Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File:                     OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier:          ZqOgGHzcqN+egXuKqD8j8ceIjPsQOFdH8cb14O/kOTI=
Subject key identifier:   57:6C:93:80:B2:07:14:1A:35:C3:24:33:71:1A:DA:D1:0D:43:DA:F0
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer:       /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial:       01974FD7ED449551AA48ADB6A305D6C0995D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number:          1587
Signing time:             Sun 08 Jun 2025 14:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:40 +0000
Files and hashes:         1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
                          2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
                          3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
                          4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
                          5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: z2+D6Yqd73M2EKebGEKOXVNZT/yt4ZNGpzGoXjkAaxc=)
                          6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
                          7: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:ed:44:95:51:aa:48:ad:b6:a3:05:d6:c0:99:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
        Validity
            Not Before: Jun  8 14:00:40 2025 GMT
            Not After : Jun  9 14:00:40 2025 GMT
        Subject: CN=576c9380b207141a35c32433711adad10d43daf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:52:44:9a:3a:c7:d8:69:99:25:86:8f:bd:
                    5c:ac:c2:75:df:37:69:89:29:7e:dc:75:81:08:a9:
                    e5:19:3d:6c:e8:90:eb:9f:e4:bb:cc:b6:c5:10:da:
                    5d:92:9f:dd:69:94:51:63:7d:4d:73:83:7c:22:78:
                    04:22:b7:46:42:af:b9:61:fa:d7:d6:dd:f1:2a:a1:
                    fd:00:2a:12:67:aa:83:50:55:78:fc:b4:a8:b0:f3:
                    ed:91:ad:d9:03:5f:68:db:ad:ca:e8:0e:99:1b:58:
                    22:84:e9:b8:44:d4:4d:61:48:ba:3c:02:b3:6f:64:
                    27:39:20:a3:41:a2:4a:e2:3f:08:68:ca:7d:51:99:
                    43:cb:23:da:4a:74:3f:27:6b:8a:70:6d:b8:dc:15:
                    5a:f1:62:83:2a:e6:62:66:51:a2:b2:96:ed:ae:aa:
                    7d:a2:c2:53:b9:86:3e:bc:86:65:78:48:0c:fb:85:
                    e8:bd:65:b2:a2:04:e8:6f:f9:e5:94:74:2f:34:7a:
                    e9:0a:c3:e1:4a:50:0f:37:91:43:97:54:04:77:91:
                    e2:f5:5c:0b:f4:cb:b3:43:70:73:4a:be:31:f4:e7:
                    c3:56:88:82:67:a9:61:ae:30:f2:1c:87:a4:bf:0c:
                    6e:d6:e3:ea:c8:00:66:39:40:cc:fb:70:f9:85:20:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6C:93:80:B2:07:14:1A:35:C3:24:33:71:1A:DA:D1:0D:43:DA:F0
            X509v3 Authority Key Identifier:
                keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:cf:8d:5e:11:0b:07:08:2f:d9:f7:8b:57:9e:65:02:a5:
         d3:c9:e4:44:49:b0:f1:c2:e3:4b:1f:0e:c3:0a:01:f6:20:ac:
         90:d9:0d:62:12:3f:ee:c6:f9:03:8c:d4:53:05:25:d8:44:91:
         e4:9d:3d:db:a4:4b:95:87:dd:b3:65:80:ab:28:46:a7:ef:e4:
         1f:a4:5c:af:04:85:e3:31:c9:3c:49:5f:26:2f:a8:8e:7a:b0:
         d0:e7:8e:a9:0d:de:d6:66:5c:9c:48:79:f4:ee:af:15:c2:ea:
         33:10:0e:f9:c9:fa:8c:cb:e5:24:b2:3b:a6:c4:dc:70:dc:31:
         68:6a:bc:9f:24:05:45:5e:fd:bd:b4:8d:9a:34:09:51:2d:6f:
         9d:f3:f5:29:f5:d8:d6:b7:9b:46:8d:0a:5a:a0:5d:f6:5f:e3:
         80:f4:e6:ce:bc:29:35:df:6f:c2:93:6a:9b:4d:5f:22:f3:91:
         8b:8c:91:e8:6d:90:95:ac:72:13:72:a4:4f:27:ae:7b:79:94:
         e1:d5:ff:b7:e3:39:92:0d:3a:e0:15:e9:06:00:ba:e7:5a:a6:
         b0:fa:77:2b:84:9c:c9:be:a1:8c:3a:41:1f:f2:a2:af:63:71:
         f9:c0:fc:f9:97:c1:f7:7e:56:0c:e6:7f:64:45:7e:dd:09:7a:
         52:a4:fb:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP1+1ElVGqSK22owXWwJldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx
Y2YxMTMwHhcNMjUwNjA4MTQwMDQwWhcNMjUwNjA5MTQwMDQwWjAzMTEwLwYDVQQD
Eyg1NzZjOTM4MGIyMDcxNDFhMzVjMzI0MzM3MTFhZGFkMTBkNDNkYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojNSRJo6x9hpmSWGj71crMJ13zdp
iSl+3HWBCKnlGT1s6JDrn+S7zLbFENpdkp/daZRRY31Nc4N8IngEIrdGQq+5YfrX
1t3xKqH9ACoSZ6qDUFV4/LSosPPtka3ZA19o263K6A6ZG1gihOm4RNRNYUi6PAKz
b2QnOSCjQaJK4j8IaMp9UZlDyyPaSnQ/J2uKcG243BVa8WKDKuZiZlGispbtrqp9
osJTuYY+vIZleEgM+4XovWWyogTob/nllHQvNHrpCsPhSlAPN5FDl1QEd5Hi9VwL
9MuzQ3BzSr4x9OfDVoiCZ6lhrjDyHIekvwxu1uPqyABmOUDM+3D5hSAyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdsk4CyBxQaNcMkM3Ea2tENQ9rwMB8GA1UdIwQY
MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1jPjV4R
CwcIL9n3i1eeZQKl08nkREmw8cLjSx8OwwoB9iCskNkNYhI/7sb5A4zUUwUl2ESR
5J0926RLlYfds2WAqyhGp+/kH6RcrwSF4zHJPElfJi+ojnqw0OeOqQ3e1mZcnEh5
9O6vFcLqMxAO+cn6jMvlJLI7psTccNwxaGq8nyQFRV79vbSNmjQJUS1vnfP1KfXY
1rebRo0KWqBd9l/jgPTmzrwpNd9vwpNqm01fIvORi4yR6G2QlaxyE3KkTyeue3mU
4dX/t+M5kg064BXpBgC651qmsPp3K4Scyb6hjDpBH/Kir2Nx+cD8+ZfB935WDOZ/
ZEV+3Ql6UqT7Zw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:10 2025 by rpki-client