Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          fjuwDyKdntVr680w50ZydTEty8joyZcPgwuAdYPmZdM=
Subject key identifier:   69:9F:D2:E0:BF:50:AD:90:84:7B:56:BA:42:A8:50:03:C8:74:DF:E8
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019771514FBB3A9EB5CC2A5D553E0AD895E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1594
Signing time:             Sun 15 Jun 2025 02:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:43 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: vvb1qNfckxXC+rI4+GGGwJ14cL5Sk955HogK4S7MzqA=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:4f:bb:3a:9e:b5:cc:2a:5d:55:3e:0a:d8:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Jun 15 02:00:43 2025 GMT
            Not After : Jun 16 02:00:43 2025 GMT
        Subject: CN=699fd2e0bf50ad90847b56ba42a85003c874dfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:ba:27:1f:4c:f7:08:51:7f:d1:46:ee:f9:
                    50:48:51:0a:f2:5f:9c:c2:06:56:c9:8f:ce:4a:91:
                    a8:7f:bc:01:57:af:7f:a0:32:38:f0:2f:73:01:07:
                    40:48:53:a0:fb:b3:f5:84:53:63:8d:11:d1:53:e7:
                    ae:59:1b:b1:08:39:ef:af:4e:ee:89:f7:7d:fc:dd:
                    4f:45:75:cb:e9:8e:b2:46:4a:c8:8b:4d:d2:fb:10:
                    fd:76:02:e1:02:cc:a4:e5:a5:29:26:34:68:f7:d6:
                    76:53:ce:80:e6:15:85:e0:ad:77:f4:4b:b5:75:8d:
                    69:8d:4a:5b:9f:cd:56:fb:2e:57:6d:ca:6d:a7:d5:
                    25:83:4d:4f:47:39:50:f7:80:95:1e:ea:9d:3f:e3:
                    cd:40:1d:c8:6a:6c:44:07:20:f6:32:cd:78:ae:ff:
                    b7:df:b1:8e:1e:13:5b:fd:2c:6f:bc:1c:a4:67:51:
                    2b:91:3c:6d:bf:2f:0d:f4:17:8d:19:1e:00:71:7f:
                    4b:d5:6c:38:6d:eb:5e:e5:9e:47:93:50:02:92:55:
                    26:02:36:d8:3a:f4:87:00:08:f5:5a:cd:b0:00:db:
                    ba:58:b3:8f:35:58:f8:1c:5f:ad:0c:d0:3f:ca:68:
                    1f:0b:85:2c:75:b1:94:94:b3:56:b2:1d:63:c8:ba:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:D2:E0:BF:50:AD:90:84:7B:56:BA:42:A8:50:03:C8:74:DF:E8
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:d4:73:e7:b5:3a:5d:92:05:ec:3b:f0:23:ee:82:f5:d7:
         af:a5:59:75:e5:6d:a9:76:8b:91:03:93:37:20:51:a2:15:49:
         ba:f0:09:24:5e:12:60:fd:69:7d:be:71:c4:00:26:12:67:35:
         7c:70:07:d7:a6:81:29:7a:e3:68:4d:bb:9c:8a:3f:06:0a:75:
         8c:92:83:33:0b:8e:a7:fa:49:33:8d:87:cf:33:9a:8c:ba:ea:
         73:b6:e0:11:52:f4:43:d7:b4:5a:11:48:21:a8:50:50:9c:62:
         16:66:0e:6c:e1:77:5f:b8:5f:5a:96:4c:44:26:1a:66:66:35:
         3d:30:57:a1:cb:e2:6a:4f:86:bb:2d:eb:12:03:44:f4:15:e2:
         a9:85:c6:a0:fd:c4:dc:40:1a:48:10:98:b5:0a:9f:46:ff:66:
         37:da:9d:05:68:99:f0:08:e6:32:ac:0d:69:b8:f6:77:cd:54:
         04:f0:03:69:5a:f6:13:8b:5b:ce:d3:be:e1:bf:94:60:cb:1d:
         18:da:f3:a9:cf:a6:5b:2c:7b:d7:9c:f5:cb:85:09:64:a3:4d:
         1b:27:d1:08:6b:cf:8d:08:ec:ed:3b:49:ad:4c:f4:aa:c7:16:
         7b:17:a3:13:f8:0b:3a:2e:b7:ba:3a:09:2a:81:8f:3d:6f:d8:
         94:bb:b8:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUU+7Op61zCpdVT4K2JXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjUwNjE1MDIwMDQzWhcNMjUwNjE2MDIwMDQzWjAzMTEwLwYDVQQD
Eyg2OTlmZDJlMGJmNTBhZDkwODQ3YjU2YmE0MmE4NTAwM2M4NzRkZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XS6Jx9M9whRf9FG7vlQSFEK8l+c
wgZWyY/OSpGof7wBV69/oDI48C9zAQdASFOg+7P1hFNjjRHRU+euWRuxCDnvr07u
ifd9/N1PRXXL6Y6yRkrIi03S+xD9dgLhAsyk5aUpJjRo99Z2U86A5hWF4K139Eu1
dY1pjUpbn81W+y5Xbcptp9Ulg01PRzlQ94CVHuqdP+PNQB3IamxEByD2Ms14rv+3
37GOHhNb/SxvvBykZ1ErkTxtvy8N9BeNGR4AcX9L1Ww4bete5Z5Hk1ACklUmAjbY
OvSHAAj1Ws2wANu6WLOPNVj4HF+tDNA/ymgfC4UsdbGUlLNWsh1jyLrQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmf0uC/UK2QhHtWukKoUAPIdN/oMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3zUc+e1
Ol2SBew78CPugvXXr6VZdeVtqXaLkQOTNyBRohVJuvAJJF4SYP1pfb5xxAAmEmc1
fHAH16aBKXrjaE27nIo/Bgp1jJKDMwuOp/pJM42HzzOajLrqc7bgEVL0Q9e0WhFI
IahQUJxiFmYObOF3X7hfWpZMRCYaZmY1PTBXocviak+Guy3rEgNE9BXiqYXGoP3E
3EAaSBCYtQqfRv9mN9qdBWiZ8AjmMqwNabj2d81UBPADaVr2E4tbztO+4b+UYMsd
GNrzqc+mWyx715z1y4UJZKNNGyfRCGvPjQjs7TtJrUz0qscWexejE/gLOi63ujoJ
KoGPPW/YlLu4+g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:02 2025 by rpki-client