Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          CL7ioKjB7KdSxjIj6n53eAx3dgfzoMUbPbqp6YxICz4=
Subject key identifier:   90:64:91:4B:3D:F7:FA:11:CF:42:4C:EC:1B:12:A0:F1:91:9E:9A:3C
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       01976D744DFC3C66E6AFB3DBC7E72ADD072A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 08:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:28 +0000
Files and hashes:         1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: Dj7tn/BauOlCmkGaojX8NMcNqa3zQkWI4HR6+elmQY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:4d:fc:3c:66:e6:af:b3:db:c7:e7:2a:dd:07:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Jun 14 08:00:28 2025 GMT
            Not After : Jun 15 08:00:28 2025 GMT
        Subject: CN=9064914b3df7fa11cf424cec1b12a0f1919e9a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:0e:ef:96:e3:02:2f:ea:4b:c7:4b:d8:c2:
                    8b:7b:8b:c8:07:d4:08:75:d7:52:fc:e3:7c:4e:fe:
                    7d:fc:ee:12:85:26:11:0e:6b:92:bf:75:83:46:e6:
                    4e:f2:e8:0a:20:c2:e5:ee:15:b2:3c:a2:13:77:20:
                    d6:f4:a4:b8:ff:48:f7:a7:db:be:98:57:cb:34:0a:
                    6b:e5:1f:e9:35:cb:0c:98:bd:76:1b:f3:d3:74:f1:
                    16:41:98:42:8a:76:57:aa:c5:2d:65:a0:85:e9:68:
                    e5:99:d2:b2:e1:04:99:64:83:0f:39:d5:c9:ef:e1:
                    67:49:b5:e1:f4:df:8b:2a:91:c8:39:4c:60:7e:de:
                    06:e5:e6:93:c5:36:c9:9e:83:0a:1f:66:08:f4:09:
                    5b:a5:47:90:9b:89:5a:79:7c:27:0c:31:24:b3:b7:
                    30:9f:a2:6f:47:31:5f:fc:28:f9:a3:da:20:17:bd:
                    0b:8b:39:d9:68:bc:b9:52:32:00:f9:2f:74:ec:c0:
                    0a:d1:ab:2e:44:b5:92:4e:1b:44:70:16:16:70:c0:
                    fd:b0:05:8f:ac:09:94:ac:cc:48:b4:19:42:d8:72:
                    37:71:7e:3a:32:33:9a:e0:e3:10:68:52:63:1a:6e:
                    76:69:7e:d4:92:00:35:83:c9:5d:dc:1b:a0:34:50:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:91:4B:3D:F7:FA:11:CF:42:4C:EC:1B:12:A0:F1:91:9E:9A:3C
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:f7:f7:f8:10:49:f4:5e:fc:64:fd:4b:c7:ff:e4:30:3e:
         e0:ae:df:ae:23:48:2a:c2:c0:98:62:bb:58:43:3b:86:33:e7:
         e4:97:c9:df:85:96:d2:31:29:df:c9:e9:54:1b:ca:ac:a2:11:
         b4:86:d8:77:27:37:81:02:ba:64:90:2e:2a:2e:d5:2e:ea:38:
         1f:d4:c0:8d:e1:4c:94:74:09:8f:f1:3d:b9:36:b9:9f:55:07:
         db:78:3f:25:25:a1:9f:15:f7:9f:8e:95:5a:0e:b9:4b:a9:43:
         06:2d:09:d3:53:2e:4e:8d:dd:64:69:79:31:7b:c3:82:8f:89:
         b7:0e:98:e0:54:91:73:f5:8a:2b:6a:80:ab:05:0b:2a:55:1f:
         63:c1:e7:22:77:d9:20:fe:05:2f:0e:23:02:20:50:66:ed:ca:
         aa:61:58:de:8d:4c:b9:0e:44:9c:45:e1:ee:7e:df:86:13:9f:
         32:d8:00:d9:07:3e:df:82:1d:73:83:46:82:34:35:cb:3e:e9:
         8a:79:8c:76:77:4a:0f:40:45:b4:23:35:cd:26:9b:7b:1c:ea:
         ea:3d:08:cf:aa:35:7a:97:72:bf:30:a7:7e:20:fc:0c:2c:19:
         2c:18:ed:f4:4f:58:1c:d7:b0:72:11:e8:4e:2a:93:ff:9c:34:
         44:f8:9f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdE38PGbmr7Pbx+cq3QcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWJhZjE1MjMzZDk4ZWI4ZWYwNjJjMjQ1ZjkxNzM2MmU2
MzI2NTYwHhcNMjUwNjE0MDgwMDI4WhcNMjUwNjE1MDgwMDI4WjAzMTEwLwYDVQQD
Eyg5MDY0OTE0YjNkZjdmYTExY2Y0MjRjZWMxYjEyYTBmMTkxOWU5YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIoO75bjAi/qS8dL2MKLe4vIB9QI
dddS/ON8Tv59/O4ShSYRDmuSv3WDRuZO8ugKIMLl7hWyPKITdyDW9KS4/0j3p9u+
mFfLNApr5R/pNcsMmL12G/PTdPEWQZhCinZXqsUtZaCF6WjlmdKy4QSZZIMPOdXJ
7+FnSbXh9N+LKpHIOUxgft4G5eaTxTbJnoMKH2YI9AlbpUeQm4laeXwnDDEks7cw
n6JvRzFf/Cj5o9ogF70LiznZaLy5UjIA+S907MAK0asuRLWSThtEcBYWcMD9sAWP
rAmUrMxItBlC2HI3cX46MjOa4OMQaFJjGm52aX7UkgA1g8ld3BugNFAuJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBkkUs99/oRz0JM7BsSoPGRnpo8MB8GA1UdIwQY
MBaAFG7rrxUjPZjrjvBiwkX5FzYuYyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2Mjgt
MGU0NjdlNTFiYTA2LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2MjgtMGU0NjdlNTFiYTA2
LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/f39/gQ
SfRe/GT9S8f/5DA+4K7friNIKsLAmGK7WEM7hjPn5JfJ34WW0jEp38npVBvKrKIR
tIbYdyc3gQK6ZJAuKi7VLuo4H9TAjeFMlHQJj/E9uTa5n1UH23g/JSWhnxX3n46V
Wg65S6lDBi0J01MuTo3dZGl5MXvDgo+Jtw6Y4FSRc/WKK2qAqwULKlUfY8HnInfZ
IP4FLw4jAiBQZu3KqmFY3o1MuQ5EnEXh7n7fhhOfMtgA2Qc+34Idc4NGgjQ1yz7p
inmMdndKD0BFtCM1zSabexzq6j0Iz6o1epdyvzCnfiD8DCwZLBjt9E9YHNewchHo
TiqT/5w0RPifgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:50:44 2025 by rpki-client