Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File:                     7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier:          uQfotJnmLFzU93jR64NtHIwScRlur+f+N9Tg1Pbify8=
Subject key identifier:   D4:CB:5F:53:20:42:D6:2F:B2:C0:68:A8:D9:6D:7D:84:70:D3:24:A1
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer:       /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial:       01975647E946E8E8E1A8573C44FAF798B38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number:          1586
Signing time:             Mon 09 Jun 2025 20:00:42 +0000
Manifest this update:     Mon 09 Jun 2025 20:00:42 +0000
Manifest next update:     Tue 10 Jun 2025 20:00:42 +0000
Files and hashes:         1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: zah9oY3yILyNLoN9Ggj5uLomQc57mQq1yhVy4y7ZcZg=)
                          2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
                          3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:47:e9:46:e8:e8:e1:a8:57:3c:44:fa:f7:98:b3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
        Validity
            Not Before: Jun  9 20:00:42 2025 GMT
            Not After : Jun 10 20:00:42 2025 GMT
        Subject: CN=d4cb5f532042d62fb2c068a8d96d7d8470d324a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:aa:da:0d:20:23:92:c6:68:12:87:0b:58:
                    7f:44:7f:ad:01:2a:7f:c7:de:01:d2:cf:d1:9e:99:
                    8c:a9:46:dc:b9:60:28:d1:49:bd:25:a9:be:eb:a6:
                    52:ca:3d:b8:94:79:04:d9:73:d9:da:cf:a5:ff:54:
                    cc:9e:b7:2f:b5:e2:20:e5:a3:3a:fa:2d:48:da:76:
                    60:18:72:e3:15:fe:73:fb:08:40:39:2f:0b:a3:3d:
                    55:d3:74:67:ce:ed:e1:59:2f:1f:8f:5a:fd:a3:35:
                    68:bc:65:fc:76:2e:0e:0f:91:c3:fb:cc:87:47:cd:
                    92:73:31:12:83:8a:15:27:b6:77:da:a9:e3:fd:c1:
                    9e:24:4c:4f:5d:9e:a7:a9:ae:83:04:0b:41:27:34:
                    ba:c2:6d:ed:a7:ed:83:ed:7e:12:43:7d:f0:1a:74:
                    9f:67:c9:28:b0:4f:cb:b8:53:05:4e:28:9f:b5:11:
                    bb:39:e3:8b:0f:36:c2:64:69:0b:bf:7d:39:25:93:
                    a6:ea:e3:70:c7:5c:cb:fe:d9:23:0c:d3:a1:fd:71:
                    52:ad:e2:0f:b7:6a:d8:22:8f:de:ac:70:32:70:8c:
                    37:47:5a:0c:e7:b6:dd:e0:ed:a6:67:a5:e7:0f:a3:
                    e9:e5:34:cb:11:30:08:9a:37:5d:8f:f2:1b:61:71:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CB:5F:53:20:42:D6:2F:B2:C0:68:A8:D9:6D:7D:84:70:D3:24:A1
            X509v3 Authority Key Identifier:
                keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:4f:30:8b:5c:6b:0b:bd:6f:af:62:73:fc:b1:0d:fd:2b:
         f0:67:bf:49:63:d1:36:15:d1:58:a1:81:37:80:cc:33:be:d2:
         91:03:06:7a:bf:44:5b:c0:4f:ea:cf:df:56:16:50:b1:cd:36:
         fc:74:5e:99:95:d3:b5:c9:18:23:31:ef:0b:ea:96:84:79:21:
         16:5c:6c:2f:6b:32:b5:08:5f:2b:00:b1:96:41:9e:b5:fb:cd:
         40:6e:56:cb:70:f3:93:f4:f3:66:d4:e5:8c:e4:7a:70:0b:5c:
         5f:68:7a:e8:6b:a7:78:e4:b4:19:ca:90:40:c7:d4:6f:64:b5:
         57:84:24:5a:d2:06:a8:51:bf:65:02:7f:7f:98:f7:0d:13:91:
         68:1d:82:c1:19:5a:dd:22:42:54:74:f8:2d:96:d6:b6:84:ea:
         aa:5f:c0:8b:47:aa:35:c5:cb:e8:a2:81:44:c2:95:1f:4f:05:
         2f:57:a9:ba:7c:db:7a:94:cb:a9:8e:39:6c:dd:0d:53:a7:a3:
         e1:53:14:7f:53:c8:12:9d:c2:c5:b8:80:0c:9e:84:88:6c:d8:
         5e:a4:23:a7:2d:09:5d:e2:56:9f:4f:5c:be:5b:fa:50:c1:74:
         42:eb:93:03:bf:79:f6:20:f4:78:f6:ef:e8:b7:0b:b1:44:cf:
         8d:08:97:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdWR+lG6OjhqFc8RPr3mLOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1
NTlkMTQwHhcNMjUwNjA5MjAwMDQyWhcNMjUwNjEwMjAwMDQyWjAzMTEwLwYDVQQD
EyhkNGNiNWY1MzIwNDJkNjJmYjJjMDY4YThkOTZkN2Q4NDcwZDMyNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaq2g0gI5LGaBKHC1h/RH+tASp/
x94B0s/RnpmMqUbcuWAo0Um9Jam+66ZSyj24lHkE2XPZ2s+l/1TMnrcvteIg5aM6
+i1I2nZgGHLjFf5z+whAOS8Loz1V03Rnzu3hWS8fj1r9ozVovGX8di4OD5HD+8yH
R82SczESg4oVJ7Z32qnj/cGeJExPXZ6nqa6DBAtBJzS6wm3tp+2D7X4SQ33wGnSf
Z8kosE/LuFMFTiiftRG7OeOLDzbCZGkLv305JZOm6uNwx1zL/tkjDNOh/XFSreIP
t2rYIo/erHAycIw3R1oM57bd4O2mZ6XnD6Pp5TTLETAImjddj/IbYXEF2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTLX1MgQtYvssBoqNltfYRw0yShMB8GA1UdIwQY
MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt
MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm
LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHRPMItc
awu9b69ic/yxDf0r8Ge/SWPRNhXRWKGBN4DMM77SkQMGer9EW8BP6s/fVhZQsc02
/HRemZXTtckYIzHvC+qWhHkhFlxsL2sytQhfKwCxlkGetfvNQG5Wy3Dzk/TzZtTl
jOR6cAtcX2h66GuneOS0GcqQQMfUb2S1V4QkWtIGqFG/ZQJ/f5j3DRORaB2CwRla
3SJCVHT4LZbWtoTqql/Ai0eqNcXL6KKBRMKVH08FL1epunzbepTLqY45bN0NU6ej
4VMUf1PIEp3CxbiADJ6EiGzYXqQjpy0JXeJWn09cvlv6UMF0QuuTA7959iD0ePbv
6LcLsUTPjQiXEQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 01:07:15 2025 by rpki-client