Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          D5Eij02n9lkMVEN7Qr+em5ddfxaOmr4CLi/WH+qs99o=
Subject key identifier:   CA:35:54:68:DA:1D:E6:45:95:F3:DD:86:64:D9:33:47:CA:6E:1A:99
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       01975F81CD71BD8DB7E5C273044F8D0A897A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 15:00:31 +0000
Manifest this update:     Wed 11 Jun 2025 15:00:31 +0000
Manifest next update:     Thu 12 Jun 2025 15:00:31 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: 9h3yt4dyh5T6IW012cC/oNhkKjcnmwzgX5SjFPOqa+E=)
                          2: ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (hash: TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=)
                          3: y9Bh0m6kauwP6kD0s73D8-vrbVM.roa (hash: fBYPL7fiPGaFShtarMcQPH8FKsxoKQThi2vjq34Xkk8=)
                          4: yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa (hash: XOXs8qRUtBdFjA6Dpn1zPYBHYPckC8k/wFskDMsHcgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:81:cd:71:bd:8d:b7:e5:c2:73:04:4f:8d:0a:89:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jun 11 15:00:31 2025 GMT
            Not After : Jun 12 15:00:31 2025 GMT
        Subject: CN=ca355468da1de64595f3dd8664d93347ca6e1a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:8f:1d:be:e6:d3:44:96:21:18:bf:56:2f:
                    94:7f:f2:74:c1:57:96:79:2d:76:12:60:8f:6b:ac:
                    b4:ba:65:c2:06:54:b7:a6:f0:42:9d:f3:b5:ec:aa:
                    50:d4:7d:a8:c5:c3:48:3d:50:17:4e:ad:c6:a5:82:
                    4c:1d:dd:e1:17:4b:d9:ba:de:0e:42:06:3a:38:fd:
                    8a:89:ab:86:95:c4:99:9c:6a:2b:fb:9b:b0:52:0c:
                    6b:9f:7c:37:f8:d4:9e:7c:f5:5e:f4:c8:f2:0f:03:
                    f2:22:0e:57:02:6a:90:ed:f2:57:b6:e1:f6:f0:ad:
                    e8:4b:7f:47:ab:68:47:de:7a:5f:5f:97:5a:d0:82:
                    d9:86:2c:6f:d3:30:58:5c:a4:b5:0b:d5:d4:8f:31:
                    b8:2b:63:bd:b6:83:61:bc:13:d1:09:25:34:b8:5d:
                    12:41:64:06:b7:93:3a:bf:4c:6f:e2:42:b3:4d:af:
                    b8:8c:7e:23:ea:7d:88:5c:cd:65:4b:fe:74:f9:e6:
                    ea:c0:56:f2:dc:08:cd:9c:e4:ef:d0:43:46:00:43:
                    fe:37:cb:93:01:7a:d2:ba:c4:92:c3:c2:f5:44:1e:
                    58:ef:ef:02:3e:66:f7:ca:fd:9f:59:b6:6e:e8:ff:
                    af:54:f8:f4:d0:81:02:36:c3:76:8d:5c:49:52:2f:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:54:68:DA:1D:E6:45:95:F3:DD:86:64:D9:33:47:CA:6E:1A:99
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:62:16:ad:15:e3:d7:ad:61:71:c3:47:3e:ab:be:04:7c:
         f5:3a:52:b8:2a:6d:31:28:58:05:31:15:a1:88:f6:01:9f:c7:
         6a:2d:89:62:e3:51:e7:66:52:2c:e4:1d:a9:d5:b8:47:ad:13:
         8d:07:6c:4c:1e:1b:ee:b2:7a:81:12:db:a9:a5:ac:05:cc:1a:
         a2:b8:8d:95:97:7a:87:8d:bb:3d:2c:0c:75:2d:48:0f:2e:13:
         c9:d3:86:8c:02:b6:f0:84:3a:ff:c6:d2:31:59:d8:85:a2:ba:
         9b:2f:38:38:bd:3c:49:0d:82:da:4f:36:94:e8:5b:c0:c3:aa:
         47:95:1e:27:e5:a1:a7:70:3e:3b:10:3f:d9:b0:bc:60:2b:d9:
         1f:8b:a7:35:d0:43:99:f1:9d:ed:c9:4a:97:6f:03:ba:94:28:
         77:10:f7:45:6a:80:4f:5d:7a:4c:8e:27:c5:48:92:e8:fe:09:
         96:98:9f:37:95:63:9d:8a:e6:65:3d:1e:35:e3:c2:be:9a:b6:
         70:0e:96:b4:98:6f:bf:dd:56:5d:1c:df:82:21:e7:f1:f1:7b:
         1e:45:ae:6d:64:ee:ae:35:c3:7e:3f:2f:6f:de:93:b9:90:a7:
         e7:81:d4:37:df:57:d2:4c:c7:a6:ea:ef:2a:ce:b2:d5:c9:79:
         27:32:1f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfgc1xvY235cJzBE+NCol6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi
YWY2ZGUwHhcNMjUwNjExMTUwMDMxWhcNMjUwNjEyMTUwMDMxWjAzMTEwLwYDVQQD
EyhjYTM1NTQ2OGRhMWRlNjQ1OTVmM2RkODY2NGQ5MzM0N2NhNmUxYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN2PHb7m00SWIRi/Vi+Uf/J0wVeW
eS12EmCPa6y0umXCBlS3pvBCnfO17KpQ1H2oxcNIPVAXTq3GpYJMHd3hF0vZut4O
QgY6OP2KiauGlcSZnGor+5uwUgxrn3w3+NSefPVe9MjyDwPyIg5XAmqQ7fJXtuH2
8K3oS39Hq2hH3npfX5da0ILZhixv0zBYXKS1C9XUjzG4K2O9toNhvBPRCSU0uF0S
QWQGt5M6v0xv4kKzTa+4jH4j6n2IXM1lS/50+ebqwFby3AjNnOTv0ENGAEP+N8uT
AXrSusSSw8L1RB5Y7+8CPmb3yv2fWbZu6P+vVPj00IECNsN2jVxJUi++BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo1VGjaHeZFlfPdhmTZM0fKbhqZMB8GA1UdIwQY
MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt
OGJjYTI3Y2IzMGMwLzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw
LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7hiFq0V
49etYXHDRz6rvgR89TpSuCptMShYBTEVoYj2AZ/Hai2JYuNR52ZSLOQdqdW4R60T
jQdsTB4b7rJ6gRLbqaWsBcwaoriNlZd6h427PSwMdS1IDy4TydOGjAK28IQ6/8bS
MVnYhaK6my84OL08SQ2C2k82lOhbwMOqR5UeJ+Whp3A+OxA/2bC8YCvZH4unNdBD
mfGd7clKl28DupQodxD3RWqAT116TI4nxUiS6P4JlpifN5VjnYrmZT0eNePCvpq2
cA6WtJhvv91WXRzfgiHn8fF7HkWubWTurjXDfj8vb96TuZCn54HUN99X0kzHpurv
Ks6y1cl5JzIfpg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:44:10 2025 by rpki-client