Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          JvR3YJG7NLtE5oLsPEWr6SAkPdOXNvEDaB96qDBTYiQ=
Subject key identifier:   68:6F:41:0D:40:80:27:3E:A1:76:60:1D:D5:BD:9C:89:8D:81:5D:C2
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       019779419225C5C826313FDDF59FED144DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          1593
Signing time:             Mon 16 Jun 2025 15:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:29 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: w5BqHKR/jhW6XRNqws2DVP3FgJLc86AUaIrEOZf47LY=)
                          2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:92:25:c5:c8:26:31:3f:dd:f5:9f:ed:14:4d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Jun 16 15:00:29 2025 GMT
            Not After : Jun 17 15:00:29 2025 GMT
        Subject: CN=686f410d4080273ea176601dd5bd9c898d815dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:e9:47:c6:77:45:26:bb:69:f6:0c:8a:62:
                    09:a6:f1:b1:80:6b:ef:f5:a0:74:15:b9:f0:e6:62:
                    cc:91:7f:bc:17:6e:f1:48:0f:de:e4:70:01:84:23:
                    77:cb:f3:5a:f0:ed:8a:38:4c:de:81:00:6f:ae:ad:
                    7d:20:bb:67:6a:0d:89:d8:23:6f:23:93:f1:da:75:
                    1b:5d:61:b2:19:6e:f3:88:26:aa:4a:c2:a8:00:51:
                    44:3e:72:f5:4a:4a:bc:79:64:1b:e1:81:8a:26:6b:
                    d4:9e:ee:a9:84:fd:4d:08:be:63:2d:20:76:68:12:
                    85:96:62:d2:0f:66:67:9d:3f:09:6f:41:1c:6d:68:
                    43:d0:19:1c:1d:4f:6f:6a:f1:c2:02:fc:60:d6:6f:
                    78:57:eb:0e:fb:df:90:0b:3a:cc:ff:79:b2:82:4a:
                    2b:20:0c:48:46:d5:43:45:0e:0b:a1:db:19:c9:3c:
                    64:8f:2b:cd:be:c4:b1:74:87:c8:0f:79:28:f9:83:
                    6a:a7:de:72:31:08:de:b6:8e:aa:41:78:b9:ab:a9:
                    32:b5:fe:61:b8:56:1a:8a:e1:a7:23:5b:61:aa:dd:
                    4c:1d:4b:ea:29:65:43:51:c6:72:1d:e2:8b:3b:26:
                    9d:b0:63:7c:96:ab:a7:64:48:20:4f:8b:15:9d:43:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:41:0D:40:80:27:3E:A1:76:60:1D:D5:BD:9C:89:8D:81:5D:C2
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:44:3b:14:aa:b6:15:d8:89:38:f5:6f:39:72:67:b1:87:e8:
         53:db:28:44:10:8f:b5:65:94:b0:e6:31:f9:1e:12:66:38:f8:
         76:79:8a:84:2b:64:6a:84:29:63:9b:54:af:33:6d:14:9b:8b:
         bb:4b:14:8a:87:97:c8:dd:67:78:69:f0:4d:ea:fe:ff:d0:0f:
         7f:90:4f:d6:5f:6b:86:5e:c6:da:7f:a3:0c:90:9a:cf:10:0e:
         7b:c8:77:f8:4e:f1:f7:06:9f:c2:07:da:8f:aa:30:33:2b:a4:
         7c:53:03:21:71:0d:6f:c1:54:df:11:2d:89:7a:63:b2:24:b0:
         4b:f4:d7:f7:35:49:41:dc:89:7b:b4:bf:77:eb:77:0b:45:72:
         2c:0e:ee:5e:5d:e7:9a:fc:ab:e4:63:23:61:92:4a:e3:80:ae:
         d7:2d:a1:45:03:e2:f4:1f:c1:70:e6:d6:f7:f3:22:66:c6:01:
         81:61:b9:d6:a1:31:d4:d8:3d:ad:d3:6a:e4:4e:36:36:be:87:
         d9:3e:16:cd:06:14:02:f5:04:c3:8f:84:49:08:25:4e:ba:85:
         e0:25:8d:bd:9b:ca:21:23:11:20:15:a5:c2:a8:b6:2e:2b:16:
         ed:63:57:c7:10:d0:c7:fa:86:f3:d4:1f:47:ec:79:ba:84:53:
         43:8b:1d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QZIlxcgmMT/d9Z/tFE3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm
ZmYxOTAwHhcNMjUwNjE2MTUwMDI5WhcNMjUwNjE3MTUwMDI5WjAzMTEwLwYDVQQD
Eyg2ODZmNDEwZDQwODAyNzNlYTE3NjYwMWRkNWJkOWM4OThkODE1ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYHpR8Z3RSa7afYMimIJpvGxgGvv
9aB0Fbnw5mLMkX+8F27xSA/e5HABhCN3y/Na8O2KOEzegQBvrq19ILtnag2J2CNv
I5Px2nUbXWGyGW7ziCaqSsKoAFFEPnL1Skq8eWQb4YGKJmvUnu6phP1NCL5jLSB2
aBKFlmLSD2ZnnT8Jb0EcbWhD0BkcHU9vavHCAvxg1m94V+sO+9+QCzrM/3mygkor
IAxIRtVDRQ4LodsZyTxkjyvNvsSxdIfID3ko+YNqp95yMQjeto6qQXi5q6kytf5h
uFYaiuGnI1thqt1MHUvqKWVDUcZyHeKLOyadsGN8lqunZEggT4sVnUMI1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhvQQ1AgCc+oXZgHdW9nImNgV3CMB8GA1UdIwQY
MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt
NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1
LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEQ7FKq2
FdiJOPVvOXJnsYfoU9soRBCPtWWUsOYx+R4SZjj4dnmKhCtkaoQpY5tUrzNtFJuL
u0sUioeXyN1neGnwTer+/9APf5BP1l9rhl7G2n+jDJCazxAOe8h3+E7x9wafwgfa
j6owMyukfFMDIXENb8FU3xEtiXpjsiSwS/TX9zVJQdyJe7S/d+t3C0VyLA7uXl3n
mvyr5GMjYZJK44Cu1y2hRQPi9B/BcObW9/MiZsYBgWG51qEx1Ng9rdNq5E42Nr6H
2T4WzQYUAvUEw4+ESQglTrqF4CWNvZvKISMRIBWlwqi2LisW7WNXxxDQx/qG89Qf
R+x5uoRTQ4sd0w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:30:57 2025 by rpki-client