Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File:                     kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier:          tCPaX0uua0Afcj9fUQ8QbHKmBbMYkd4kZ+ZedjBqlD4=
Subject key identifier:   59:72:9D:96:05:76:1E:6F:92:97:77:5F:0F:81:63:0F:87:B5:E7:72
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer:       /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial:       01975FB8A6307DB54767D7BCF129C0E64003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number:          1585
Signing time:             Wed 11 Jun 2025 16:00:26 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:26 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:26 +0000
Files and hashes:         1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
                          2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: Pl0JUAM4o7Rbr0Y+zs0HAI29C7Q5TDYIhy1RqIlv2l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:a6:30:7d:b5:47:67:d7:bc:f1:29:c0:e6:40:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
        Validity
            Not Before: Jun 11 16:00:26 2025 GMT
            Not After : Jun 12 16:00:26 2025 GMT
        Subject: CN=59729d9605761e6f9297775f0f81630f87b5e772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:71:ae:f4:7c:bc:96:30:91:dd:15:26:66:
                    70:ba:f6:77:a7:84:91:5f:cc:8e:69:23:2c:17:92:
                    df:51:22:57:b8:ad:e4:73:6a:8c:47:79:6b:96:25:
                    ec:ac:0e:7a:30:3b:2a:f8:03:16:67:51:cc:d6:b4:
                    f9:a9:b2:6f:51:80:ca:52:24:fb:19:60:f4:5f:ba:
                    e2:d8:81:b2:62:55:b4:86:a3:c9:d3:f7:48:d0:a6:
                    42:fe:80:02:3d:fb:d1:ac:9b:32:81:38:3e:26:ee:
                    73:02:27:64:ca:eb:58:1b:be:31:58:14:38:f4:69:
                    50:f6:56:9d:de:15:de:4f:64:d8:cd:c1:a3:0b:ca:
                    67:ee:29:9f:8b:4a:d2:3c:a6:75:b5:f5:3f:f7:4e:
                    0a:b0:d1:c8:d5:1a:ae:5a:24:b4:85:f1:01:5c:58:
                    04:c5:2e:02:3d:bf:e8:d9:ce:a2:0e:46:13:65:2e:
                    a1:17:e2:29:55:83:77:fa:26:f0:a3:86:8c:62:4f:
                    0d:a4:7b:d2:d5:1b:10:eb:3c:29:de:77:7c:64:1b:
                    96:3d:5d:8c:2c:14:72:02:b2:c2:7d:f6:e6:fe:61:
                    61:7e:af:b9:f1:2a:f8:9d:46:d0:fa:0b:a2:f8:30:
                    e3:87:fe:e1:56:72:72:fd:61:be:2c:7c:ce:18:d9:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:9D:96:05:76:1E:6F:92:97:77:5F:0F:81:63:0F:87:B5:E7:72
            X509v3 Authority Key Identifier:
                keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:ac:bb:eb:3c:3c:66:b2:07:81:dc:5b:dc:a5:e1:35:ab:
         54:18:70:f1:fd:70:38:8e:6b:8b:72:f5:ef:49:9f:c1:21:04:
         1f:b1:bb:fa:bf:b9:30:f4:a4:f5:92:3e:ce:aa:ec:75:3d:10:
         9f:d6:d1:0b:31:ba:21:15:1e:25:2d:ac:61:17:b9:62:b6:de:
         cd:c1:99:8d:91:c2:9c:b6:4a:a9:d9:c2:9c:eb:4f:b9:4b:cb:
         2e:99:16:8b:f7:8a:65:31:b1:03:a7:6c:ae:1c:f5:1c:df:c9:
         a1:3a:8f:67:be:6c:cb:3b:f5:71:3c:ba:13:fe:7f:8d:3d:d8:
         55:d5:dd:7d:f0:7d:09:f0:7a:02:1a:a8:ca:d8:50:5c:e5:cc:
         2b:6a:cf:58:99:a0:5d:f4:60:8c:32:94:f8:e8:b3:d1:fd:e7:
         75:64:5e:96:c8:a3:cc:57:1f:64:c5:f4:f8:ce:8a:af:9d:62:
         8c:ad:2a:22:4a:e3:bf:75:f3:72:5b:bd:0f:de:3b:23:bd:15:
         8b:f5:ed:e5:39:03:ab:f3:48:0b:73:2a:21:90:50:2f:39:b4:
         88:6e:e5:f4:25:f9:7b:17:2d:35:a5:4b:c5:82:ba:8e:bf:07:
         ca:8b:7f:67:56:72:97:12:71:ba:f2:ea:1d:22:b8:e8:79:0a:
         6c:9e:91:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfuKYwfbVHZ9e88SnA5kADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz
MmJkYTMwHhcNMjUwNjExMTYwMDI2WhcNMjUwNjEyMTYwMDI2WjAzMTEwLwYDVQQD
Eyg1OTcyOWQ5NjA1NzYxZTZmOTI5Nzc3NWYwZjgxNjMwZjg3YjVlNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu99xrvR8vJYwkd0VJmZwuvZ3p4SR
X8yOaSMsF5LfUSJXuK3kc2qMR3lrliXsrA56MDsq+AMWZ1HM1rT5qbJvUYDKUiT7
GWD0X7ri2IGyYlW0hqPJ0/dI0KZC/oACPfvRrJsygTg+Ju5zAidkyutYG74xWBQ4
9GlQ9lad3hXeT2TYzcGjC8pn7imfi0rSPKZ1tfU/904KsNHI1RquWiS0hfEBXFgE
xS4CPb/o2c6iDkYTZS6hF+IpVYN3+ibwo4aMYk8NpHvS1RsQ6zwp3nd8ZBuWPV2M
LBRyArLCffbm/mFhfq+58Sr4nUbQ+gui+DDjh/7hVnJy/WG+LHzOGNmWywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlynZYFdh5vkpd3Xw+BYw+HtedyMB8GA1UdIwQY
MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt
M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi
LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJ6su+s8
PGayB4HcW9yl4TWrVBhw8f1wOI5ri3L170mfwSEEH7G7+r+5MPSk9ZI+zqrsdT0Q
n9bRCzG6IRUeJS2sYRe5YrbezcGZjZHCnLZKqdnCnOtPuUvLLpkWi/eKZTGxA6ds
rhz1HN/JoTqPZ75syzv1cTy6E/5/jT3YVdXdffB9CfB6AhqoythQXOXMK2rPWJmg
XfRgjDKU+Oiz0f3ndWRelsijzFcfZMX0+M6Kr51ijK0qIkrjv3Xzclu9D947I70V
i/Xt5TkDq/NIC3MqIZBQLzm0iG7l9CX5exctNaVLxYK6jr8Hyot/Z1ZylxJxuvLq
HSK46HkKbJ6RhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 01:25:37 2025 by rpki-client