Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File:                     71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier:          zWyqTbpTP4slmGKftT8gme+p1cQWM9axfM5nTlp+grQ=
Subject key identifier:   38:3F:5A:18:21:B6:D7:BF:AD:AC:FF:63:A5:33:87:B7:CF:1B:D5:86
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer:       /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial:       01976E877AF6AC448B894F3D4DA55A76F040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 13:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:01 +0000
Files and hashes:         1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: gKo0thd9NQhJEqKkklSMbJx/6QNMeO/Hjs8n1UQVqpA=)
                          2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
                          3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:7a:f6:ac:44:8b:89:4f:3d:4d:a5:5a:76:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
        Validity
            Not Before: Jun 14 13:01:01 2025 GMT
            Not After : Jun 15 13:01:01 2025 GMT
        Subject: CN=383f5a1821b6d7bfadacff63a53387b7cf1bd586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:86:1b:c9:2d:1b:b4:41:5e:98:41:49:df:
                    5b:e8:a5:fa:dc:71:fa:22:fa:1c:1f:5f:e6:d7:0c:
                    48:9f:5b:be:56:49:cb:8d:60:43:6c:d7:ec:10:89:
                    cc:2a:02:d1:d6:c6:a6:ba:6a:32:30:5b:f5:2b:89:
                    55:d1:26:65:94:4a:db:86:b2:e2:9d:5e:4c:7f:9f:
                    1d:56:fb:cc:d6:9b:c6:17:66:0b:15:e4:dd:6a:dd:
                    94:dd:ad:35:99:38:99:39:ee:12:08:03:d9:a8:87:
                    5f:57:f3:e1:cd:4c:f0:5d:9a:c1:95:75:6f:bc:08:
                    53:ad:08:01:82:9b:54:1f:58:ab:d7:36:9b:ec:74:
                    30:5a:93:ee:4b:d6:d7:bb:4e:1a:79:c3:a7:23:19:
                    b6:b0:b8:5f:32:b2:a1:68:d1:37:56:b5:8a:92:ec:
                    cc:0c:6d:9f:52:15:c8:77:de:64:75:d1:e2:3c:64:
                    a3:29:f2:56:c6:6f:24:23:10:0f:e8:e4:96:51:32:
                    8e:64:cc:e4:c0:ca:69:80:1c:65:74:64:dd:5f:06:
                    53:1d:72:3e:63:be:70:e8:18:62:58:9c:a6:f2:12:
                    c9:15:e7:35:2a:42:49:d7:dc:08:bc:03:46:a8:ec:
                    1f:c4:03:56:12:91:a7:c5:2f:54:f4:d7:26:41:20:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3F:5A:18:21:B6:D7:BF:AD:AC:FF:63:A5:33:87:B7:CF:1B:D5:86
            X509v3 Authority Key Identifier:
                keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:25:d1:7e:29:0f:11:b2:54:26:23:7b:4e:2e:d6:c6:cc:
         7a:07:5b:64:7f:40:b1:cd:e4:dc:19:b6:78:3f:29:f4:5b:6e:
         cc:cd:15:b8:aa:eb:3e:bc:b1:c1:95:3b:65:ea:3e:c4:c0:d2:
         c9:96:07:de:0b:79:8e:88:41:55:b3:83:ec:2f:e0:1c:bb:61:
         17:f6:7c:fd:fc:8c:82:f6:f4:53:af:ad:f5:b2:7a:59:91:fa:
         8c:11:4c:4b:cf:4e:8d:77:7f:53:24:a1:45:4d:6c:de:a4:83:
         d2:b2:f4:45:00:3d:f8:f1:97:47:0c:d5:20:eb:14:55:76:4a:
         ce:e2:f2:e8:af:59:28:a1:a9:2f:5a:e3:f8:56:1f:24:8d:05:
         6b:d2:1e:d9:c5:75:f1:8e:41:64:0f:61:b0:9e:9f:08:5a:d0:
         c9:79:32:df:f5:68:e3:e3:72:71:ef:1a:a5:a9:10:02:16:f4:
         1f:4c:5a:f8:9f:d2:41:87:de:51:fc:35:c3:00:94:65:1c:8d:
         eb:ec:8c:23:c4:9f:e0:96:87:b0:00:26:fe:e6:bb:bc:f4:8e:
         5d:4b:03:a7:2e:0b:57:d6:12:22:db:18:8c:ec:84:ba:56:66:
         14:ef:05:5c:a0:87:99:f1:c4:1d:45:ce:ae:83:f9:f7:cb:ee:
         04:61:ff:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh3r2rESLiU89TaVadvBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjUwNjE0MTMwMTAxWhcNMjUwNjE1MTMwMTAxWjAzMTEwLwYDVQQD
EygzODNmNWExODIxYjZkN2JmYWRhY2ZmNjNhNTMzODdiN2NmMWJkNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomWGG8ktG7RBXphBSd9b6KX63HH6
IvocH1/m1wxIn1u+VknLjWBDbNfsEInMKgLR1samumoyMFv1K4lV0SZllErbhrLi
nV5Mf58dVvvM1pvGF2YLFeTdat2U3a01mTiZOe4SCAPZqIdfV/PhzUzwXZrBlXVv
vAhTrQgBgptUH1ir1zab7HQwWpPuS9bXu04aecOnIxm2sLhfMrKhaNE3VrWKkuzM
DG2fUhXId95kddHiPGSjKfJWxm8kIxAP6OSWUTKOZMzkwMppgBxldGTdXwZTHXI+
Y75w6BhiWJym8hLJFec1KkJJ19wIvANGqOwfxANWEpGnxS9U9NcmQSDdfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg/Whghtte/raz/Y6Uzh7fPG9WGMB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApsl0X4p
DxGyVCYje04u1sbMegdbZH9Asc3k3Bm2eD8p9FtuzM0VuKrrPryxwZU7Zeo+xMDS
yZYH3gt5johBVbOD7C/gHLthF/Z8/fyMgvb0U6+t9bJ6WZH6jBFMS89OjXd/UySh
RU1s3qSD0rL0RQA9+PGXRwzVIOsUVXZKzuLy6K9ZKKGpL1rj+FYfJI0Fa9Ie2cV1
8Y5BZA9hsJ6fCFrQyXky3/Vo4+Nyce8apakQAhb0H0xa+J/SQYfeUfw1wwCUZRyN
6+yMI8Sf4JaHsAAm/ua7vPSOXUsDpy4LV9YSItsYjOyEulZmFO8FXKCHmfHEHUXO
roP598vuBGH/kg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:12:42 2025 by rpki-client