Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File:                     k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier:          J9o8fGteo4Dcs+WeoznAjCnanXu0+STEP7qMEQOjQ8w=
Subject key identifier:   73:6B:1C:E4:23:EF:F3:13:FE:A6:0F:2F:6A:F9:CF:26:CA:C0:03:F2
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer:       /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial:       019758DAEA91C5B270E7112FA0B2AAD58245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number:          1586
Signing time:             Tue 10 Jun 2025 08:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:31 +0000
Files and hashes:         1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
                          2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: oxsfZLPKlIEk80BmWJOQI2db63N+IA1A2E4NKB97c88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:ea:91:c5:b2:70:e7:11:2f:a0:b2:aa:d5:82:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
        Validity
            Not Before: Jun 10 08:00:31 2025 GMT
            Not After : Jun 11 08:00:31 2025 GMT
        Subject: CN=736b1ce423eff313fea60f2f6af9cf26cac003f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:a2:65:d6:b2:7a:7c:ff:09:e6:25:80:42:
                    b4:2c:b8:0d:de:d2:a9:38:0c:82:fb:3d:57:db:89:
                    6c:35:83:ff:c8:a7:94:85:21:cc:17:45:33:4d:dd:
                    75:28:5f:a9:5f:2d:50:33:37:5b:62:32:c2:06:59:
                    80:54:f9:85:c6:e2:db:12:ca:1a:fd:0f:db:a2:44:
                    1d:dd:cd:bf:9c:9e:df:65:ef:23:e2:f2:16:cb:e2:
                    6f:80:01:41:f9:0e:be:66:81:65:d2:5e:fb:4d:31:
                    ce:85:08:46:15:78:3e:90:d9:d5:a1:4d:cf:1d:71:
                    91:e1:18:2d:a2:3b:88:fc:74:47:fd:3b:25:24:65:
                    15:b6:eb:4f:c4:9c:f4:3a:b6:26:fd:3a:8f:2e:69:
                    0c:8f:38:0d:50:77:d2:ec:90:55:8c:8c:9e:c2:73:
                    0d:aa:3d:eb:49:92:bb:84:ff:7d:7c:30:b6:92:6e:
                    e0:02:be:4a:1f:b1:10:e7:00:e5:e2:b7:82:4a:2e:
                    08:1e:f5:9d:7b:a0:57:45:bc:88:59:a4:6d:8f:8a:
                    2e:0d:ee:70:e8:06:e3:37:86:60:7d:82:22:8f:92:
                    93:fe:27:d2:94:15:fc:e8:2d:6d:21:1e:ad:9e:af:
                    68:4e:97:34:00:c2:af:95:c2:f7:e9:47:0a:8a:05:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:1C:E4:23:EF:F3:13:FE:A6:0F:2F:6A:F9:CF:26:CA:C0:03:F2
            X509v3 Authority Key Identifier:
                keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:71:3c:bc:65:a5:e6:1a:b0:fe:99:83:71:7b:f7:f9:e0:
         05:5b:9a:45:36:1d:41:63:48:8a:fe:5d:2c:2e:26:48:35:ae:
         56:da:df:79:43:96:fd:9e:58:21:8c:b0:b2:b4:c5:66:36:c0:
         6e:2b:a5:29:6a:ec:b6:5f:dc:6e:ce:62:13:93:4c:07:cb:64:
         ba:55:6e:6b:9d:8e:5a:e3:ef:70:c9:2b:74:28:d1:ca:86:b8:
         c5:1e:b2:9c:08:95:d0:a6:f5:ba:47:c6:26:1e:f3:5c:be:16:
         f2:75:ec:ea:d5:0e:3a:26:24:51:81:46:02:6e:a3:1b:7b:57:
         4d:ee:f2:45:24:d7:1b:20:3a:ce:6b:46:68:46:a8:9b:a3:3c:
         f1:4b:3b:11:68:04:e8:c6:ef:45:48:4a:e1:8b:6a:97:ef:38:
         38:d6:fe:f9:24:0a:6e:bb:f6:cf:87:f8:44:bf:ff:a2:c8:df:
         48:7c:3d:c6:cf:fe:83:32:ff:f2:c3:81:6c:cd:13:ae:31:99:
         90:23:2b:c8:38:ac:6f:33:dd:e1:d3:03:26:2b:ac:82:40:94:
         aa:bd:18:c4:12:6a:4d:dd:f3:1d:f0:ab:f9:77:3c:a8:3e:0f:
         c4:c5:69:70:cb:6e:6e:7a:7f:68:32:57:65:f8:bd:d1:0e:ee:
         28:e6:57:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY2uqRxbJw5xEvoLKq1YJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjUwNjEwMDgwMDMxWhcNMjUwNjExMDgwMDMxWjAzMTEwLwYDVQQD
Eyg3MzZiMWNlNDIzZWZmMzEzZmVhNjBmMmY2YWY5Y2YyNmNhYzAwM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFiiZdayenz/CeYlgEK0LLgN3tKp
OAyC+z1X24lsNYP/yKeUhSHMF0UzTd11KF+pXy1QMzdbYjLCBlmAVPmFxuLbEsoa
/Q/bokQd3c2/nJ7fZe8j4vIWy+JvgAFB+Q6+ZoFl0l77TTHOhQhGFXg+kNnVoU3P
HXGR4RgtojuI/HRH/TslJGUVtutPxJz0OrYm/TqPLmkMjzgNUHfS7JBVjIyewnMN
qj3rSZK7hP99fDC2km7gAr5KH7EQ5wDl4reCSi4IHvWde6BXRbyIWaRtj4ouDe5w
6AbjN4ZgfYIij5KT/ifSlBX86C1tIR6tnq9oTpc0AMKvlcL36UcKigUeQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNrHOQj7/MT/qYPL2r5zybKwAPyMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkblxPLxl
peYasP6Zg3F79/ngBVuaRTYdQWNIiv5dLC4mSDWuVtrfeUOW/Z5YIYywsrTFZjbA
biulKWrstl/cbs5iE5NMB8tkulVua52OWuPvcMkrdCjRyoa4xR6ynAiV0Kb1ukfG
Jh7zXL4W8nXs6tUOOiYkUYFGAm6jG3tXTe7yRSTXGyA6zmtGaEaom6M88Us7EWgE
6MbvRUhK4Ytql+84ONb++SQKbrv2z4f4RL//osjfSHw9xs/+gzL/8sOBbM0TrjGZ
kCMryDisbzPd4dMDJiusgkCUqr0YxBJqTd3zHfCr+Xc8qD4PxMVpcMtubnp/aDJX
Zfi90Q7uKOZX2Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:48:02 2025 by rpki-client