:1d:3f:13:
                    c4:2a:f3:ef:96:29:9b:06:34:85:72:6b:17:d1:54:
                    dc:44:05:e6:a5:14:b8:66:07:7d:42:43:b5:d6:d6:
                    e9:d9:c7:9e:51:26:e8:1c:11:1b:72:57:a4:2c:16:
                    d7:01:3f:87:26:12:10:8b:28:f4:83:e5:4e:2e:27:
                    f8:24:52:93:4e:0c:8e:27:af:dc:51:23:d3:aa:03:
                    f0:b4:a1:38:c6:24:f9:3a:14:5d:70:ff:af:77:0c:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:5E:21:75:0B:4F:39:F7:A5:8F:F1:8D:4D:C0:6B:72:17:94:A3
            X509v3 Authority Key Identifier:
                keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:42:1e:37:f6:e6:fd:3c:c3:fe:62:bd:42:c7:c2:05:5a:
         0f:98:28:2b:4b:3b:c3:45:fd:a8:d7:80:81:b9:32:06:3c:e9:
         a1:28:53:3b:cb:fa:95:aa:c2:26:f4:3c:23:a8:23:bf:26:c5:
         9f:2c:b5:fe:3f:e9:5a:7b:9d:c0:8e:30:1f:6c:97:34:69:b2:
         b1:29:1e:0a:98:7c:e8:42:87:87:91:e6:f0:93:ef:81:cb:b1:
         bb:ab:e9:97:0f:39:d4:3f:f2:b3:c4:43:94:69:58:96:eb:f2:
         24:d4:48:fa:68:c3:6a:5f:28:ba:1d:02:d4:15:4b:ba:8c:31:
         ec:54:9f:50:a7:50:ae:8c:4e:f1:84:ef:43:22:cf:5a:4d:4e:
         34:c5:67:86:2a:3f:41:cf:fd:c9:67:a7:e8:8c:03:45:de:a7:
         d9:f0:b3:1c:cd:6c:4d:5e:59:f3:53:99:9e:68:32:6a:25:20:
         3a:ef:61:02:bf:42:3b:b0:f1:a8:dd:a3:4a:b6:28:2c:b4:e1:
         cb:99:1d:e5:02:63:a6:f5:39:7a:51:c1:00:eb:f1:20:ae:ec:
         83:2f:41:f8:7d:8a:3d:95:27:72:70:96:52:6c:9d:e3:fb:be:
         df:e3:0d:5e:ed:51:26:bb:a7:30:a0:bd:06:35:1c:1d:3f:77:
         fc:20:71:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvRw5etLY3tvCKMBuwz2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjUwNjE0MDAwMDQ0WhcNMjUwNjE1MDAwMDQ0WjAzMTEwLwYDVQQD
EygyOGE2NWUyMTc1MGI0ZjM5ZjdhNThmZjE4ZDRkYzA2YjcyMTc5NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Va67WgRwil/610R115BdX8fG26
HZ6WPuhnsF2iM4Ywe6wW9V69+qhMtZ4aH8ZLbi2sc+M9nYZdg+r7cH5S8e+4un/H
VeCWC8pBvokpSh3bJQsRDPjsjKmUqm2S+HxWqr7kc2xe3FJYxqkMFX6fug9lAuOW
rcg7S/cJ7noasItXsLQus6lRTHs5DGH1WKyU5HSch+fcAhY7ZMf60pA3CM8dPxPE
KvPvlimbBjSFcmsX0VTcRAXmpRS4Zgd9QkO11tbp2ceeUSboHBEbclekLBbXAT+H
JhIQiyj0g+VOLif4JFKTTgyOJ6/cUSPTqgPwtKE4xiT5OhRdcP+vdwxrZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCimXiF1C08596WP8Y1NwGtyF5SjMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXJCHjf2
5v08w/5ivULHwgVaD5goK0s7w0X9qNeAgbkyBjzpoShTO8v6larCJvQ8I6gjvybF
nyy1/j/pWnudwI4wH2yXNGmysSkeCph86EKHh5Hm8JPvgcuxu6vplw851D/ys8RD
lGlYluvyJNRI+mjDal8ouh0C1BVLuowx7FSfUKdQroxO8YTvQyLPWk1ONMVnhio/
Qc/9yWen6IwDRd6n2fCzHM1sTV5Z81OZnmgyaiUgOu9hAr9CO7DxqN2jSrYoLLTh
y5kd5QJjpvU5elHBAOvxIK7sgy9B+H2KPZUncnCWUmyd4/u+3+MNXu1RJrunMKC9
BjUcHT93/CBxEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:54 2025 by rpki-client