Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          LCfBuGNur3XKBT3Ca40nqXRbiDHwaQrQRKkkct0NEsY=
Subject key identifier:   45:A2:D7:96:8B:98:42:D2:32:FC:99:BF:F0:69:E1:DF:82:84:70:BC
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       019771518BAFA33D80F60A05DA3E074E4E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          1595
Signing time:             Sun 15 Jun 2025 02:00:58 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:58 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:58 +0000
Files and hashes:         1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: b/aDwV0c5l8O4pCrwXZSCrDhFgcNjT8p7ECmH27kQEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:8b:af:a3:3d:80:f6:0a:05:da:3e:07:4e:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Jun 15 02:00:58 2025 GMT
            Not After : Jun 16 02:00:58 2025 GMT
        Subject: CN=45a2d7968b9842d232fc99bff069e1df828470bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:27:17:58:55:e9:f1:76:f0:99:77:9f:10:
                    5d:e1:37:30:77:d9:76:e5:d7:7c:07:10:b6:24:94:
                    dc:c9:c0:04:51:0b:4d:4e:4d:f0:8e:eb:b8:04:7d:
                    03:3f:0b:4c:05:53:0f:ea:67:96:2a:3d:63:17:e1:
                    3e:88:a0:ca:cb:2c:21:47:fa:69:5a:9b:33:e1:e3:
                    f6:a5:83:52:aa:3f:ca:e2:90:62:78:75:a3:b4:cc:
                    6f:85:5a:03:18:9f:d2:84:ea:81:14:c1:9f:2f:aa:
                    37:72:9c:62:13:9e:36:f1:6e:d7:01:85:dd:86:c4:
                    d2:ec:66:7c:c2:3c:c1:d3:ff:05:3b:72:5c:65:73:
                    d9:fb:cf:03:dc:05:3a:c0:1e:f4:d5:77:32:4b:91:
                    4b:d8:16:91:69:3b:3a:9e:8b:cc:3c:74:ed:f1:c5:
                    1c:ab:c4:5b:24:df:94:22:eb:ae:ff:11:4b:1f:41:
                    5a:dd:77:db:05:4e:94:20:92:e8:68:96:e7:3c:94:
                    d9:20:aa:26:9b:c8:9d:f8:e7:39:78:aa:f6:e4:5f:
                    c0:de:56:cb:af:3b:21:50:ad:d8:af:ae:9b:09:1a:
                    83:2c:fe:1b:cf:d0:43:ba:3c:03:b0:ea:8c:26:a6:
                    43:d1:52:45:73:fd:98:0b:f0:b5:9c:f5:a0:2b:de:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:D7:96:8B:98:42:D2:32:FC:99:BF:F0:69:E1:DF:82:84:70:BC
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:48:f8:83:fb:0e:73:8c:98:19:f8:83:dc:d2:02:2b:c9:
         eb:b7:ab:f8:b8:45:33:58:bc:fb:c0:d9:da:bf:71:5b:26:75:
         75:43:97:a1:fd:7d:a7:82:65:85:c6:51:5b:1d:b6:8a:43:02:
         6e:66:e2:7b:31:8a:07:7b:e6:7a:d2:43:9a:67:2f:ed:78:7f:
         80:81:67:a4:c5:96:41:6a:e9:a7:aa:d0:0c:14:80:ad:7e:a4:
         9a:70:21:ff:72:69:72:a4:d6:04:4e:de:32:98:e0:46:e2:ec:
         57:4f:99:c5:46:57:27:29:f7:a6:4b:18:34:95:b1:3f:bc:da:
         98:ce:2f:c6:12:59:88:a3:b2:fc:8f:2b:79:ca:02:62:14:62:
         8d:b4:c5:b8:91:0d:d9:93:a0:bb:50:07:32:9a:64:a6:b3:2f:
         b6:90:67:19:b0:32:b4:85:1e:79:ae:bb:b2:eb:08:e6:9e:d0:
         20:f4:2d:05:fe:ff:0b:69:0e:39:8b:dc:18:04:6f:fb:98:25:
         47:b2:f9:5c:b8:86:cf:18:db:32:fc:38:e5:bc:c4:e3:f0:19:
         75:47:55:55:a6:5e:23:74:76:e4:46:7c:c4:c0:b1:98:78:68:
         6e:27:1c:40:99:39:50:8c:c4:b4:ac:68:63:77:dd:cc:5b:71:
         1f:1e:4f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUYuvoz2A9goF2j4HTk5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjUwNjE1MDIwMDU4WhcNMjUwNjE2MDIwMDU4WjAzMTEwLwYDVQQD
Eyg0NWEyZDc5NjhiOTg0MmQyMzJmYzk5YmZmMDY5ZTFkZjgyODQ3MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYgnF1hV6fF28Jl3nxBd4Tcwd9l2
5dd8BxC2JJTcycAEUQtNTk3wjuu4BH0DPwtMBVMP6meWKj1jF+E+iKDKyywhR/pp
Wpsz4eP2pYNSqj/K4pBieHWjtMxvhVoDGJ/ShOqBFMGfL6o3cpxiE5428W7XAYXd
hsTS7GZ8wjzB0/8FO3JcZXPZ+88D3AU6wB701XcyS5FL2BaRaTs6novMPHTt8cUc
q8RbJN+UIuuu/xFLH0Fa3XfbBU6UIJLoaJbnPJTZIKomm8id+Oc5eKr25F/A3lbL
rzshUK3Yr66bCRqDLP4bz9BDujwDsOqMJqZD0VJFc/2YC/C1nPWgK94mowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWi15aLmELSMvyZv/Bp4d+ChHC8MB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3VI+IP7
DnOMmBn4g9zSAivJ67er+LhFM1i8+8DZ2r9xWyZ1dUOXof19p4JlhcZRWx22ikMC
bmbiezGKB3vmetJDmmcv7Xh/gIFnpMWWQWrpp6rQDBSArX6kmnAh/3JpcqTWBE7e
MpjgRuLsV0+ZxUZXJyn3pksYNJWxP7zamM4vxhJZiKOy/I8recoCYhRijbTFuJEN
2ZOgu1AHMppkprMvtpBnGbAytIUeea67susI5p7QIPQtBf7/C2kOOYvcGARv+5gl
R7L5XLiGzxjbMvw45bzE4/AZdUdVVaZeI3R25EZ8xMCxmHhobiccQJk5UIzEtKxo
Y3fdzFtxHx5PmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:44 2025 by rpki-client