Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          ozualz4EUmDEw8CgkSkm1jF3x2mUyTKP8SavFmtsF5g=
Subject key identifier:   D7:62:BE:54:44:DF:D5:BF:A0:82:E2:5A:3C:54:8F:4B:AC:89:A8:AA
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       0197673BB296A87EFD4FE8E1A0F217731D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 03:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 03:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 03:00:55 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: yp5/n3w9YGehFRk2UhaDXKMqpp060NJdZKb4sh9zvVY=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:3b:b2:96:a8:7e:fd:4f:e8:e1:a0:f2:17:73:1d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jun 13 03:00:55 2025 GMT
            Not After : Jun 14 03:00:55 2025 GMT
        Subject: CN=d762be5444dfd5bfa082e25a3c548f4bac89a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:fe:ef:53:09:00:68:f7:65:b5:02:fc:3e:
                    04:70:56:9c:36:60:77:51:12:bc:6d:d2:a5:cd:06:
                    4e:c8:3e:79:ac:13:ee:40:4b:d7:e7:82:7a:a3:2d:
                    58:3e:e2:59:1a:c3:21:8d:30:dd:97:18:2b:86:31:
                    43:d2:bd:f5:1a:30:ca:d3:db:5a:75:e6:aa:af:ab:
                    76:2f:d7:60:21:a7:98:b1:8f:ee:10:d4:30:53:db:
                    46:7e:92:fe:6c:d0:98:34:83:9a:8a:34:3b:23:25:
                    22:27:74:bb:6c:2a:d5:c6:bd:13:f3:8c:a5:38:a3:
                    a4:76:cf:80:ba:7e:e8:1a:25:55:f5:03:4e:ec:0e:
                    1f:fc:b3:b9:e7:a8:bd:49:e8:b7:24:97:5d:5a:1c:
                    d4:9b:04:ee:f5:d7:dc:45:c5:98:b4:84:62:f2:b3:
                    b4:e2:8f:f1:40:60:92:8a:fc:5b:b3:26:ef:c1:74:
                    11:9e:66:43:32:78:db:b3:a6:53:0a:4c:52:80:ba:
                    b5:7b:b0:b7:2f:4f:62:b2:89:b7:02:47:cb:06:1d:
                    75:bc:2f:64:cb:1d:cd:91:23:d3:1a:08:59:51:09:
                    cf:24:80:29:c4:65:f1:43:ac:4d:7a:f7:3f:8a:45:
                    31:28:37:52:d2:ce:85:4a:00:f1:11:23:1e:f4:7a:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:BE:54:44:DF:D5:BF:A0:82:E2:5A:3C:54:8F:4B:AC:89:A8:AA
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:04:6b:9f:28:23:2f:b8:66:cd:bd:14:32:ba:4f:99:6a:
         f7:0e:b6:d1:60:43:f8:1c:e5:de:16:dd:c0:cf:0c:9a:5c:44:
         a0:3f:07:38:3a:db:e1:f4:12:95:74:7d:5c:f4:20:ee:dc:e1:
         c8:e4:7d:f4:38:59:40:27:19:bc:76:6e:f0:cf:5c:ac:81:d8:
         03:aa:4f:30:9d:ea:83:b2:0d:bb:c4:5c:65:ae:fc:2e:99:24:
         d4:59:cb:59:a2:2e:f0:41:92:3f:f3:98:ba:17:d6:e5:52:7c:
         70:c6:16:d2:48:31:5b:39:71:94:99:fd:69:44:43:08:71:4d:
         51:f8:25:10:6a:4d:ed:0d:c8:02:f5:f9:26:19:86:ad:37:a3:
         7e:a1:02:20:b1:6d:d2:37:c0:3e:47:84:68:13:8f:7d:a2:59:
         73:52:7c:be:5f:c0:7b:6d:90:0f:7c:6e:c5:64:e4:c6:6c:dd:
         e8:42:7f:f4:3b:e6:d6:9d:9e:ff:ee:ea:8a:31:e2:82:b8:2a:
         6a:6f:37:cc:23:5c:8d:16:90:8a:2d:ec:37:6c:fd:1a:45:71:
         ce:f1:08:a9:5d:62:e6:a1:1b:90:70:23:6a:60:dd:5b:86:4b:
         62:f1:cd:b2:63:a2:48:d6:b2:46:39:77:03:a8:3e:17:79:cc:
         3a:7a:00:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO7KWqH79T+jhoPIXcx03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3
MzlkMjEwHhcNMjUwNjEzMDMwMDU1WhcNMjUwNjE0MDMwMDU1WjAzMTEwLwYDVQQD
EyhkNzYyYmU1NDQ0ZGZkNWJmYTA4MmUyNWEzYzU0OGY0YmFjODlhOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYP+71MJAGj3ZbUC/D4EcFacNmB3
URK8bdKlzQZOyD55rBPuQEvX54J6oy1YPuJZGsMhjTDdlxgrhjFD0r31GjDK09ta
deaqr6t2L9dgIaeYsY/uENQwU9tGfpL+bNCYNIOaijQ7IyUiJ3S7bCrVxr0T84yl
OKOkds+Aun7oGiVV9QNO7A4f/LO556i9Sei3JJddWhzUmwTu9dfcRcWYtIRi8rO0
4o/xQGCSivxbsybvwXQRnmZDMnjbs6ZTCkxSgLq1e7C3L09isom3AkfLBh11vC9k
yx3NkSPTGghZUQnPJIApxGXxQ6xNevc/ikUxKDdS0s6FSgDxESMe9Hq4BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdivlRE39W/oILiWjxUj0usiaiqMB8GA1UdIwQY
MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt
MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk
LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9cEa58o
Iy+4Zs29FDK6T5lq9w620WBD+Bzl3hbdwM8MmlxEoD8HODrb4fQSlXR9XPQg7tzh
yOR99DhZQCcZvHZu8M9crIHYA6pPMJ3qg7INu8RcZa78Lpkk1FnLWaIu8EGSP/OY
uhfW5VJ8cMYW0kgxWzlxlJn9aURDCHFNUfglEGpN7Q3IAvX5JhmGrTejfqECILFt
0jfAPkeEaBOPfaJZc1J8vl/Ae22QD3xuxWTkxmzd6EJ/9Dvm1p2e/+7qijHigrgq
am83zCNcjRaQii3sN2z9GkVxzvEIqV1i5qEbkHAjamDdW4ZLYvHNsmOiSNayRjl3
A6g+F3nMOnoA8Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:18:14 2025 by rpki-client