Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          dN3wF8O+K/RkfLjnEZwal18dFl2bDmxzKujSByTlNy0=
Subject key identifier:   46:84:0D:2B:2C:C9:83:88:C3:52:7F:BD:B9:5C:E6:F2:B4:C7:42:71
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       01974B8DA40C54155174844DFB1C9D72DFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          1597
Signing time:             Sat 07 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:03 +0000
Files and hashes:         1: 1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa (hash: 0Pd6o8RRKlvvsS/YlVCGhUpZijHcF0bp4ry/V9YxdXE=)
                          2: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (hash: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=)
                          3: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: 9pEOrJTiR36g9+VnMEkxcmZzcedWJ+YKCEkO9Vfec34=)
                          4: Jfkb9wIjflJ9g_nlBWaCF6laiWU.roa (hash: /ljWZ+p/6L9vGqqgT4FUCtEB1Y8qOikrC1+ICoRutK4=)
                          5: eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa (hash: AL9fqh7ceKqnHM3PxeRD473MOSaIbFz8D+64dfZV0bI=)
                          6: shcI5ksCijvvRLID7bxpTU4Ek38.roa (hash: 5j6UIvbPGZk819fhFv2lIK9RILlN83FerZg8FUEwxJA=)
                          7: ujnhV8Opl7rPc_VLJe9oWdnsfZo.roa (hash: nAwtKj7g3ynj1in/AG8n1Nua6ASmEjUSoAVAQeOJNow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:a4:0c:54:15:51:74:84:4d:fb:1c:9d:72:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Jun  7 18:01:03 2025 GMT
            Not After : Jun  8 18:01:03 2025 GMT
        Subject: CN=46840d2b2cc98388c3527fbdb95ce6f2b4c74271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:16:c2:82:a3:66:e1:dc:2e:04:38:d1:e6:
                    ba:ca:e5:26:86:d8:fb:3d:38:67:5c:07:d9:1e:ae:
                    30:a6:ac:e3:66:ff:d2:29:b7:35:14:99:9a:72:0b:
                    af:95:f0:71:de:c7:b3:44:e4:f7:f8:4b:c7:d7:a3:
                    29:03:a4:23:fd:ec:29:3b:74:20:65:2b:12:0a:31:
                    d7:9e:d4:f0:0b:cc:ea:b0:9f:1e:14:0d:c2:a6:5b:
                    e6:34:b7:2e:47:91:77:04:14:40:de:97:6e:ca:cf:
                    6c:3f:22:02:71:42:cb:69:9e:ee:fc:8d:c2:7b:4e:
                    92:c2:27:70:35:79:db:d8:d6:ae:e3:64:f1:6f:1c:
                    3b:b9:d0:22:90:03:45:cd:c9:94:bc:ed:1f:5a:f6:
                    22:29:e6:db:09:81:d6:78:9c:21:c4:9c:ad:38:a7:
                    aa:3a:9d:4a:1c:9d:e2:f6:94:6c:d2:10:93:8c:d1:
                    c4:d7:f5:8c:b9:69:7b:39:80:41:d9:28:35:84:18:
                    87:d7:fa:a9:97:99:82:bf:b4:87:4e:06:4f:90:75:
                    d8:7c:f0:fb:ee:16:fe:89:c9:20:2c:87:9a:bd:f1:
                    fd:53:3e:58:4c:3f:61:4e:0a:43:e0:e3:c2:e9:22:
                    6c:b2:3e:8b:4f:e6:2b:14:c9:18:f2:07:ed:45:66:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:0D:2B:2C:C9:83:88:C3:52:7F:BD:B9:5C:E6:F2:B4:C7:42:71
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:5c:62:d2:57:52:0f:6d:2f:cc:ab:c1:04:ff:c0:1e:73:
         bd:d3:19:f0:c9:30:29:d0:14:a2:77:f9:e0:1b:c8:07:8f:ff:
         65:81:1c:40:d4:db:e4:44:c0:62:c2:b8:01:61:d8:a8:e0:d0:
         68:e0:1e:c5:d0:77:96:a4:b9:8e:71:86:8d:4b:c6:7a:af:65:
         c3:e0:70:2c:c2:e7:c8:7f:42:dc:49:5c:7f:20:be:38:33:3b:
         3f:d3:c3:1d:39:63:15:fd:62:09:32:1b:e8:44:91:12:21:7d:
         d4:14:63:bb:f4:10:2f:ec:bf:af:53:df:66:14:a0:ae:4c:59:
         b5:52:7a:2b:78:24:ca:d6:ad:9e:02:6a:bf:94:d0:f9:45:ea:
         0d:1b:6c:35:f8:25:a6:0c:8c:cc:fa:c2:c2:51:0e:65:b7:eb:
         6a:df:21:38:fa:67:d1:49:51:f2:73:d0:c2:98:32:3c:bd:69:
         2f:75:bb:c9:21:6b:1a:8c:dc:38:1e:bb:cb:71:7b:20:17:f4:
         bc:f2:f0:06:d5:a3:9d:64:4b:c6:a6:97:5c:9e:9e:ca:bb:24:
         ae:89:b6:16:e6:b3:04:39:9b:62:9d:ab:e1:9b:e7:fd:6e:91:
         ee:fa:0c:9b:c9:6d:24:28:cd:e9:d3:2f:25:96:8e:29:47:cf:
         94:2d:a6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjaQMVBVRdIRN+xydct/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjUwNjA3MTgwMTAzWhcNMjUwNjA4MTgwMTAzWjAzMTEwLwYDVQQD
Eyg0Njg0MGQyYjJjYzk4Mzg4YzM1MjdmYmRiOTVjZTZmMmI0Yzc0MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQWwoKjZuHcLgQ40ea6yuUmhtj7
PThnXAfZHq4wpqzjZv/SKbc1FJmacguvlfBx3sezROT3+EvH16MpA6Qj/ewpO3Qg
ZSsSCjHXntTwC8zqsJ8eFA3CplvmNLcuR5F3BBRA3pduys9sPyICcULLaZ7u/I3C
e06SwidwNXnb2Nau42Txbxw7udAikANFzcmUvO0fWvYiKebbCYHWeJwhxJytOKeq
Op1KHJ3i9pRs0hCTjNHE1/WMuWl7OYBB2Sg1hBiH1/qpl5mCv7SHTgZPkHXYfPD7
7hb+ickgLIeavfH9Uz5YTD9hTgpD4OPC6SJssj6LT+YrFMkY8gftRWZRCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaEDSssyYOIw1J/vblc5vK0x0JxMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENFcYtJX
Ug9tL8yrwQT/wB5zvdMZ8MkwKdAUonf54BvIB4//ZYEcQNTb5ETAYsK4AWHYqODQ
aOAexdB3lqS5jnGGjUvGeq9lw+BwLMLnyH9C3ElcfyC+ODM7P9PDHTljFf1iCTIb
6ESREiF91BRju/QQL+y/r1PfZhSgrkxZtVJ6K3gkytatngJqv5TQ+UXqDRtsNfgl
pgyMzPrCwlEOZbfrat8hOPpn0UlR8nPQwpgyPL1pL3W7ySFrGozcOB67y3F7IBf0
vPLwBtWjnWRLxqaXXJ6eyrskrom2FuazBDmbYp2r4Zvn/W6R7voMm8ltJCjN6dMv
JZaOKUfPlC2mNw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:17 2025 by rpki-client