Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          wXKMaPEIjKzngUKMzeTCaRJ+YM9Lplduvw9HB7AROVE=
Subject key identifier:   51:4C:61:40:13:BF:43:33:4C:EF:03:73:0E:76:BA:A1:84:94:50:3C
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       0197469E666D7599F8583C560406ABF401FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1594
Signing time:             Fri 06 Jun 2025 19:01:15 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:15 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:15 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
                          3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: Fs2yGQARFfbVM6pzSK+wUZ+YK5xwHh21S4YU8B4VBg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:66:6d:75:99:f8:58:3c:56:04:06:ab:f4:01:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jun  6 19:01:15 2025 GMT
            Not After : Jun  7 19:01:15 2025 GMT
        Subject: CN=514c614013bf43334cef03730e76baa18494503c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:a5:33:b9:a8:3d:b0:06:a2:40:06:7f:dc:
                    0f:86:40:d1:9b:b7:14:73:b8:77:86:be:bd:18:e9:
                    f0:f2:4f:1d:e2:e6:d6:6e:9d:fc:ff:35:68:8b:fb:
                    de:dd:ee:d0:b7:b4:10:7c:c1:34:65:c2:b0:05:84:
                    93:92:5b:30:80:24:c3:03:a5:fc:0d:b3:1c:46:90:
                    1a:48:b8:84:b0:87:1b:22:32:b9:0f:b9:8a:d2:ac:
                    a6:58:fd:1e:9f:05:ec:42:07:b2:96:e5:2d:4e:0d:
                    c1:d8:bb:5c:e9:e7:94:eb:5c:4e:76:dc:2b:58:da:
                    3d:2d:96:2b:2c:1e:25:58:81:d6:40:ce:5b:87:89:
                    53:f7:6b:e4:f1:6c:46:84:ee:31:d5:e2:d9:7b:af:
                    ca:2d:0a:7a:8c:79:e4:2a:9c:20:54:21:e9:29:a8:
                    79:32:61:62:c0:13:42:d0:f2:26:dc:2b:4c:2d:23:
                    67:a5:65:3b:05:70:d8:48:10:4b:b0:11:74:66:0c:
                    c5:bf:c1:2a:40:89:3c:8f:ad:9f:c0:57:a1:92:70:
                    49:6b:e2:f2:27:63:8a:0e:3f:f9:46:9d:c7:a5:93:
                    dd:36:06:6f:f8:3f:1e:ec:06:6e:39:71:97:93:bf:
                    b0:6c:cf:61:35:bc:15:58:2c:3e:c2:07:a5:66:8d:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:61:40:13:BF:43:33:4C:EF:03:73:0E:76:BA:A1:84:94:50:3C
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:79:78:a8:e7:9d:50:0c:fc:49:1c:3f:bc:8a:e4:fb:fc:
         85:83:dc:57:f5:84:ba:17:15:c5:fb:b8:9a:5b:4c:0b:57:2c:
         89:8a:06:c7:1f:99:84:85:e1:6b:35:ba:16:4d:8f:05:e2:01:
         66:9a:19:22:80:1c:48:df:60:fc:17:61:b9:06:ae:57:1c:e0:
         0d:02:1c:44:9f:33:2d:4c:b7:81:c2:5b:60:b7:eb:d2:fd:33:
         9a:3f:89:43:92:d7:f8:45:c9:86:6f:8e:68:12:80:cb:b8:0b:
         d0:5a:8f:16:1e:b9:0f:fa:1f:c2:80:df:df:5b:b3:4b:2e:bf:
         7c:98:8d:10:72:5a:ed:bb:05:3b:c8:42:c0:61:b0:eb:76:d7:
         f0:f4:57:49:d6:e2:42:ab:f2:0d:37:9e:47:a6:ff:04:46:7d:
         55:95:bd:dd:69:79:5b:2f:9c:5c:4e:76:1c:76:15:d3:85:7a:
         5f:af:06:ec:96:74:c4:54:dc:05:72:b8:be:dc:b2:6a:4c:f9:
         9c:4b:cd:c3:ce:e8:01:b3:8f:28:b8:e7:a3:bd:7c:8e:b2:9b:
         29:bb:67:22:fb:70:76:4a:74:bc:f3:90:21:96:0a:a6:cd:8d:
         16:cf:60:cf:c3:ef:27:e1:b6:a2:05:c9:2b:84:9d:bb:26:ec:
         59:39:65:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnmZtdZn4WDxWBAar9AH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjUwNjA2MTkwMTE1WhcNMjUwNjA3MTkwMTE1WjAzMTEwLwYDVQQD
Eyg1MTRjNjE0MDEzYmY0MzMzNGNlZjAzNzMwZTc2YmFhMTg0OTQ1MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OWlM7moPbAGokAGf9wPhkDRm7cU
c7h3hr69GOnw8k8d4ubWbp38/zVoi/ve3e7Qt7QQfME0ZcKwBYSTklswgCTDA6X8
DbMcRpAaSLiEsIcbIjK5D7mK0qymWP0enwXsQgeyluUtTg3B2Ltc6eeU61xOdtwr
WNo9LZYrLB4lWIHWQM5bh4lT92vk8WxGhO4x1eLZe6/KLQp6jHnkKpwgVCHpKah5
MmFiwBNC0PIm3CtMLSNnpWU7BXDYSBBLsBF0ZgzFv8EqQIk8j62fwFehknBJa+Ly
J2OKDj/5Rp3HpZPdNgZv+D8e7AZuOXGXk7+wbM9hNbwVWCw+wgelZo31vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFMYUATv0MzTO8Dcw52uqGElFA8MB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe895eKjn
nVAM/EkcP7yK5Pv8hYPcV/WEuhcVxfu4mltMC1csiYoGxx+ZhIXhazW6Fk2PBeIB
ZpoZIoAcSN9g/BdhuQauVxzgDQIcRJ8zLUy3gcJbYLfr0v0zmj+JQ5LX+EXJhm+O
aBKAy7gL0FqPFh65D/ofwoDf31uzSy6/fJiNEHJa7bsFO8hCwGGw63bX8PRXSdbi
QqvyDTeeR6b/BEZ9VZW93Wl5Wy+cXE52HHYV04V6X68G7JZ0xFTcBXK4vtyyakz5
nEvNw87oAbOPKLjno718jrKbKbtnIvtwdkp0vPOQIZYKps2NFs9gz8PvJ+G2ogXJ
K4SduybsWTlljw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:29 2025 by rpki-client