Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File:                     Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier:          5W0lzQsARmCcT7QR//b5vucUpiXoLsj9in7hSBR1oLA=
Subject key identifier:   BC:2A:FD:2E:F5:0F:3C:70:74:DE:3D:6A:35:40:FF:D3:68:CF:7B:DE
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       019751FD8507BD73F83947D647E6745C44BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number:          1582
Signing time:             Mon 09 Jun 2025 00:00:58 +0000
Manifest this update:     Mon 09 Jun 2025 00:00:58 +0000
Manifest next update:     Tue 10 Jun 2025 00:00:58 +0000
Files and hashes:         1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=)
                          2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: cBw6VHaKfxyZIWR7txmFg4KOYQHTHae9LSJTeNYrkpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:fd:85:07:bd:73:f8:39:47:d6:47:e6:74:5c:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: Jun  9 00:00:58 2025 GMT
            Not After : Jun 10 00:00:58 2025 GMT
        Subject: CN=bc2afd2ef50f3c7074de3d6a3540ffd368cf7bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:a2:97:34:85:57:e6:ae:61:bb:04:bb:16:
                    1b:45:42:9c:90:2f:b4:3b:78:48:af:35:a9:1c:fb:
                    a3:af:13:d3:f1:dc:8b:85:b7:ea:2e:06:d1:21:bd:
                    73:57:bc:d4:21:b8:16:dc:95:ae:82:89:59:a5:c5:
                    ae:ab:d5:61:e5:67:45:c8:d6:b0:47:0a:a1:47:7b:
                    58:96:b0:6d:39:a6:8e:41:fb:be:79:68:a0:b7:a2:
                    bc:69:23:ab:fb:46:ff:96:3f:d2:56:09:31:64:e6:
                    19:f7:b4:18:4c:33:a7:19:28:00:03:2c:2f:19:f5:
                    f4:c4:34:eb:c7:8f:27:de:dd:a1:5a:e9:02:c4:b3:
                    00:ab:78:c4:fa:cf:8a:21:48:aa:85:07:d4:ee:23:
                    ef:97:79:1b:95:70:f6:ce:af:93:10:20:fa:ec:1f:
                    a2:81:26:c0:0d:dd:70:fd:8a:e5:cb:97:c3:05:df:
                    eb:e5:5e:8f:5a:7b:fa:8a:fb:9b:e4:cd:a2:38:df:
                    c8:96:69:18:a5:23:74:79:5d:93:c9:de:0d:44:dc:
                    8b:d2:7e:08:c8:8a:84:15:14:97:a0:06:b7:90:d5:
                    40:d0:22:08:ba:fd:39:09:51:f5:a3:6f:af:f9:5e:
                    9f:e2:e7:de:31:75:6c:bd:dc:a0:ca:b8:5a:56:20:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2A:FD:2E:F5:0F:3C:70:74:DE:3D:6A:35:40:FF:D3:68:CF:7B:DE
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:9e:d0:b0:60:e5:b2:15:e3:ce:a3:db:6a:1f:4c:21:85:
         c2:91:01:39:01:79:5b:66:ff:18:41:74:f3:0a:bc:f1:04:f3:
         2d:8f:88:a5:02:59:05:4a:c3:5b:11:df:ed:ff:c6:61:63:1b:
         53:6b:0f:3d:3c:9b:a9:ad:05:42:28:7a:a2:17:93:83:67:df:
         2a:d3:a8:9a:73:7e:d9:74:a4:78:67:24:c1:b2:c8:91:0f:70:
         14:80:37:80:34:e0:6e:c8:c0:81:6e:2b:9a:2d:1a:1e:1b:c8:
         fe:95:aa:b0:6a:d8:09:95:26:49:74:28:6d:2f:f3:2a:89:87:
         9a:0f:30:09:92:88:2b:ba:27:8f:10:00:34:10:79:2f:8d:62:
         74:ff:92:e8:fa:9a:00:d7:ce:b0:85:4e:9a:61:5e:60:92:91:
         72:3f:83:eb:a4:ff:8a:44:e2:60:21:39:36:e6:86:e0:e8:45:
         96:97:6f:d9:10:59:5f:be:0e:b1:83:3a:af:b4:c0:80:c8:47:
         fe:af:bf:eb:16:5f:1f:73:cb:69:3e:2f:df:1c:06:ac:11:80:
         d0:6b:ef:88:30:3d:d9:08:c9:5f:3a:ae:44:43:0f:bc:39:e9:
         2e:45:58:62:4a:3d:ed:3a:83:25:5f:37:56:9f:b3:5b:16:0f:
         f2:cc:f9:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/YUHvXP4OUfWR+Z0XES8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWY0ZjcxNDNiNDA2NzgwNWNiYTlhNDBmNjM5NzMyZWU3
ZDQyZTUwHhcNMjUwNjA5MDAwMDU4WhcNMjUwNjEwMDAwMDU4WjAzMTEwLwYDVQQD
EyhiYzJhZmQyZWY1MGYzYzcwNzRkZTNkNmEzNTQwZmZkMzY4Y2Y3YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDOilzSFV+auYbsEuxYbRUKckC+0
O3hIrzWpHPujrxPT8dyLhbfqLgbRIb1zV7zUIbgW3JWugolZpcWuq9Vh5WdFyNaw
RwqhR3tYlrBtOaaOQfu+eWigt6K8aSOr+0b/lj/SVgkxZOYZ97QYTDOnGSgAAywv
GfX0xDTrx48n3t2hWukCxLMAq3jE+s+KIUiqhQfU7iPvl3kblXD2zq+TECD67B+i
gSbADd1w/Yrly5fDBd/r5V6PWnv6ivub5M2iON/IlmkYpSN0eV2Tyd4NRNyL0n4I
yIqEFRSXoAa3kNVA0CIIuv05CVH1o2+v+V6f4ufeMXVsvdygyrhaViA1WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwq/S71DzxwdN49ajVA/9Noz3veMB8GA1UdIwQY
MBaAFCafT3FDtAZ4BcuppA9jlzLufULlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYt
OTJjNzgwY2EzMjYwLzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYtOTJjNzgwY2EzMjYw
LzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ae0LBg
5bIV486j22ofTCGFwpEBOQF5W2b/GEF08wq88QTzLY+IpQJZBUrDWxHf7f/GYWMb
U2sPPTybqa0FQih6oheTg2ffKtOomnN+2XSkeGckwbLIkQ9wFIA3gDTgbsjAgW4r
mi0aHhvI/pWqsGrYCZUmSXQobS/zKomHmg8wCZKIK7onjxAANBB5L41idP+S6Pqa
ANfOsIVOmmFeYJKRcj+D66T/ikTiYCE5NuaG4OhFlpdv2RBZX74OsYM6r7TAgMhH
/q+/6xZfH3PLaT4v3xwGrBGA0GvviDA92QjJXzquREMPvDnpLkVYYko97TqDJV83
Vp+zWxYP8sz5tw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:18 2025 by rpki-client