Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          QisVFXbspfPa2EVWhPPapK+YLYuqxoHpZzn6SDal1aU=
Subject key identifier:   F8:D6:F4:5B:E2:24:06:A8:54:51:91:68:5C:33:D1:4E:85:98:BD:21
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       0197703EEA818E6028CDDAAF5BDD71A76719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 21:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:00 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: yM5+CaqEym2OHLrqM1VLlsKUWtQXO5cuDE0w8mFQQxk=)
                          2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:ea:81:8e:60:28:cd:da:af:5b:dd:71:a7:67:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Jun 14 21:01:00 2025 GMT
            Not After : Jun 15 21:01:00 2025 GMT
        Subject: CN=f8d6f45be22406a8545191685c33d14e8598bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:47:17:37:8e:40:25:2a:fa:91:88:d2:b3:
                    72:20:90:c5:50:ed:73:99:56:4d:dd:43:55:0a:49:
                    b8:32:d0:6d:01:29:68:79:f3:ac:c9:c3:0c:54:8e:
                    c0:a2:fc:02:4c:14:07:e3:37:83:39:13:50:dc:07:
                    ad:ca:ce:ff:3a:af:09:65:16:99:09:33:59:5d:c7:
                    ec:55:0f:d4:31:a3:74:ee:d0:f8:53:7c:07:a7:2f:
                    69:82:35:db:ac:97:05:b4:e3:47:bf:e7:17:03:18:
                    35:7a:37:1a:c3:2e:24:45:d7:bb:79:e0:c8:1c:f1:
                    c8:cf:43:db:48:99:24:e4:0b:05:34:c4:4c:09:39:
                    f8:10:5d:f5:36:b0:7e:c8:1d:74:ac:97:ed:92:4c:
                    c4:f3:7d:be:f8:70:6d:48:a5:43:67:98:b0:9a:ee:
                    75:1e:99:10:0e:a8:b4:0a:f8:54:61:75:1e:cb:6c:
                    ca:cc:cc:ed:b2:2b:d3:cd:f8:fd:40:e5:80:ee:a1:
                    f6:98:ef:b0:94:81:da:58:26:72:2f:a9:b7:2d:20:
                    84:3f:c9:af:3c:9e:63:df:2d:1b:88:4e:7c:9b:0f:
                    a2:c9:57:7c:5a:e2:78:b8:34:95:0c:e7:2f:02:65:
                    1b:5a:40:fe:a3:49:96:58:29:c5:5b:b5:16:7f:c6:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:F4:5B:E2:24:06:A8:54:51:91:68:5C:33:D1:4E:85:98:BD:21
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:12:13:2a:fc:a1:00:bc:19:b6:f0:22:71:7c:91:5a:94:d7:
         69:4b:11:41:a6:d4:18:d5:40:cf:73:91:92:86:b4:49:2a:06:
         76:15:d4:2e:e3:58:97:57:a2:78:0d:82:84:41:7a:a4:b6:93:
         c3:43:69:89:47:dd:02:59:9a:a9:a6:e1:e7:0d:ef:fe:bc:e0:
         3c:b8:d0:ad:a1:d9:06:e2:3c:9a:5d:73:13:19:48:1c:ca:c3:
         b3:48:b6:e4:84:c2:2a:14:30:e1:5c:d0:f2:f8:b2:16:78:4f:
         8f:91:3e:96:79:e5:00:fb:c8:f9:e2:0c:d5:9d:55:d9:47:08:
         46:3a:90:13:54:d8:65:5f:e8:f5:bb:16:e9:6e:1c:e3:9e:01:
         6b:a1:e1:62:3d:70:bd:09:27:e4:30:83:65:85:22:0f:cf:67:
         1f:2e:e9:db:f5:73:1c:f6:4c:d3:1f:f0:ad:20:8b:32:ca:81:
         7f:6c:2d:df:b5:c5:f5:8c:dd:b6:0f:cd:d7:75:c4:b1:cd:7f:
         85:82:71:fd:5f:7f:5e:9f:da:18:e1:38:e4:e9:e5:c4:e2:95:
         f9:c2:20:79:01:8c:8b:9b:02:d8:47:e1:c9:9d:4c:f1:fb:cf:
         e7:fc:b7:08:b1:ee:bb:59:c6:96:b3:5a:12:5f:ae:bc:83:af:
         78:13:e2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPuqBjmAozdqvW91xp2cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjUwNjE0MjEwMTAwWhcNMjUwNjE1MjEwMTAwWjAzMTEwLwYDVQQD
EyhmOGQ2ZjQ1YmUyMjQwNmE4NTQ1MTkxNjg1YzMzZDE0ZTg1OThiZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VHFzeOQCUq+pGI0rNyIJDFUO1z
mVZN3UNVCkm4MtBtASloefOsycMMVI7AovwCTBQH4zeDORNQ3Aetys7/Oq8JZRaZ
CTNZXcfsVQ/UMaN07tD4U3wHpy9pgjXbrJcFtONHv+cXAxg1ejcawy4kRde7eeDI
HPHIz0PbSJkk5AsFNMRMCTn4EF31NrB+yB10rJftkkzE832++HBtSKVDZ5iwmu51
HpkQDqi0CvhUYXUey2zKzMztsivTzfj9QOWA7qH2mO+wlIHaWCZyL6m3LSCEP8mv
PJ5j3y0biE58mw+iyVd8WuJ4uDSVDOcvAmUbWkD+o0mWWCnFW7UWf8Z8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjW9FviJAaoVFGRaFwz0U6FmL0hMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRITKvyh
ALwZtvAicXyRWpTXaUsRQabUGNVAz3ORkoa0SSoGdhXULuNYl1eieA2ChEF6pLaT
w0NpiUfdAlmaqabh5w3v/rzgPLjQraHZBuI8ml1zExlIHMrDs0i25ITCKhQw4VzQ
8viyFnhPj5E+lnnlAPvI+eIM1Z1V2UcIRjqQE1TYZV/o9bsW6W4c454Ba6HhYj1w
vQkn5DCDZYUiD89nHy7p2/VzHPZM0x/wrSCLMsqBf2wt37XF9Yzdtg/N13XEsc1/
hYJx/V9/Xp/aGOE45OnlxOKV+cIgeQGMi5sC2EfhyZ1M8fvP5/y3CLHuu1nGlrNa
El+uvIOveBPieQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:23 2025 by rpki-client