Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          7ILn/7/dsDJYMLKbsKMw+p1FizeWEeSWDYwmyjgerJw=
Subject key identifier:   7D:48:65:37:A7:AB:8A:55:34:2C:16:95:F8:20:4F:3F:3F:01:7E:B5
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       01976D06E7F55F023F4AC064557E16E2DB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:58 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: fOby4Cxq3h5kq+7VmmmItMe40Z6OMNytmFFIrOObWbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:e7:f5:5f:02:3f:4a:c0:64:55:7e:16:e2:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Jun 14 06:00:58 2025 GMT
            Not After : Jun 15 06:00:58 2025 GMT
        Subject: CN=7d486537a7ab8a55342c1695f8204f3f3f017eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:d2:ec:3d:9b:63:0e:26:25:1d:83:9e:a4:
                    a1:2c:e1:c9:4b:bf:c2:1f:80:5c:8b:ed:f6:94:b4:
                    87:e8:c6:9e:12:c2:05:c6:8a:11:bd:68:d5:49:05:
                    22:96:b5:7b:78:23:d6:85:6e:ee:ed:95:a0:ea:5b:
                    77:c1:57:d2:a8:46:ee:ae:f0:f8:ff:b2:76:91:ca:
                    d3:7b:79:22:0b:2a:d8:5c:48:d7:f8:fd:ca:50:3e:
                    86:39:8b:72:79:a3:6e:43:b0:2e:36:38:70:9c:cf:
                    9e:0e:55:38:59:c1:82:fc:fb:60:7c:0a:38:67:f0:
                    a8:09:2a:3d:a0:41:4b:81:1e:f0:bf:c6:85:ad:2a:
                    e3:cd:c3:fe:01:58:15:2f:7c:6f:9d:12:b0:cb:cd:
                    dc:fa:d9:8e:22:2f:61:1f:6f:3c:f1:6c:fd:8b:f2:
                    48:f8:d3:9e:91:02:4b:55:ec:98:fd:0c:8e:c9:52:
                    67:97:e7:d4:e3:3b:42:a3:43:3b:6f:dd:da:b2:43:
                    84:0f:c6:83:14:77:93:2b:18:95:7f:7c:e4:64:2e:
                    2e:e7:99:7b:a3:13:02:bb:a4:9d:75:2a:52:ac:96:
                    f2:66:06:c0:a9:d8:9c:b2:4c:d6:ff:5f:01:3f:94:
                    7e:cf:42:aa:b9:4f:1c:f2:31:9a:32:c9:24:67:fd:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:65:37:A7:AB:8A:55:34:2C:16:95:F8:20:4F:3F:3F:01:7E:B5
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:e0:04:ed:72:56:71:9c:f9:72:0c:8b:0e:1f:f7:1d:5a:
         90:6c:9e:0b:9e:d1:3c:5c:99:2d:f0:58:59:d9:aa:0e:cd:cc:
         31:f2:b9:31:e7:78:89:89:0a:3c:69:2f:cf:76:d5:f2:3c:5c:
         fd:c3:46:42:be:2a:af:7a:cc:c0:a7:11:37:d3:88:04:30:82:
         09:14:98:21:d2:41:63:98:d2:8d:e4:0f:31:c6:b7:d3:90:f2:
         bf:f9:e0:24:cf:33:ab:18:78:f8:47:3b:a9:49:6f:31:57:a8:
         36:23:c2:48:1d:05:25:b3:78:95:cd:d7:62:3f:6e:5d:d2:ab:
         bb:4a:ca:78:78:2e:00:79:af:6e:16:35:74:d5:2d:56:53:2d:
         df:8b:15:70:1c:f0:31:a0:3d:b4:5c:04:e3:ab:2b:af:0a:2a:
         e2:3d:b7:3a:f2:33:81:37:c8:00:7f:e2:10:1b:11:8f:9d:dd:
         a6:70:06:6c:33:d9:ac:e1:62:22:5b:35:88:fe:ee:3e:de:20:
         7f:3f:07:f9:a0:b8:08:87:66:e6:d2:2f:ab:43:12:ec:05:c5:
         d6:55:8e:e5:54:ef:b6:0d:8f:66:b6:6a:88:b5:2c:83:b8:dc:
         c9:96:23:f9:27:8c:c2:2e:47:94:26:60:51:4a:17:cd:2e:ea:
         d6:c9:72:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBuf1XwI/SsBkVX4W4ttIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OWVhM2IxZTU4YmEwNjBiNDFmYzJhMDc4ZjYwMTYyNjQ3
NTk2NjQwHhcNMjUwNjE0MDYwMDU4WhcNMjUwNjE1MDYwMDU4WjAzMTEwLwYDVQQD
Eyg3ZDQ4NjUzN2E3YWI4YTU1MzQyYzE2OTVmODIwNGYzZjNmMDE3ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqrS7D2bYw4mJR2DnqShLOHJS7/C
H4Bci+32lLSH6MaeEsIFxooRvWjVSQUilrV7eCPWhW7u7ZWg6lt3wVfSqEburvD4
/7J2kcrTe3kiCyrYXEjX+P3KUD6GOYtyeaNuQ7AuNjhwnM+eDlU4WcGC/PtgfAo4
Z/CoCSo9oEFLgR7wv8aFrSrjzcP+AVgVL3xvnRKwy83c+tmOIi9hH2888Wz9i/JI
+NOekQJLVeyY/QyOyVJnl+fU4ztCo0M7b93askOED8aDFHeTKxiVf3zkZC4u55l7
oxMCu6SddSpSrJbyZgbAqdicskzW/18BP5R+z0KquU8c8jGaMskkZ/2MsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1IZTenq4pVNCwWlfggTz8/AX61MB8GA1UdIwQY
MBaAFHSeo7Hli6BgtB/CoHj2AWJkdZZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQt
MmY0MjQyYTEzZDAwLzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQtMmY0MjQyYTEzZDAw
LzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6fgBO1y
VnGc+XIMiw4f9x1akGyeC57RPFyZLfBYWdmqDs3MMfK5Med4iYkKPGkvz3bV8jxc
/cNGQr4qr3rMwKcRN9OIBDCCCRSYIdJBY5jSjeQPMca305Dyv/ngJM8zqxh4+Ec7
qUlvMVeoNiPCSB0FJbN4lc3XYj9uXdKru0rKeHguAHmvbhY1dNUtVlMt34sVcBzw
MaA9tFwE46srrwoq4j23OvIzgTfIAH/iEBsRj53dpnAGbDPZrOFiIls1iP7uPt4g
fz8H+aC4CIdm5tIvq0MS7AXF1lWO5VTvtg2PZrZqiLUsg7jcyZYj+SeMwi5HlCZg
UUoXzS7q1slyiA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:04 2025 by rpki-client