Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
File:                     XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json)
Hash identifier:          spg4kY3Gyl2/snbg+i5JoqkNTV5RVMOsUzd6cxCgaQk=
Subject key identifier:   85:0E:72:A5:67:B7:EE:40:75:B1:D3:BC:E6:27:51:C3:20:B7:A7:77
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Certificate issuer:       /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial:       01975346F68C0BD5FFFF99BEC6C1C98AD5CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
Manifest number:          1598
Signing time:             Mon 09 Jun 2025 06:00:48 +0000
Manifest this update:     Mon 09 Jun 2025 06:00:48 +0000
Manifest next update:     Tue 10 Jun 2025 06:00:48 +0000
Files and hashes:         1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=)
                          2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=)
                          3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=)
                          4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=)
                          5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=)
                          6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=)
                          7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=)
                          8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=)
                          9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=)
                          10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: +0Rc94cUe8qG3YKr1yFqCTCW6uNqcgTOUvR0TExh40Y=)
                          11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=)
                          12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=)
                          13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=)
                          14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=)
                          15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:46:f6:8c:0b:d5:ff:ff:99:be:c6:c1:c9:8a:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
        Validity
            Not Before: Jun  9 06:00:48 2025 GMT
            Not After : Jun 10 06:00:48 2025 GMT
        Subject: CN=850e72a567b7ee4075b1d3bce62751c320b7a777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:d4:13:33:ff:1f:f9:40:d8:cb:7b:0f:b7:
                    c8:c3:3b:86:62:aa:e3:3c:7f:6d:6a:d0:45:d2:06:
                    d6:b8:2f:a7:62:a6:0e:a8:fd:f7:ef:6e:91:a8:79:
                    2e:f0:a8:f3:50:c6:46:78:9f:7f:5c:e6:53:98:d7:
                    ba:87:9f:5c:33:39:b0:d9:e2:88:7f:76:d7:c3:96:
                    a3:d7:24:26:7c:19:c3:eb:11:ab:51:a0:cd:83:aa:
                    98:cb:05:27:e5:6c:e0:44:b3:63:f6:ef:e1:02:fe:
                    7d:24:80:d5:82:bd:93:5b:b0:99:80:79:4e:80:d6:
                    ee:7a:16:cd:c6:ec:ac:44:f8:03:02:d7:79:a3:66:
                    9e:8d:02:f6:47:1f:be:5c:e8:4c:88:9d:11:0a:27:
                    ca:fa:96:8b:a4:af:26:1d:9e:77:4c:89:ed:60:bd:
                    22:5a:b9:0b:ab:4c:b0:28:25:ac:80:a5:60:18:5f:
                    24:1b:ba:1f:0f:52:a8:84:49:cc:df:83:b2:0b:3a:
                    ed:8a:7b:12:5b:45:57:71:55:11:b1:68:c2:2e:56:
                    5b:13:97:21:2a:33:37:b5:79:3f:57:5c:92:9c:03:
                    68:6c:25:98:bf:0f:20:1c:4a:33:53:7a:e0:e0:da:
                    5f:43:e5:60:e0:12:05:99:0a:62:7e:69:51:79:26:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0E:72:A5:67:B7:EE:40:75:B1:D3:BC:E6:27:51:C3:20:B7:A7:77
            X509v3 Authority Key Identifier:
                keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:48:f0:4f:e1:41:5c:61:d2:5a:4f:88:92:34:ef:8f:71:
         b7:2e:88:a8:ee:f3:24:ef:9c:33:ba:0d:26:73:79:9f:60:a2:
         6e:cb:27:1b:42:60:64:f2:de:61:f7:78:98:82:6f:df:c3:5f:
         11:86:73:ff:80:75:8c:fe:fe:e6:2b:25:00:37:8f:a8:63:24:
         a7:82:ef:09:67:1e:40:ae:93:01:f9:d3:aa:e8:92:55:bf:79:
         17:80:d3:ec:f0:f2:77:a1:15:2b:09:ee:09:47:64:ce:3e:b0:
         ea:98:d0:4b:3a:db:ca:cc:fe:20:d5:26:b7:e5:e9:d3:f1:d3:
         32:c4:13:f9:2c:17:b8:c7:9f:ab:c1:d2:8e:f5:ac:74:98:4a:
         0f:b8:c3:64:1f:4c:83:e8:e7:b1:15:ce:09:ed:f4:1d:94:b3:
         f7:74:55:bc:77:3a:8a:9c:b3:b5:8b:8a:90:24:ae:b0:bf:d0:
         53:94:b9:2c:32:00:cc:fe:53:c4:7c:5f:f6:b1:22:ac:19:55:
         47:07:4e:76:f5:04:59:d0:0f:82:45:d6:3a:39:40:0a:e6:f6:
         28:84:47:38:df:20:21:5a:35:e7:9e:47:b9:e9:c0:77:5e:d6:
         b9:b4:85:ee:55:5f:35:95:af:f8:1f:c5:2e:35:0d:20:e2:3d:
         a9:02:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:37:15 2025 by rpki-client