Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          qqJJroqjCtlyAT+81SHnG8E+QefmGwP8jgSiNW0kJUw=
Subject key identifier:   B2:36:07:F7:26:2C:AC:D5:F8:FD:52:F8:48:71:DA:DE:93:1C:2F:30
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       019759B6A866E339B2E62DFFCEF2E8E77D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 12:00:32 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:32 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:32 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: qFTx30Pk/wLxE2JXSx7dzEp2reyZuGrvUr4IRLYDUMQ=)
                          2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:a8:66:e3:39:b2:e6:2d:ff:ce:f2:e8:e7:7d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: Jun 10 12:00:32 2025 GMT
            Not After : Jun 11 12:00:32 2025 GMT
        Subject: CN=b23607f7262cacd5f8fd52f84871dade931c2f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:b4:70:d9:3d:d0:40:b1:3d:a6:04:a2:53:
                    46:75:90:b5:13:bb:dd:98:8b:d8:5c:32:a6:c2:e5:
                    30:2b:79:a1:30:8b:1f:e6:fd:1c:39:94:cd:0e:b8:
                    7d:ba:01:2b:36:ea:2b:cb:a9:9e:09:4c:ea:8c:e7:
                    99:86:d3:27:5c:e0:70:f9:9e:f8:7b:e4:3f:d1:d9:
                    8e:7e:bb:fa:b7:c4:a2:63:30:4c:39:98:d7:a5:b7:
                    f5:fe:b9:b7:6d:82:8a:dd:98:1c:15:33:35:74:78:
                    e8:12:3f:07:e4:44:f2:7e:29:41:78:09:1e:ab:90:
                    87:18:ab:69:65:86:01:e0:be:af:4f:b2:76:37:d2:
                    e5:a7:0f:7f:66:fa:75:50:49:9d:bb:a4:d0:ff:1a:
                    82:6a:88:7f:b0:41:1d:0e:90:04:14:9c:5f:88:cc:
                    e4:b6:aa:84:76:cd:3a:15:5b:26:36:c5:f1:83:79:
                    dc:47:ac:3c:8c:f2:8d:2a:d3:9b:86:ab:9c:3e:f1:
                    77:53:dd:f2:a4:a1:83:48:4d:fc:5a:ce:8e:0d:e4:
                    73:5b:65:66:a6:0f:5e:88:f9:32:4c:a7:a1:47:93:
                    02:6b:97:41:fe:b1:27:20:ef:48:3f:9a:c6:6d:1c:
                    a4:89:16:43:c3:3c:23:91:55:1f:e1:17:3b:a5:ff:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:07:F7:26:2C:AC:D5:F8:FD:52:F8:48:71:DA:DE:93:1C:2F:30
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:b5:50:69:2f:1b:93:d8:81:d5:9c:83:b4:83:3a:22:4a:
         c9:34:94:1c:73:df:75:e6:5c:c4:ea:01:c9:b9:b7:37:bd:c4:
         18:ca:bb:80:1b:60:4d:4e:82:c7:c1:5e:ec:50:52:7e:ce:f8:
         87:bf:bb:15:46:f1:8c:2d:ee:40:3d:3a:f4:cd:5e:e6:f1:1d:
         45:2c:c7:6b:45:1c:2c:5f:2c:60:ae:a7:4d:52:fa:79:45:5f:
         0a:90:cc:62:94:36:49:0e:1d:b4:e4:98:97:f0:8d:d7:15:9e:
         ed:6d:d4:f0:25:15:1a:d2:d5:7e:9a:f3:b5:6b:22:03:bd:62:
         20:fa:42:f9:21:e1:f3:d5:f0:e8:83:5a:ac:f6:97:33:4a:69:
         60:fc:a1:c6:35:0b:c5:64:89:3c:cb:9b:2c:3d:5d:b8:37:80:
         ee:4d:0a:fc:89:04:eb:a6:b7:2d:be:3a:6e:7e:c6:f8:89:9b:
         33:63:f5:58:86:a9:ae:96:5b:3f:07:6f:45:3d:a3:7d:74:cf:
         2d:e7:1f:ff:6d:5a:d8:f0:d6:78:4c:8d:70:f7:d0:05:1d:bc:
         2e:16:ea:c8:a0:95:3c:ea:07:bf:4e:c4:d7:30:c6:b5:e7:06:
         47:62:23:eb:c5:c8:fe:e8:ae:a8:60:53:01:25:d1:3d:2d:44:
         3a:6b:05:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZtqhm4zmy5i3/zvLo531aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk
NDExYjYwHhcNMjUwNjEwMTIwMDMyWhcNMjUwNjExMTIwMDMyWjAzMTEwLwYDVQQD
EyhiMjM2MDdmNzI2MmNhY2Q1ZjhmZDUyZjg0ODcxZGFkZTkzMWMyZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqq0cNk90ECxPaYEolNGdZC1E7vd
mIvYXDKmwuUwK3mhMIsf5v0cOZTNDrh9ugErNuory6meCUzqjOeZhtMnXOBw+Z74
e+Q/0dmOfrv6t8SiYzBMOZjXpbf1/rm3bYKK3ZgcFTM1dHjoEj8H5ETyfilBeAke
q5CHGKtpZYYB4L6vT7J2N9Llpw9/Zvp1UEmdu6TQ/xqCaoh/sEEdDpAEFJxfiMzk
tqqEds06FVsmNsXxg3ncR6w8jPKNKtObhqucPvF3U93ypKGDSE38Ws6ODeRzW2Vm
pg9eiPkyTKehR5MCa5dB/rEnIO9IP5rGbRykiRZDwzwjkVUf4Rc7pf8BzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI2B/cmLKzV+P1S+Ehx2t6THC8wMB8GA1UdIwQY
MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt
MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm
LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd661UGkv
G5PYgdWcg7SDOiJKyTSUHHPfdeZcxOoBybm3N73EGMq7gBtgTU6Cx8Fe7FBSfs74
h7+7FUbxjC3uQD069M1e5vEdRSzHa0UcLF8sYK6nTVL6eUVfCpDMYpQ2SQ4dtOSY
l/CN1xWe7W3U8CUVGtLVfprztWsiA71iIPpC+SHh89Xw6INarPaXM0ppYPyhxjUL
xWSJPMubLD1duDeA7k0K/IkE66a3Lb46bn7G+ImbM2P1WIaprpZbPwdvRT2jfXTP
Lecf/21a2PDWeEyNcPfQBR28LhbqyKCVPOoHv07E1zDGtecGR2Ij68XI/uiuqGBT
ASXRPS1EOmsF2w==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:39:12 2025 by rpki-client