Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File:                     1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier:          J+spFgyboM9KpcdZQ9cB3Nh8fgiblyOS4WCuDuhR1po=
Subject key identifier:   50:F5:35:16:0E:8A:15:D5:F6:BE:90:D0:8C:89:AA:F8:33:4C:91:E8
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer:       /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial:       0197759C5BE8D114B13B5F3D60FEA71403E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 22:01:10 +0000
Manifest this update:     Sun 15 Jun 2025 22:01:10 +0000
Manifest next update:     Mon 16 Jun 2025 22:01:10 +0000
Files and hashes:         1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: tpxRzhPevo+n77+2HUBu+2QiZbXhFk7TmLte3j020Gk=)
                          2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:5b:e8:d1:14:b1:3b:5f:3d:60:fe:a7:14:03:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
        Validity
            Not Before: Jun 15 22:01:10 2025 GMT
            Not After : Jun 16 22:01:10 2025 GMT
        Subject: CN=50f535160e8a15d5f6be90d08c89aaf8334c91e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:68:53:35:c7:4f:6b:e9:72:a7:fc:7b:2d:
                    46:51:9f:ff:9e:f3:90:9b:88:0b:37:f2:68:8e:ab:
                    c6:80:df:ab:a7:d7:2a:db:5c:ed:61:39:eb:86:7d:
                    54:5f:f1:76:a7:43:72:3d:3c:62:ae:3e:15:d1:83:
                    d7:9b:d5:d5:b0:4c:41:8e:f6:86:00:74:af:38:66:
                    48:37:56:e9:17:0e:0c:71:e1:6d:98:bf:33:b7:91:
                    40:01:93:4c:a2:14:c6:de:73:9c:98:7a:e1:2d:b9:
                    1a:4a:cf:30:72:3b:88:f6:b1:78:eb:7e:85:7b:46:
                    64:45:de:e4:92:76:0c:af:62:9f:72:c0:bc:7b:fd:
                    12:a5:35:6f:7f:68:72:cd:55:62:31:9f:a7:77:90:
                    1b:a6:13:ac:91:e0:d1:f6:fb:5f:44:58:0f:f1:86:
                    8b:c1:75:52:22:ea:1f:4d:71:fb:06:7d:56:cd:25:
                    e8:67:e9:25:60:58:8c:4a:c0:24:3e:00:ea:ea:77:
                    18:14:7e:ab:41:ee:be:f3:48:12:75:1f:14:d0:8d:
                    62:e1:ad:c0:f6:46:35:63:44:a7:2e:55:73:1c:74:
                    2d:db:c6:d9:12:56:e4:7b:fe:ca:b8:c0:ea:a7:85:
                    8d:23:92:e9:20:83:6e:42:49:10:ab:72:ad:53:26:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F5:35:16:0E:8A:15:D5:F6:BE:90:D0:8C:89:AA:F8:33:4C:91:E8
            X509v3 Authority Key Identifier:
                keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:61:df:68:07:ea:2b:59:79:58:5c:94:89:cc:4f:bc:85:b9:
         ea:64:e4:a4:13:ac:23:65:10:8a:d9:1f:97:e3:52:4f:10:75:
         f3:02:88:31:38:68:f1:37:bf:35:92:77:ee:7b:02:64:a6:b6:
         67:f3:dc:ff:a3:5c:48:b0:54:44:a5:8a:7a:24:38:22:b6:03:
         88:11:36:99:8e:5d:09:75:3a:ce:14:a7:bc:df:df:84:c3:df:
         5a:19:56:2b:ec:d9:71:ca:09:d6:47:30:65:7f:cc:27:8e:0a:
         4b:a2:90:10:1a:50:4d:78:e4:a6:73:11:2a:16:94:3d:a7:86:
         ac:d8:11:d8:0d:21:dd:96:1c:7b:d8:ac:3a:fa:8d:8d:3c:7b:
         47:8e:ac:9e:8b:fa:16:1f:1e:1a:69:69:1a:68:29:2a:93:d8:
         f5:10:00:75:b5:d5:25:23:21:d0:e8:66:b0:e3:96:cd:cb:62:
         bc:83:a3:88:12:36:0f:66:92:05:a0:c3:56:bc:f5:0b:22:77:
         42:44:06:9a:39:92:b4:a6:eb:6b:33:6b:2d:f8:8e:fa:1c:ba:
         74:13:6b:48:78:e2:ff:4d:0a:a7:8f:be:85:23:06:d7:dd:1e:
         c8:af:3d:02:f2:94:d4:91:04:ae:2f:e1:5d:f7:af:1e:03:93:
         6c:80:09:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1nFvo0RSxO189YP6nFAPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjUwNjE1MjIwMTEwWhcNMjUwNjE2MjIwMTEwWjAzMTEwLwYDVQQD
Eyg1MGY1MzUxNjBlOGExNWQ1ZjZiZTkwZDA4Yzg5YWFmODMzNGM5MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rBoUzXHT2vpcqf8ey1GUZ//nvOQ
m4gLN/JojqvGgN+rp9cq21ztYTnrhn1UX/F2p0NyPTxirj4V0YPXm9XVsExBjvaG
AHSvOGZIN1bpFw4MceFtmL8zt5FAAZNMohTG3nOcmHrhLbkaSs8wcjuI9rF4636F
e0ZkRd7kknYMr2KfcsC8e/0SpTVvf2hyzVViMZ+nd5AbphOskeDR9vtfRFgP8YaL
wXVSIuofTXH7Bn1WzSXoZ+klYFiMSsAkPgDq6ncYFH6rQe6+80gSdR8U0I1i4a3A
9kY1Y0SnLlVzHHQt28bZElbke/7KuMDqp4WNI5LpIINuQkkQq3KtUyZboQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD1NRYOihXV9r6Q0IyJqvgzTJHoMB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGHfaAfq
K1l5WFyUicxPvIW56mTkpBOsI2UQitkfl+NSTxB18wKIMTho8Te/NZJ37nsCZKa2
Z/Pc/6NcSLBURKWKeiQ4IrYDiBE2mY5dCXU6zhSnvN/fhMPfWhlWK+zZccoJ1kcw
ZX/MJ44KS6KQEBpQTXjkpnMRKhaUPaeGrNgR2A0h3ZYce9isOvqNjTx7R46snov6
Fh8eGmlpGmgpKpPY9RAAdbXVJSMh0OhmsOOWzctivIOjiBI2D2aSBaDDVrz1CyJ3
QkQGmjmStKbrazNrLfiO+hy6dBNrSHji/00Kp4++hSMG190eyK89AvKU1JEEri/h
XfevHgOTbIAJWA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:44:36 2025 by rpki-client