Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          cWXIc2wUMAuHggzbbnHiWLbYnTQpXCntRrm55CzyXZo=
Subject key identifier:   50:09:16:40:99:03:ED:B2:AD:A9:9F:AA:62:98:EA:B4:35:37:05:AF
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       01976884D00B26498D9AD52C659403257593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          1595
Signing time:             Fri 13 Jun 2025 09:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:23 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: W/Y6JgukZlxhFFLg58dsmMhBEYNya8ha1wi/BCFX9us=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:d0:0b:26:49:8d:9a:d5:2c:65:94:03:25:75:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: Jun 13 09:00:23 2025 GMT
            Not After : Jun 14 09:00:23 2025 GMT
        Subject: CN=500916409903edb2ada99faa6298eab4353705af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:9f:3e:4a:ed:b0:08:67:41:f8:8c:19:fb:
                    72:10:f7:6e:30:21:4e:50:6a:d3:37:d5:93:6d:39:
                    73:d7:8f:47:e4:d5:ff:01:62:f1:6d:47:a6:73:2b:
                    b3:7b:d4:03:0e:92:33:0d:29:84:91:d2:89:54:1e:
                    6f:f7:ef:8d:86:ce:0d:cf:74:9f:ce:2e:9f:e4:d3:
                    d9:13:10:d3:c3:5c:fb:44:63:9b:fa:f3:0f:09:e9:
                    f4:f8:02:c5:e2:90:23:99:28:24:7a:63:f1:50:89:
                    54:1e:a3:95:ac:e8:4c:cd:7e:35:00:4b:1e:86:6c:
                    b1:63:4d:b9:b1:04:8d:e5:37:cf:94:b2:b6:94:0c:
                    51:1f:1d:2b:32:6d:53:a3:26:8a:31:78:92:01:35:
                    b0:29:cb:1d:98:cd:0a:08:8f:bc:f1:26:b0:6b:4c:
                    d4:00:2e:16:47:d3:92:24:15:ed:29:b4:b9:9d:ea:
                    96:b2:33:42:01:7a:ae:6b:3a:21:cc:20:cc:f8:8d:
                    06:8f:da:73:9c:87:5e:5d:4b:e6:84:da:a0:c5:6a:
                    2e:d1:7e:f5:01:1c:7f:ec:05:a2:f4:d5:b9:a1:fe:
                    5d:fa:a7:dd:b2:75:00:27:a0:af:15:c9:86:0c:82:
                    d7:88:6d:9a:29:7b:50:ad:24:47:eb:a4:5e:e4:3d:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:09:16:40:99:03:ED:B2:AD:A9:9F:AA:62:98:EA:B4:35:37:05:AF
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:5b:85:94:0e:c5:26:79:e2:97:6e:a9:0c:e8:18:48:aa:fe:
         59:85:20:ab:a5:84:0b:b7:fe:31:41:ea:a8:7d:95:6c:0f:fb:
         03:a2:01:53:9a:90:09:69:00:24:c0:44:7a:04:68:f6:8b:7e:
         81:86:3b:66:e3:67:3e:46:ea:59:51:bf:04:86:2b:9b:27:3d:
         91:f2:23:ee:61:d1:b8:92:fd:ff:f8:8c:e3:b2:35:1a:24:fd:
         58:5e:9b:5d:be:87:c6:08:74:38:ce:de:72:da:ba:f3:79:8f:
         26:fe:bf:cd:db:f0:86:49:ef:03:62:88:54:2a:cc:ee:73:df:
         26:17:29:51:f9:5e:27:d2:81:53:7f:40:3a:03:f2:e1:18:cd:
         23:e7:8d:d2:82:23:f6:07:bf:0a:d4:dc:c9:38:3f:b5:ca:f9:
         23:37:f9:0f:2e:09:98:ea:24:89:de:4f:b4:12:83:c6:23:26:
         c6:e7:c3:9a:9d:64:d0:84:6c:d8:e9:4b:90:5b:a1:61:f6:a5:
         31:98:ad:88:d5:97:63:2b:3f:eb:67:8e:5a:4e:8a:1a:3a:2e:
         9f:ed:21:fe:fa:2d:3e:17:0e:19:20:95:78:33:ca:45:fb:39:
         87:e4:fd:01:1a:6f:a4:4a:d0:84:57:45:66:60:e0:aa:52:f6:
         35:58:67:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohNALJkmNmtUsZZQDJXWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjk4NmM3NzA1YmQ4MDhjMWIwMmViZDc1NGZiZmE5MTgw
N2U5YjYwHhcNMjUwNjEzMDkwMDIzWhcNMjUwNjE0MDkwMDIzWjAzMTEwLwYDVQQD
Eyg1MDA5MTY0MDk5MDNlZGIyYWRhOTlmYWE2Mjk4ZWFiNDM1MzcwNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdyfPkrtsAhnQfiMGftyEPduMCFO
UGrTN9WTbTlz149H5NX/AWLxbUemcyuze9QDDpIzDSmEkdKJVB5v9++Nhs4Nz3Sf
zi6f5NPZExDTw1z7RGOb+vMPCen0+ALF4pAjmSgkemPxUIlUHqOVrOhMzX41AEse
hmyxY025sQSN5TfPlLK2lAxRHx0rMm1ToyaKMXiSATWwKcsdmM0KCI+88Sawa0zU
AC4WR9OSJBXtKbS5neqWsjNCAXquazohzCDM+I0Gj9pznIdeXUvmhNqgxWou0X71
ARx/7AWi9NW5of5d+qfdsnUAJ6CvFcmGDILXiG2aKXtQrSRH66Re5D1VbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAJFkCZA+2yramfqmKY6rQ1NwWvMB8GA1UdIwQY
MBaAFHP5hsdwW9gIwbAuvXVPv6kYB+m2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEt
OWExMjk1ZjAyZjJlLzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEtOWExMjk1ZjAyZjJl
LzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3FuFlA7F
Jnnil26pDOgYSKr+WYUgq6WEC7f+MUHqqH2VbA/7A6IBU5qQCWkAJMBEegRo9ot+
gYY7ZuNnPkbqWVG/BIYrmyc9kfIj7mHRuJL9//iM47I1GiT9WF6bXb6Hxgh0OM7e
ctq683mPJv6/zdvwhknvA2KIVCrM7nPfJhcpUfleJ9KBU39AOgPy4RjNI+eN0oIj
9ge/CtTcyTg/tcr5Izf5Dy4JmOokid5PtBKDxiMmxufDmp1k0IRs2OlLkFuhYfal
MZitiNWXYys/62eOWk6KGjoun+0h/votPhcOGSCVeDPKRfs5h+T9ARpvpErQhFdF
ZmDgqlL2NVhn/g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client