Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          FnGfDROQgwC26t/3Iey5DD3EQ4DA+4r0GCqOkcLNfco=
Subject key identifier:   57:C0:57:D6:26:0D:A8:DC:93:EA:13:6A:62:2D:18:CA:AC:F0:80:C5
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       01974E20B8AEBBBCD751BEF08CEADC5DE5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 06:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:56 +0000
Files and hashes:         1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
                          2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
                          3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
                          4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: 9BvCoDUPpdC+cNyZYGCXT6juihfG3lV1Jzdy1sYWzfQ=)
                          5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:b8:ae:bb:bc:d7:51:be:f0:8c:ea:dc:5d:e5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Jun  8 06:00:56 2025 GMT
            Not After : Jun  9 06:00:56 2025 GMT
        Subject: CN=57c057d6260da8dc93ea136a622d18caacf080c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:fe:52:a1:e5:eb:f5:98:10:bb:63:65:f3:
                    fa:05:eb:3a:b0:87:a5:06:c6:eb:8a:0e:7d:b8:d6:
                    64:58:bb:63:df:dc:34:6d:51:9b:f9:86:92:d7:f5:
                    f9:6c:26:58:fa:63:5e:41:98:47:33:ed:c3:0c:bd:
                    3b:7c:45:f3:c0:19:c6:7e:40:8e:6f:54:7a:7e:b6:
                    80:6c:79:8d:a1:5c:bf:84:cf:e5:37:78:c6:a3:48:
                    82:d9:c9:09:25:1c:e7:5e:5a:07:c7:d8:5a:51:ca:
                    8d:4e:5f:94:22:bd:96:ee:34:84:f1:53:40:1e:a5:
                    4d:2c:e6:b5:25:f8:f3:05:4e:aa:c5:33:1c:60:d9:
                    a4:39:1c:96:57:e7:25:40:9d:3b:10:7e:dc:ca:22:
                    b7:71:ec:f6:e8:62:2c:fd:77:b5:29:d4:b9:e9:b6:
                    65:e3:58:bf:71:57:b6:1d:a4:8d:82:5e:33:70:56:
                    da:47:70:ef:fc:a8:84:08:c3:f8:67:43:f1:b7:63:
                    ef:d3:4e:e0:ad:b5:b4:41:cb:61:b0:86:68:c9:57:
                    7b:9b:ea:bc:c1:08:75:8b:50:7b:14:fa:a0:8c:6c:
                    5c:1a:09:dd:7f:c2:a7:a9:b0:04:92:a5:6d:49:f6:
                    d6:66:f6:a9:30:ff:a3:7a:1c:6e:c7:77:2d:5f:df:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:57:D6:26:0D:A8:DC:93:EA:13:6A:62:2D:18:CA:AC:F0:80:C5
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:78:bc:cb:b6:00:4d:ae:56:cd:e5:2c:87:22:a3:5b:39:fc:
         36:e6:b4:5f:f4:92:d7:22:39:4d:72:0a:6a:7b:a3:81:09:43:
         e9:6a:00:d4:31:4c:37:3e:53:77:93:7c:80:e9:6e:fc:f6:7b:
         48:8c:d8:08:67:7f:82:4e:35:cc:2b:c4:5d:96:73:fa:be:d0:
         40:4e:ad:cb:4a:e3:e2:7e:9c:16:21:0c:d7:90:5d:2c:98:f3:
         b5:94:3c:7c:c5:26:33:4d:24:ea:99:9a:a1:fc:bc:fa:b9:4e:
         3f:0a:c4:2b:f6:ea:80:de:33:34:91:6d:ee:b4:b5:f0:a7:04:
         17:a6:f8:5b:3a:a2:c7:4c:15:07:e6:fb:9e:cf:09:a7:2e:0d:
         c9:60:65:1e:01:b5:96:50:9f:1d:99:8d:87:45:76:33:f2:7f:
         4f:d7:ef:bc:14:74:f1:5c:fb:03:e5:cd:24:e7:f1:65:b2:5a:
         5b:fd:22:4f:69:2b:a8:8a:e8:6c:a5:5a:b2:57:c8:3e:bd:ee:
         66:a4:17:fc:b2:20:b0:42:27:2d:dc:9d:4b:c4:a2:8b:1e:63:
         dc:c4:1c:71:85:f4:23:48:a3:f5:bd:d1:dc:1c:d8:63:8c:19:
         92:a5:f9:51:f1:24:5b:ac:23:02:c0:34:d0:e0:b5:f0:bb:20:
         4c:87:79:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOILiuu7zXUb7wjOrcXeWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjUwNjA4MDYwMDU2WhcNMjUwNjA5MDYwMDU2WjAzMTEwLwYDVQQD
Eyg1N2MwNTdkNjI2MGRhOGRjOTNlYTEzNmE2MjJkMThjYWFjZjA4MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdf+UqHl6/WYELtjZfP6Bes6sIel
Bsbrig59uNZkWLtj39w0bVGb+YaS1/X5bCZY+mNeQZhHM+3DDL07fEXzwBnGfkCO
b1R6fraAbHmNoVy/hM/lN3jGo0iC2ckJJRznXloHx9haUcqNTl+UIr2W7jSE8VNA
HqVNLOa1JfjzBU6qxTMcYNmkORyWV+clQJ07EH7cyiK3cez26GIs/Xe1KdS56bZl
41i/cVe2HaSNgl4zcFbaR3Dv/KiECMP4Z0Pxt2Pv007grbW0QcthsIZoyVd7m+q8
wQh1i1B7FPqgjGxcGgndf8KnqbAEkqVtSfbWZvapMP+jehxux3ctX995MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfAV9YmDajck+oTamItGMqs8IDFMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXi8y7YA
Ta5WzeUshyKjWzn8Nua0X/SS1yI5TXIKanujgQlD6WoA1DFMNz5Td5N8gOlu/PZ7
SIzYCGd/gk41zCvEXZZz+r7QQE6ty0rj4n6cFiEM15BdLJjztZQ8fMUmM00k6pma
ofy8+rlOPwrEK/bqgN4zNJFt7rS18KcEF6b4Wzqix0wVB+b7ns8Jpy4NyWBlHgG1
llCfHZmNh0V2M/J/T9fvvBR08Vz7A+XNJOfxZbJaW/0iT2krqIrobKVaslfIPr3u
ZqQX/LIgsEInLdydS8Siix5j3MQccYX0I0ij9b3R3BzYY4wZkqX5UfEkW6wjAsA0
0OC18LsgTId5Rw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:38 2025 by rpki-client