Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          FYlodtlPmTxDS4Q7ROc17tKmWTQmAVIuOX65Dcuoji0=
Subject key identifier:   33:D9:42:C4:CF:14:1F:E4:77:EA:90:D1:B3:71:58:4A:C8:3E:E2:23
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       01975C4A2EB4835230C53CECB4CDAE8C23FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          1586
Signing time:             Wed 11 Jun 2025 00:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:54 +0000
Files and hashes:         1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: WR2pSMYLU65ZEGWxCUWj9y2fgjHn6+S0vdBqDQB6eIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:2e:b4:83:52:30:c5:3c:ec:b4:cd:ae:8c:23:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Jun 11 00:00:54 2025 GMT
            Not After : Jun 12 00:00:54 2025 GMT
        Subject: CN=33d942c4cf141fe477ea90d1b371584ac83ee223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:d3:08:a7:33:a0:43:bd:e9:20:d8:34:4f:
                    53:c8:62:07:aa:7a:55:11:27:93:30:14:be:05:8a:
                    a7:b3:3d:30:93:68:62:82:7a:81:bc:9d:22:c7:c4:
                    30:36:e4:f3:68:b8:99:25:c7:8a:b2:f1:cc:00:15:
                    2f:7c:b9:2c:b6:3e:06:7d:0d:56:51:67:0d:8d:26:
                    89:8f:42:d7:7d:55:52:95:fb:5e:a9:3b:9f:d0:f8:
                    0e:eb:b1:a6:73:8b:1c:3d:1e:67:82:7a:18:4f:5e:
                    d5:e9:8d:04:4a:99:d8:dd:2c:66:73:d6:17:c8:5e:
                    13:51:91:f1:06:7b:fb:eb:ce:66:ac:ed:b8:8e:29:
                    a6:76:4f:70:91:81:4e:bc:ef:85:da:11:ad:95:95:
                    8e:09:16:b9:2c:fe:b8:ef:ed:db:db:b7:44:37:a0:
                    8f:54:1b:ca:35:5c:b9:ad:8c:39:ff:5e:77:4e:c5:
                    ae:76:2f:e2:05:66:b5:de:26:20:d8:c9:44:da:17:
                    02:41:7a:20:c9:08:ee:a4:f3:bb:6b:78:47:37:2e:
                    bf:90:c2:c5:30:3f:55:24:94:e2:fb:df:49:6a:ef:
                    d5:1b:96:84:f3:27:7a:c1:94:c5:6f:f8:85:e8:ce:
                    62:d0:c6:4f:0e:ef:06:28:19:fe:c5:6e:58:b5:c7:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:42:C4:CF:14:1F:E4:77:EA:90:D1:B3:71:58:4A:C8:3E:E2:23
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:0e:91:ae:a4:d9:3c:48:b0:2c:e8:5e:3c:b7:a5:05:53:
         66:c1:67:b2:3a:87:ea:e5:40:c9:bd:9a:57:46:c6:25:51:90:
         dd:9f:da:4a:eb:c0:65:05:95:11:64:82:9d:57:be:66:f7:c8:
         c5:3e:d5:61:b8:53:9d:9f:ea:b2:82:cc:7b:ab:70:70:50:4e:
         c2:99:b2:2f:19:88:d8:6d:43:61:00:6c:f6:06:d5:1f:10:01:
         6a:04:1a:dc:a6:0b:46:0c:19:c2:bf:2a:53:21:f9:45:19:ea:
         3a:70:be:69:3b:f6:51:04:13:d4:36:6e:7b:3d:61:8c:4c:9d:
         fa:58:26:e4:31:4f:29:95:93:5d:7a:01:91:1b:aa:9e:88:64:
         5b:23:bf:b5:7b:74:30:8a:0f:04:0f:33:91:ff:08:fb:2c:87:
         5e:83:15:7d:45:bb:19:44:36:58:0e:9d:a8:fb:81:51:6a:e3:
         f0:7d:96:31:34:57:f2:41:67:3d:59:48:71:2a:e9:3c:75:4e:
         fd:e6:e8:ec:f2:3f:71:0c:c0:09:59:bd:6e:95:20:08:b4:61:
         33:e3:9f:a0:54:84:03:94:b9:89:db:76:2c:a0:71:5b:35:11:
         df:fc:16:8d:e1:d0:17:f5:4d:32:aa:33:ce:20:c8:9e:78:e4:
         dd:83:38:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcSi60g1IwxTzstM2ujCP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0
OTQyMGUwHhcNMjUwNjExMDAwMDU0WhcNMjUwNjEyMDAwMDU0WjAzMTEwLwYDVQQD
EygzM2Q5NDJjNGNmMTQxZmU0NzdlYTkwZDFiMzcxNTg0YWM4M2VlMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/nTCKczoEO96SDYNE9TyGIHqnpV
ESeTMBS+BYqnsz0wk2hignqBvJ0ix8QwNuTzaLiZJceKsvHMABUvfLkstj4GfQ1W
UWcNjSaJj0LXfVVSlfteqTuf0PgO67Gmc4scPR5ngnoYT17V6Y0ESpnY3Sxmc9YX
yF4TUZHxBnv7685mrO24jimmdk9wkYFOvO+F2hGtlZWOCRa5LP647+3b27dEN6CP
VBvKNVy5rYw5/153TsWudi/iBWa13iYg2MlE2hcCQXogyQjupPO7a3hHNy6/kMLF
MD9VJJTi+99Jau/VG5aE8yd6wZTFb/iF6M5i0MZPDu8GKBn+xW5YtcfOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPZQsTPFB/kd+qQ0bNxWErIPuIjMB8GA1UdIwQY
MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt
OTkwMzA3ZDIwM2M4LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4
LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmwOka6k
2TxIsCzoXjy3pQVTZsFnsjqH6uVAyb2aV0bGJVGQ3Z/aSuvAZQWVEWSCnVe+ZvfI
xT7VYbhTnZ/qsoLMe6twcFBOwpmyLxmI2G1DYQBs9gbVHxABagQa3KYLRgwZwr8q
UyH5RRnqOnC+aTv2UQQT1DZuez1hjEyd+lgm5DFPKZWTXXoBkRuqnohkWyO/tXt0
MIoPBA8zkf8I+yyHXoMVfUW7GUQ2WA6dqPuBUWrj8H2WMTRX8kFnPVlIcSrpPHVO
/ebo7PI/cQzACVm9bpUgCLRhM+OfoFSEA5S5idt2LKBxWzUR3/wWjeHQF/VNMqoz
ziDInnjk3YM4Lw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:22:36 2025 by rpki-client