Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File:                     ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier:          nJfDAtn8qmh+p7fU+rKGREaB+gY8rDyDJDK+qkX6ios=
Subject key identifier:   E6:D5:6F:CD:9A:40:6B:6B:37:A8:85:FF:4D:10:7D:60:17:F3:77:B9
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer:       /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial:       01975E38381F7E655AA8CC2D741CFE9A85AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number:          1588
Signing time:             Wed 11 Jun 2025 09:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 09:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 09:00:32 +0000
Files and hashes:         1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
                          2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
                          3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: BE2I9RAmsh2/QmdKQXw6MvW2yCl4yCAN8yUixLTUsX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:38:38:1f:7e:65:5a:a8:cc:2d:74:1c:fe:9a:85:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
        Validity
            Not Before: Jun 11 09:00:32 2025 GMT
            Not After : Jun 12 09:00:32 2025 GMT
        Subject: CN=e6d56fcd9a406b6b37a885ff4d107d6017f377b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1a:a0:a7:fb:ab:d2:c0:40:d0:21:d4:d2:f3:
                    a4:60:9f:be:f4:a1:50:1f:f6:18:93:bf:3a:1c:62:
                    49:33:92:bf:db:8c:9b:bc:5c:33:04:4f:0f:ca:8c:
                    bd:f7:2e:02:03:0d:44:1b:43:a6:47:ea:0a:2c:64:
                    17:72:04:02:aa:1c:85:37:b6:68:66:da:58:45:c4:
                    fa:68:a6:b5:2a:7f:16:25:a9:d6:c0:c2:7c:ed:e5:
                    ad:19:2a:56:c2:4a:f3:e8:46:45:70:11:b2:ac:e4:
                    d6:29:b6:23:96:a5:0c:0c:d2:b0:30:46:e3:70:e3:
                    4c:34:f8:60:16:c7:4b:c6:30:9a:ba:13:3f:01:a2:
                    25:16:5a:5b:2c:df:44:d1:97:37:ec:3a:6c:8c:a1:
                    da:53:a9:63:04:cf:01:bd:8b:73:44:11:e3:40:6c:
                    31:98:59:45:6a:ea:12:ba:99:82:95:d8:b9:3e:54:
                    c7:2b:a0:cc:7d:1d:0f:26:d1:4a:8c:13:02:cb:af:
                    df:16:77:49:01:d2:11:a5:0e:1b:8e:a5:de:ee:0d:
                    90:4d:a6:93:c0:e3:14:cd:dc:92:84:36:5f:3d:ee:
                    6f:e2:24:dd:97:51:98:91:67:92:db:ee:e0:d4:0c:
                    5e:94:de:79:d3:93:dc:26:b6:90:f6:28:33:33:a6:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:6F:CD:9A:40:6B:6B:37:A8:85:FF:4D:10:7D:60:17:F3:77:B9
            X509v3 Authority Key Identifier:
                keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:da:cf:bf:ef:07:87:f4:3b:bd:f9:14:a9:a5:40:65:09:4d:
         01:f7:f3:ee:d2:1e:2d:a5:63:c0:d5:80:fe:1e:0f:be:95:8b:
         9c:28:ff:d9:e7:53:20:01:bd:4b:2b:0d:8f:31:76:8e:49:c4:
         10:74:c7:5e:a7:11:e6:a8:02:d7:b3:31:c6:35:72:41:df:cd:
         36:28:35:41:6a:82:51:0e:22:ab:af:53:07:39:20:54:44:a4:
         6d:5d:38:2d:74:51:71:a6:1a:12:8e:c6:42:61:95:9f:ec:f7:
         a7:19:67:1d:e8:0d:41:23:56:8f:09:39:3c:a9:91:f3:6a:dc:
         34:5d:7c:61:b5:81:bd:6e:c7:13:14:1c:1e:7a:58:95:13:c0:
         d3:83:9f:c0:1f:6e:93:ff:7c:f0:ec:9c:28:4b:8d:f6:54:1b:
         97:00:16:ea:92:f6:92:1b:c0:f6:46:9d:87:c0:74:d3:f4:89:
         a7:3d:b4:8b:56:89:23:29:f0:d0:da:9d:8e:39:4e:a7:3a:af:
         ac:b9:b2:31:d3:b2:27:5b:24:e7:85:11:8d:2e:78:dd:6e:aa:
         e6:20:f3:fe:ed:7f:f6:c6:e6:be:97:69:af:c4:38:48:18:e9:
         01:9b:4f:34:12:7f:f0:43:86:f7:7c:ed:41:d0:92:13:16:b4:
         4b:a4:0b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeODgffmVaqMwtdBz+moWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl
YjMwOTkwHhcNMjUwNjExMDkwMDMyWhcNMjUwNjEyMDkwMDMyWjAzMTEwLwYDVQQD
EyhlNmQ1NmZjZDlhNDA2YjZiMzdhODg1ZmY0ZDEwN2Q2MDE3ZjM3N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Rqgp/ur0sBA0CHU0vOkYJ++9KFQ
H/YYk786HGJJM5K/24ybvFwzBE8Pyoy99y4CAw1EG0OmR+oKLGQXcgQCqhyFN7Zo
ZtpYRcT6aKa1Kn8WJanWwMJ87eWtGSpWwkrz6EZFcBGyrOTWKbYjlqUMDNKwMEbj
cONMNPhgFsdLxjCauhM/AaIlFlpbLN9E0Zc37DpsjKHaU6ljBM8BvYtzRBHjQGwx
mFlFauoSupmCldi5PlTHK6DMfR0PJtFKjBMCy6/fFndJAdIRpQ4bjqXe7g2QTaaT
wOMUzdyShDZfPe5v4iTdl1GYkWeS2+7g1AxelN5505PcJraQ9igzM6ao4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObVb82aQGtrN6iF/00QfWAX83e5MB8GA1UdIwQY
MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt
MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw
LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActrPv+8H
h/Q7vfkUqaVAZQlNAffz7tIeLaVjwNWA/h4PvpWLnCj/2edTIAG9SysNjzF2jknE
EHTHXqcR5qgC17MxxjVyQd/NNig1QWqCUQ4iq69TBzkgVESkbV04LXRRcaYaEo7G
QmGVn+z3pxlnHegNQSNWjwk5PKmR82rcNF18YbWBvW7HExQcHnpYlRPA04OfwB9u
k/988OycKEuN9lQblwAW6pL2khvA9kadh8B00/SJpz20i1aJIynw0NqdjjlOpzqv
rLmyMdOyJ1sk54URjS543W6q5iDz/u1/9sbmvpdpr8Q4SBjpAZtPNBJ/8EOG93zt
QdCSExa0S6QLAA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:54 2025 by rpki-client