Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File:                     OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier:          QGDCjXjFo1H5SMeioRidfc8k42XhOULwMAoRsKROT5A=
Subject key identifier:   AB:CB:5B:5E:22:EC:00:33:DE:96:24:3A:EB:4A:BE:98:16:0C:44:63
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer:       /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial:       01974F3385ACEC3E86C7624504E926650330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 11:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 11:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 11:01:05 +0000
Files and hashes:         1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: buN6YITH1NaA3KGagFoX04T26/r6Lwb7rjB7Ak6gV/E=)
                          2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:85:ac:ec:3e:86:c7:62:45:04:e9:26:65:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
        Validity
            Not Before: Jun  8 11:01:05 2025 GMT
            Not After : Jun  9 11:01:05 2025 GMT
        Subject: CN=abcb5b5e22ec0033de96243aeb4abe98160c4463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:22:61:71:ec:28:85:11:1d:a8:05:82:77:
                    fa:74:1f:d6:55:74:68:e3:e7:c6:83:dc:e9:0b:98:
                    9c:ef:a8:1d:76:25:c3:8f:d0:29:5d:15:e9:40:3a:
                    50:a0:2f:64:d2:2c:ad:23:25:7b:d7:3c:cb:3a:ba:
                    dc:29:00:7e:42:a4:64:0c:ca:b5:71:9f:74:88:33:
                    bf:04:41:7c:d3:3d:7c:bc:68:93:db:d4:d8:94:bd:
                    32:5f:94:3a:71:dc:a5:e6:07:65:26:4e:1e:23:4d:
                    a6:51:6f:4d:7c:04:69:f3:e5:22:50:a5:40:66:4e:
                    bd:9f:92:65:ff:fd:03:1d:76:35:5e:c6:01:3e:91:
                    8f:82:a6:4b:9d:57:fd:6e:53:49:05:e5:96:b3:19:
                    63:4d:00:99:8a:f2:c5:e6:cb:d9:4e:be:78:44:89:
                    f1:d8:dc:d3:75:75:8f:0a:f6:3f:d6:a5:b4:b3:4b:
                    28:b0:1d:e8:21:8b:6d:1b:8f:c3:aa:3d:30:ee:b7:
                    f6:96:03:c6:36:12:c2:a5:c8:0d:57:3a:f4:9d:3b:
                    f6:1a:0b:4f:c2:35:03:5d:a2:55:bc:5a:e1:c5:fd:
                    d3:cf:a5:3d:17:09:3b:5a:d9:e0:8f:8a:f3:ea:04:
                    9c:44:70:6a:bc:73:ae:c5:21:46:2d:14:c7:22:28:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:5B:5E:22:EC:00:33:DE:96:24:3A:EB:4A:BE:98:16:0C:44:63
            X509v3 Authority Key Identifier:
                keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:c6:2f:be:fa:44:f9:78:2a:ed:98:ec:29:a8:1f:0c:21:
         25:04:87:f9:2e:fb:26:3a:17:d3:2c:8c:4b:6a:f9:76:e5:40:
         f3:3b:aa:11:62:21:d9:27:3e:45:d5:30:53:b4:7e:18:b2:93:
         46:57:37:77:a3:fa:7b:54:b5:cc:2b:62:69:f4:9c:be:0e:03:
         9e:7f:66:35:c5:ee:83:ae:47:cf:7e:a3:27:23:9d:23:ec:5d:
         5b:91:62:9e:e0:22:36:a7:16:f5:e8:c9:06:26:0a:b6:78:a0:
         c1:63:64:d5:b1:d4:e9:9c:a0:ac:6a:22:f3:0d:88:d2:b1:e8:
         64:24:ac:b0:d5:77:fd:7b:a7:e0:10:20:b1:5b:2d:7a:14:9d:
         22:8b:52:bd:e0:21:58:5f:6d:c3:a0:31:c3:ab:e6:f1:82:a3:
         0c:8e:34:9d:0c:5d:a7:1a:b7:b0:02:0e:fd:bf:32:7f:44:bc:
         32:07:30:4c:d1:f8:ea:94:8a:55:81:77:d2:fe:cd:61:38:1b:
         24:0e:44:09:68:a7:be:e1:8d:31:20:83:c6:ca:45:c6:9e:8a:
         39:6f:d2:88:39:9d:26:7a:af:c7:b7:40:5c:7a:2c:4e:87:ce:
         f1:aa:ad:f2:4f:62:fd:39:ca:d4:85:7f:d7:1a:b3:9c:8f:07:
         ca:a1:c6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPM4Ws7D6Gx2JFBOkmZQMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh
MmQ2MTEwHhcNMjUwNjA4MTEwMTA1WhcNMjUwNjA5MTEwMTA1WjAzMTEwLwYDVQQD
EyhhYmNiNWI1ZTIyZWMwMDMzZGU5NjI0M2FlYjRhYmU5ODE2MGM0NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu58iYXHsKIURHagFgnf6dB/WVXRo
4+fGg9zpC5ic76gddiXDj9ApXRXpQDpQoC9k0iytIyV71zzLOrrcKQB+QqRkDMq1
cZ90iDO/BEF80z18vGiT29TYlL0yX5Q6cdyl5gdlJk4eI02mUW9NfARp8+UiUKVA
Zk69n5Jl//0DHXY1XsYBPpGPgqZLnVf9blNJBeWWsxljTQCZivLF5svZTr54RInx
2NzTdXWPCvY/1qW0s0sosB3oIYttG4/Dqj0w7rf2lgPGNhLCpcgNVzr0nTv2GgtP
wjUDXaJVvFrhxf3Tz6U9Fwk7Wtngj4rz6gScRHBqvHOuxSFGLRTHIijo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvLW14i7AAz3pYkOutKvpgWDERjMB8GA1UdIwQY
MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt
YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy
LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLHGL776
RPl4Ku2Y7CmoHwwhJQSH+S77JjoX0yyMS2r5duVA8zuqEWIh2Sc+RdUwU7R+GLKT
Rlc3d6P6e1S1zCtiafScvg4Dnn9mNcXug65Hz36jJyOdI+xdW5FinuAiNqcW9ejJ
BiYKtnigwWNk1bHU6ZygrGoi8w2I0rHoZCSssNV3/Xun4BAgsVstehSdIotSveAh
WF9tw6Axw6vm8YKjDI40nQxdpxq3sAIO/b8yf0S8MgcwTNH46pSKVYF30v7NYTgb
JA5ECWinvuGNMSCDxspFxp6KOW/SiDmdJnqvx7dAXHosTofO8aqt8k9i/TnK1IV/
1xqznI8HyqHG6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:27 2025 by rpki-client