Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          oxQRJSnup4TeAl6BZwnQjVXuuYEeRVh/M3d4zCb05LM=
Subject key identifier:   6A:0C:56:19:9D:B2:5B:90:A6:2C:13:B4:70:73:45:9D:D8:E0:13:96
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       019754911BC013ED1122717008B5F3336A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          1586
Signing time:             Mon 09 Jun 2025 12:01:25 +0000
Manifest this update:     Mon 09 Jun 2025 12:01:25 +0000
Manifest next update:     Tue 10 Jun 2025 12:01:25 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: 5ebc5rlCtHByZzyP4UN6yYoA0I5rUW7yJa6TeWbg36k=)
                          2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
                          3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
                          4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
                          5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
                          6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
                          7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
                          8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:91:1b:c0:13:ed:11:22:71:70:08:b5:f3:33:6a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Jun  9 12:01:25 2025 GMT
            Not After : Jun 10 12:01:25 2025 GMT
        Subject: CN=6a0c56199db25b90a62c13b47073459dd8e01396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:e9:47:e2:1f:ae:bd:a2:5d:f6:6f:7a:55:
                    85:a9:11:50:aa:08:00:80:27:ec:97:fe:05:a6:fc:
                    64:d1:7d:eb:24:73:2a:9a:3b:0d:de:b9:40:3f:3b:
                    2f:2c:9b:3b:de:57:3f:cb:26:fc:38:04:1c:3e:1a:
                    9c:6b:91:21:8e:6d:42:4a:b5:a3:9d:6a:ce:a5:03:
                    df:7f:1b:be:57:33:2c:4e:e5:41:cc:eb:fe:5d:40:
                    a3:6e:86:56:5f:72:22:c7:9f:86:84:42:ba:86:c2:
                    88:ab:8d:cb:d3:4f:bd:2b:6d:9d:a7:25:7d:b5:99:
                    f8:c6:da:ca:ab:8a:11:bf:ce:e8:4a:35:d4:2c:79:
                    ad:4b:9a:79:b8:7a:0a:a7:9d:07:ae:8a:3b:a0:2a:
                    6a:ec:41:06:27:43:be:f3:a8:d6:06:60:b4:2b:18:
                    fa:57:12:8d:ee:36:0c:e6:c7:12:50:45:78:43:2b:
                    c9:df:d6:e4:95:be:90:66:9f:60:63:fc:a5:68:f8:
                    f1:25:5a:65:99:fe:9a:95:a3:5d:19:3c:a1:30:ad:
                    51:cd:6f:af:7e:c4:0c:9c:10:3a:f6:bd:7c:98:05:
                    67:2d:26:1f:67:42:2a:e4:2f:10:03:a1:86:14:df:
                    e8:01:20:4c:ad:fc:9f:f2:af:d4:ec:5c:74:fd:7e:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:56:19:9D:B2:5B:90:A6:2C:13:B4:70:73:45:9D:D8:E0:13:96
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:5f:6a:5e:8c:d4:a7:dc:ca:aa:40:00:dc:fd:e2:77:7b:
         22:b5:61:58:ad:06:70:71:15:a8:2a:31:a3:0e:35:05:c4:b8:
         53:f3:38:d5:ad:d7:92:be:d2:d2:45:c3:04:88:71:61:29:17:
         76:2b:f1:c7:12:30:a0:07:76:94:a9:da:3f:90:da:d5:21:96:
         6e:63:a9:c5:10:c8:c3:d1:86:4a:16:c7:78:85:79:60:61:10:
         93:9b:5c:e8:ec:5c:15:d4:6c:8d:33:1f:d2:69:1f:f5:03:8e:
         dc:10:d5:39:ed:2d:b0:88:17:e7:13:bf:66:13:7f:63:53:a5:
         68:a1:a3:52:46:82:bf:61:25:9a:47:16:fe:56:46:92:62:40:
         54:70:60:1f:e2:61:f9:e6:58:04:c7:ad:5a:99:69:1d:fb:e7:
         95:e3:05:9f:92:87:59:f9:c9:ce:3a:73:ce:c8:0c:df:95:d2:
         4a:5b:5e:89:07:24:2e:f1:96:77:51:7b:95:6c:2b:c1:03:27:
         d6:cd:0e:6b:13:5f:98:5f:0e:22:2a:a3:20:f2:f8:72:f9:11:
         6c:54:cd:30:13:e4:a4:a9:72:07:ec:37:a9:2f:fa:7b:02:4b:
         f5:3e:44:d4:3e:db:67:86:74:11:94:80:cf:ce:28:e1:1d:23:
         42:5e:82:ed
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdUkRvAE+0RInFwCLXzM2qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjUwNjA5MTIwMTI1WhcNMjUwNjEwMTIwMTI1WjAzMTEwLwYDVQQD
Eyg2YTBjNTYxOTlkYjI1YjkwYTYyYzEzYjQ3MDczNDU5ZGQ4ZTAxMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9DpR+Ifrr2iXfZvelWFqRFQqggA
gCfsl/4Fpvxk0X3rJHMqmjsN3rlAPzsvLJs73lc/yyb8OAQcPhqca5Ehjm1CSrWj
nWrOpQPffxu+VzMsTuVBzOv+XUCjboZWX3Iix5+GhEK6hsKIq43L00+9K22dpyV9
tZn4xtrKq4oRv87oSjXULHmtS5p5uHoKp50Hroo7oCpq7EEGJ0O+86jWBmC0Kxj6
VxKN7jYM5scSUEV4QyvJ39bklb6QZp9gY/ylaPjxJVplmf6alaNdGTyhMK1RzW+v
fsQMnBA69r18mAVnLSYfZ0Iq5C8QA6GGFN/oASBMrfyf8q/U7Fx0/X7MTQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGoMVhmdsluQpiwTtHBzRZ3Y4BOWMB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc3L2Y0MDQ4Ni0yY2Q5LTQ3NWItYmJlMS0xNmNkOGY0ZmI0
YjkvMS8xLVBHZUlreHotRHhQM1JsdEJtQ0s2enFJR0FRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuBf
al6M1KfcyqpAANz94nd7IrVhWK0GcHEVqCoxow41BcS4U/M41a3Xkr7S0kXDBIhx
YSkXdivxxxIwoAd2lKnaP5Da1SGWbmOpxRDIw9GGShbHeIV5YGEQk5tc6OxcFdRs
jTMf0mkf9QOO3BDVOe0tsIgX5xO/ZhN/Y1OlaKGjUkaCv2ElmkcW/lZGkmJAVHBg
H+Jh+eZYBMetWplpHfvnleMFn5KHWfnJzjpzzsgM35XSSlteiQckLvGWd1F7lWwr
wQMn1s0OaxNfmF8OIiqjIPL4cvkRbFTNMBPkpKlyB+w3qS/6ewJL9T5E1D7bZ4Z0
EZSAz84o4R0jQl6C7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:04:08 2025 by rpki-client