Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          KBp5usfuIsRagYnhelMut8Iyu8aRbQHkNuslNEn8WOo=
Subject key identifier:   AB:82:EC:2A:B0:43:C0:4B:B7:1E:B9:70:C6:0A:F1:8A:7D:21:A8:DD
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       0197477A08E032036167CAAEB8030F302FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          1580
Signing time:             Fri 06 Jun 2025 23:01:09 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:09 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:09 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: YrCCYLchQB5f2VSJL4FXdC97b+PSbhzf2l976mV4NiQ=)
                          2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=)
                          3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=)
                          4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=)
                          5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=)
                          6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=)
                          7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=)
                          8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=)
                          9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=)
                          10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:08:e0:32:03:61:67:ca:ae:b8:03:0f:30:2f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Jun  6 23:01:09 2025 GMT
            Not After : Jun  7 23:01:09 2025 GMT
        Subject: CN=ab82ec2ab043c04bb71eb970c60af18a7d21a8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:50:04:68:78:74:38:b0:fc:29:c6:16:a7:
                    8a:49:3d:8c:ad:d7:ac:ee:c7:3a:6a:d7:fd:66:13:
                    2a:f9:d2:b4:36:a2:6b:9f:c4:d0:48:e5:25:e8:a0:
                    de:8d:4b:07:c5:02:87:55:de:ab:a3:82:35:d2:fc:
                    dc:5d:69:ff:44:a4:7d:57:d5:74:ee:b0:9a:50:57:
                    a5:ec:5a:d5:63:18:38:dc:31:11:b0:70:65:2e:a5:
                    be:91:e6:9d:e1:2c:6b:3f:5e:c4:e3:e0:4c:68:5a:
                    e2:ba:dc:2a:b8:d7:80:da:81:03:bb:c7:30:2a:0b:
                    bd:ec:9f:00:86:fd:82:92:04:88:2c:e5:d6:36:71:
                    c8:1f:c9:5f:ab:8e:0e:86:b9:41:26:82:2c:a8:5d:
                    19:7c:38:27:4d:3e:d2:be:58:d9:d0:9a:b0:3d:d8:
                    80:ba:50:d2:7f:8e:99:04:ef:ea:45:85:12:fe:e0:
                    69:8e:12:f9:4f:95:f5:1f:af:88:ab:61:e2:3d:26:
                    05:e6:2f:09:29:76:9f:26:29:f6:a0:72:0a:c0:98:
                    dc:d8:53:83:73:8a:2b:e0:2a:f5:b3:68:77:6e:63:
                    de:70:a2:dd:01:e6:e2:54:b9:2a:25:a7:d9:f5:4b:
                    84:22:45:34:bf:b5:31:e1:ed:a0:ec:f0:b0:1b:22:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:EC:2A:B0:43:C0:4B:B7:1E:B9:70:C6:0A:F1:8A:7D:21:A8:DD
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:b0:62:c1:51:ce:3f:6a:48:e6:d7:ad:11:a5:11:92:09:
         22:0b:f6:6a:b8:05:05:97:a9:fb:b1:06:5e:b5:47:38:07:dd:
         0b:69:a6:29:7b:28:0b:db:14:04:92:5b:4b:8b:bf:4b:24:a8:
         0f:d4:4a:61:93:62:4a:77:d1:f5:a0:c8:c4:f8:d2:e3:fb:06:
         3b:34:d9:36:3b:71:2a:40:4e:7f:a5:36:52:0a:62:68:ab:e0:
         a7:1f:8b:ea:0c:3e:d8:54:4b:78:f5:bc:b8:b1:a3:f2:ff:e0:
         c6:c3:8e:97:10:e2:c7:29:26:e9:4e:0e:0f:f4:f7:e8:23:17:
         1a:c0:27:a3:a3:e4:d6:52:8d:6f:23:a8:35:a3:52:5a:ee:e1:
         6e:1c:0f:30:e3:71:7f:10:d5:f4:0d:c8:b6:b6:b3:12:c2:74:
         ff:a0:93:b9:99:90:52:2d:fa:b7:44:16:4a:72:8b:e8:47:1c:
         fd:7e:11:ac:35:09:07:0b:17:f0:2d:6a:e2:80:f8:1d:95:0f:
         81:65:b6:2c:db:ab:f1:ad:99:49:31:f6:0d:06:b8:8f:fa:fe:
         4a:3d:f4:b1:27:de:6b:9f:43:fd:e3:9e:df:e0:25:8e:23:f3:
         da:8b:a2:b4:9e:8e:56:3b:62:19:55:55:fb:77:b5:6c:e2:f5:
         3a:a0:79:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdHegjgMgNhZ8quuAMPMC/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw
OGNkNGEwHhcNMjUwNjA2MjMwMTA5WhcNMjUwNjA3MjMwMTA5WjAzMTEwLwYDVQQD
EyhhYjgyZWMyYWIwNDNjMDRiYjcxZWI5NzBjNjBhZjE4YTdkMjFhOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4dQBGh4dDiw/CnGFqeKST2Mrdes
7sc6atf9ZhMq+dK0NqJrn8TQSOUl6KDejUsHxQKHVd6ro4I10vzcXWn/RKR9V9V0
7rCaUFel7FrVYxg43DERsHBlLqW+kead4SxrP17E4+BMaFriutwquNeA2oEDu8cw
Kgu97J8Ahv2CkgSILOXWNnHIH8lfq44OhrlBJoIsqF0ZfDgnTT7SvljZ0JqwPdiA
ulDSf46ZBO/qRYUS/uBpjhL5T5X1H6+Iq2HiPSYF5i8JKXafJin2oHIKwJjc2FOD
c4or4Cr1s2h3bmPecKLdAebiVLkqJafZ9UuEIkU0v7Ux4e2g7PCwGyJf4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKuC7CqwQ8BLtx65cMYK8Yp9IajdMB8GA1UdIwQY
MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm
LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi
ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk2w
YsFRzj9qSObXrRGlEZIJIgv2argFBZep+7EGXrVHOAfdC2mmKXsoC9sUBJJbS4u/
SySoD9RKYZNiSnfR9aDIxPjS4/sGOzTZNjtxKkBOf6U2UgpiaKvgpx+L6gw+2FRL
ePW8uLGj8v/gxsOOlxDixykm6U4OD/T36CMXGsAno6Pk1lKNbyOoNaNSWu7hbhwP
MONxfxDV9A3ItrazEsJ0/6CTuZmQUi36t0QWSnKL6Ecc/X4RrDUJBwsX8C1q4oD4
HZUPgWW2LNur8a2ZSTH2DQa4j/r+Sj30sSfea59D/eOe3+AljiPz2ouitJ6OVjti
GVVV+3e1bOL1OqB56g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:30 2025 by rpki-client