Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          jYlRinfdy0OuOnRxXBlQYgLN86EGIu8HxwDoUbINHRM=
Subject key identifier:   9D:E7:D1:6D:59:88:5C:69:18:CE:4D:FC:DF:4A:28:34:F9:79:97:D2
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       019773E4471A02A7723A104B75AC1CF1A84E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 14:00:29 +0000
Manifest this update:     Sun 15 Jun 2025 14:00:29 +0000
Manifest next update:     Mon 16 Jun 2025 14:00:29 +0000
Files and hashes:         1: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (hash: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: NhQhXiaGDShAr0LzwtiV02cySAqNJW7QY8NFb+6EPdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:e4:47:1a:02:a7:72:3a:10:4b:75:ac:1c:f1:a8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Jun 15 14:00:29 2025 GMT
            Not After : Jun 16 14:00:29 2025 GMT
        Subject: CN=9de7d16d59885c6918ce4dfcdf4a2834f97997d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:93:fb:41:94:0e:82:88:06:9b:0e:51:3b:
                    6e:0b:45:9c:c4:ec:b2:c6:41:e2:48:cc:46:89:75:
                    73:71:5c:8f:7c:87:b6:0d:3a:9d:bf:a5:f2:f8:49:
                    bb:8f:90:1e:96:3d:c3:94:da:9c:6b:04:e4:b7:a4:
                    68:e7:e2:22:4c:74:f0:05:59:42:85:c1:8d:94:b6:
                    40:f6:e8:8e:8e:5b:80:d3:c3:22:da:91:50:32:fd:
                    64:68:0f:14:0c:b7:41:4b:b1:be:b3:59:b3:99:6d:
                    cf:37:5e:32:c3:26:83:15:62:25:ee:fa:15:14:e3:
                    80:8d:41:39:a2:c1:bd:10:d5:0b:2d:87:08:07:aa:
                    e2:8d:2a:22:4a:cc:06:bf:30:84:9f:73:1e:7e:06:
                    96:d7:55:a2:04:c0:ea:01:b3:78:8a:c4:c3:ad:1a:
                    22:f8:04:48:bb:a0:07:a1:9c:a2:f9:6e:4c:61:48:
                    d5:d1:6b:ef:71:0c:d2:24:d1:78:22:a3:4d:d2:4b:
                    29:a4:72:ef:63:e8:b9:c3:00:93:4d:3f:6a:1d:c0:
                    71:81:6c:d3:49:2b:a0:fa:9d:c5:f4:90:90:b6:dd:
                    10:73:69:dd:be:30:c7:46:7f:52:df:08:4d:80:7a:
                    b0:f3:bc:bb:a1:fd:dd:d2:5c:d7:fc:65:aa:35:e5:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:D1:6D:59:88:5C:69:18:CE:4D:FC:DF:4A:28:34:F9:79:97:D2
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:0b:4f:8b:3d:d3:97:6b:fa:50:dc:7d:8c:89:c4:a5:95:
         08:17:4a:53:fc:77:d5:3d:5d:bc:3e:e4:a8:ca:3c:78:0e:5c:
         59:98:cf:83:f8:01:c3:cd:6b:85:c5:f2:a0:da:5b:7c:6f:aa:
         7d:f4:0e:12:72:b7:a9:35:76:b3:f0:c8:a7:65:43:c9:59:3a:
         6a:ee:d2:5d:5c:c6:22:e6:4f:6e:cb:86:c1:fe:9e:68:74:9c:
         e4:4e:06:0d:ce:7a:ba:62:6b:02:86:e1:bd:f2:a6:30:af:ae:
         c9:a3:03:2f:9c:c5:42:f0:87:b7:fe:b8:0f:b6:fd:8e:9e:ab:
         62:1f:5f:36:46:45:29:e7:c1:6a:c0:52:31:6e:eb:4c:5b:6a:
         41:52:ec:5a:bb:68:5d:61:8b:ef:1c:62:bf:47:7b:0a:df:39:
         bf:f7:f2:54:14:48:dc:c4:ab:6e:6f:ba:8e:cb:c9:f6:dc:8e:
         68:16:30:ff:00:2e:b3:fc:50:d9:32:1c:5b:6e:53:85:0c:7b:
         81:99:58:7e:57:51:d4:44:e0:e2:1a:dc:18:be:39:5f:81:60:
         d0:9b:00:bd:3f:e9:22:4b:05:5c:2b:39:8b:11:88:b8:15:f1:
         1d:54:5b:de:75:cc:fb:53:37:71:36:01:72:3d:0c:01:65:49:
         c3:0c:1e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5EcaAqdyOhBLdawc8ahOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj
MmY1MWYwHhcNMjUwNjE1MTQwMDI5WhcNMjUwNjE2MTQwMDI5WjAzMTEwLwYDVQQD
Eyg5ZGU3ZDE2ZDU5ODg1YzY5MThjZTRkZmNkZjRhMjgzNGY5Nzk5N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugKT+0GUDoKIBpsOUTtuC0WcxOyy
xkHiSMxGiXVzcVyPfIe2DTqdv6Xy+Em7j5Aelj3DlNqcawTkt6Ro5+IiTHTwBVlC
hcGNlLZA9uiOjluA08Mi2pFQMv1kaA8UDLdBS7G+s1mzmW3PN14ywyaDFWIl7voV
FOOAjUE5osG9ENULLYcIB6rijSoiSswGvzCEn3MefgaW11WiBMDqAbN4isTDrRoi
+ARIu6AHoZyi+W5MYUjV0WvvcQzSJNF4IqNN0ksppHLvY+i5wwCTTT9qHcBxgWzT
SSug+p3F9JCQtt0Qc2ndvjDHRn9S3whNgHqw87y7of3d0lzX/GWqNeUxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3n0W1ZiFxpGM5N/N9KKDT5eZfSMB8GA1UdIwQY
MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt
ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3
LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkMLT4s9
05dr+lDcfYyJxKWVCBdKU/x31T1dvD7kqMo8eA5cWZjPg/gBw81rhcXyoNpbfG+q
ffQOEnK3qTV2s/DIp2VDyVk6au7SXVzGIuZPbsuGwf6eaHSc5E4GDc56umJrAobh
vfKmMK+uyaMDL5zFQvCHt/64D7b9jp6rYh9fNkZFKefBasBSMW7rTFtqQVLsWrto
XWGL7xxiv0d7Ct85v/fyVBRI3MSrbm+6jsvJ9tyOaBYw/wAus/xQ2TIcW25ThQx7
gZlYfldR1ETg4hrcGL45X4Fg0JsAvT/pIksFXCs5ixGIuBXxHVRb3nXM+1M3cTYB
cj0MAWVJwwweJA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:56:20 2025 by rpki-client