Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File:                     CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier:          sEi6ls42IyxJyOuhgxDZB99r9yUW2jzU86+6dNpTjkQ=
Subject key identifier:   B3:E1:34:45:91:23:16:A9:70:06:3E:3F:0F:9F:08:D2:B6:2E:EE:F5
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer:       /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial:       01976C2AE54B11F68DB73770DCB0FA22F26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 02:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:39 +0000
Files and hashes:         1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: ckDOOU9uoaFD2DvP/d808J0F6F827lWs8eeCiBCFJzc=)
                          2: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:e5:4b:11:f6:8d:b7:37:70:dc:b0:fa:22:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
        Validity
            Not Before: Jun 14 02:00:39 2025 GMT
            Not After : Jun 15 02:00:39 2025 GMT
        Subject: CN=b3e13445912316a970063e3f0f9f08d2b62eeef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:e4:14:58:b4:21:aa:19:1e:cf:3d:70:ca:
                    61:dd:13:47:f4:ab:1a:e4:2b:56:34:55:66:73:cf:
                    15:fd:36:5b:14:da:b7:0f:45:e8:41:48:8e:96:02:
                    38:88:03:7f:7f:7c:75:90:35:88:74:2b:72:a7:6a:
                    a5:b9:fb:5f:c2:f5:61:3d:3d:dc:8d:10:26:1c:7b:
                    f6:21:cf:36:3f:1e:c9:18:f7:28:53:b5:6b:0b:47:
                    1d:b1:a5:15:51:cd:b1:08:19:2f:c5:9b:c4:66:b3:
                    a0:c8:09:79:aa:81:0b:69:d3:81:4d:5a:fd:0d:81:
                    e4:58:6a:57:2f:1f:83:2f:7f:19:c0:4c:af:c0:9c:
                    06:69:39:1a:b5:c7:4d:a8:58:b4:e5:ef:9f:d7:a3:
                    23:74:ed:30:fd:f5:ea:7e:ad:b3:af:17:93:ea:6e:
                    d4:c1:8c:9e:0c:11:cf:5e:71:94:9b:6d:4c:ca:c5:
                    a8:c9:d2:d4:25:52:fc:ed:c2:28:d0:e8:00:25:a4:
                    6e:c0:9a:91:31:3f:ad:53:e3:cf:70:44:6c:a2:12:
                    7f:f0:9d:54:24:8b:58:f2:08:54:46:be:70:04:e2:
                    79:77:3e:4a:82:e9:24:96:bc:f5:75:f3:df:89:76:
                    c1:3a:de:2a:e4:29:f0:76:26:ab:b7:6c:b3:45:4e:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E1:34:45:91:23:16:A9:70:06:3E:3F:0F:9F:08:D2:B6:2E:EE:F5
            X509v3 Authority Key Identifier:
                keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:d9:08:9e:c6:cb:82:c0:81:3a:98:4f:1b:1e:3f:85:45:
         a4:75:6a:59:3a:3c:ae:7a:64:c0:23:62:29:01:0c:78:2b:21:
         08:9f:13:b6:02:e7:5b:69:26:8c:da:7e:a6:a3:d9:37:b5:8f:
         56:75:72:01:41:9b:c7:1b:dd:db:f7:3a:48:13:97:8f:6d:15:
         8f:da:ed:be:01:12:2c:60:82:63:97:e8:ea:7e:ca:29:dc:e7:
         d7:1c:79:d8:f6:72:25:e1:c5:c6:2d:95:02:4e:3c:4b:4d:80:
         8d:27:09:70:f7:fd:44:ae:a8:95:c7:e6:8f:0b:5c:b2:07:47:
         05:50:22:d2:c7:f0:27:7f:eb:24:ed:7d:4f:0a:70:e1:49:2a:
         3d:2d:d6:91:2d:98:e0:71:11:d0:8d:b5:2e:fb:62:d5:c9:6f:
         14:94:30:e4:7d:56:a6:8c:8e:f1:09:3f:2e:4b:cd:f6:65:7d:
         9a:94:d1:9b:cd:ef:b1:70:36:4b:4a:90:1c:61:db:16:54:17:
         49:0c:ec:1c:a1:ed:47:48:a9:9e:8e:f9:86:74:f3:f6:13:f1:
         06:dc:fd:07:ce:c7:90:e6:6a:2f:f9:64:c5:95:17:69:4a:53:
         8b:01:ce:37:a5:1e:f4:21:14:c0:91:ff:ee:1b:a9:5f:88:be:
         a3:80:de:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKuVLEfaNtzdw3LD6IvJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3
MWFiZjUwHhcNMjUwNjE0MDIwMDM5WhcNMjUwNjE1MDIwMDM5WjAzMTEwLwYDVQQD
EyhiM2UxMzQ0NTkxMjMxNmE5NzAwNjNlM2YwZjlmMDhkMmI2MmVlZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK/kFFi0IaoZHs89cMph3RNH9Ksa
5CtWNFVmc88V/TZbFNq3D0XoQUiOlgI4iAN/f3x1kDWIdCtyp2qluftfwvVhPT3c
jRAmHHv2Ic82Px7JGPcoU7VrC0cdsaUVUc2xCBkvxZvEZrOgyAl5qoELadOBTVr9
DYHkWGpXLx+DL38ZwEyvwJwGaTkatcdNqFi05e+f16MjdO0w/fXqfq2zrxeT6m7U
wYyeDBHPXnGUm21MysWoydLUJVL87cIo0OgAJaRuwJqRMT+tU+PPcERsohJ/8J1U
JItY8ghURr5wBOJ5dz5Kgukklrz1dfPfiXbBOt4q5Cnwdiart2yzRU6ddQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPhNEWRIxapcAY+Pw+fCNK2Lu71MB8GA1UdIwQY
MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt
NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2
LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK63ZCJ7G
y4LAgTqYTxseP4VFpHVqWTo8rnpkwCNiKQEMeCshCJ8TtgLnW2kmjNp+pqPZN7WP
VnVyAUGbxxvd2/c6SBOXj20Vj9rtvgESLGCCY5fo6n7KKdzn1xx52PZyJeHFxi2V
Ak48S02AjScJcPf9RK6olcfmjwtcsgdHBVAi0sfwJ3/rJO19Twpw4UkqPS3WkS2Y
4HER0I21Lvti1clvFJQw5H1WpoyO8Qk/LkvN9mV9mpTRm83vsXA2S0qQHGHbFlQX
SQzsHKHtR0ipno75hnTz9hPxBtz9B87HkOZqL/lkxZUXaUpTiwHON6Ue9CEUwJH/
7hupX4i+o4DeMw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:30 2025 by rpki-client