Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File:                     pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier:          Ys0NnAIEYaGN/dSn2fiP0WrwPICmSD0cr8DAPy7reJI=
Subject key identifier:   53:4D:DC:9C:C4:F9:50:09:C1:F2:EB:09:87:BE:B1:AE:74:3B:8F:2C
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer:       /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial:       019765163B1E3EAE743D05C01D6CC6D20987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number:          1592
Signing time:             Thu 12 Jun 2025 17:00:45 +0000
Manifest this update:     Thu 12 Jun 2025 17:00:45 +0000
Manifest next update:     Fri 13 Jun 2025 17:00:45 +0000
Files and hashes:         1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
                          2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
                          3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: upUkmcucYdvElssJrLN22vv/Wz/NF+5ixGN19jNA9ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:16:3b:1e:3e:ae:74:3d:05:c0:1d:6c:c6:d2:09:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
        Validity
            Not Before: Jun 12 17:00:45 2025 GMT
            Not After : Jun 13 17:00:45 2025 GMT
        Subject: CN=534ddc9cc4f95009c1f2eb0987beb1ae743b8f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:05:ab:68:10:d4:be:cc:c5:38:f4:f3:4f:35:
                    92:35:1f:fc:bb:b3:47:53:d5:e9:e1:9e:52:1a:dc:
                    85:99:cf:86:8f:df:f8:75:fc:d9:6a:a6:d6:52:b2:
                    42:e3:38:04:8b:ac:a4:2c:a4:75:13:fd:ea:93:26:
                    30:38:c7:a2:b1:54:69:9f:c7:9f:3d:5c:3f:cb:81:
                    a3:f7:b8:c3:46:6a:20:6f:83:09:a3:18:18:19:05:
                    6e:14:fd:c5:16:b1:b6:4b:7e:f1:15:ff:47:dd:8c:
                    a1:34:d6:43:25:31:b8:7f:46:4b:e0:46:30:49:dd:
                    74:f8:1c:f7:25:db:83:f7:c3:8e:47:1d:2c:bd:d4:
                    52:22:94:19:ba:bc:a4:12:1e:66:8d:99:d5:fa:78:
                    f5:42:72:f6:23:00:b0:f5:92:f9:af:44:39:55:9c:
                    57:3d:f9:54:97:0a:28:c8:58:80:3c:97:0c:6d:20:
                    d4:0a:08:93:70:3d:43:7d:31:d9:34:f6:fe:24:54:
                    fd:64:1c:db:c4:a4:f0:dc:c8:e2:6a:d3:bc:a3:28:
                    6f:a3:04:a6:3a:7c:90:d1:ae:90:17:21:e3:86:da:
                    a3:02:ba:f0:a3:48:62:d3:d9:06:4b:75:70:b0:48:
                    8d:0b:5a:d4:17:48:23:f4:62:7b:79:d6:81:bd:46:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:DC:9C:C4:F9:50:09:C1:F2:EB:09:87:BE:B1:AE:74:3B:8F:2C
            X509v3 Authority Key Identifier:
                keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:df:26:ad:9b:c7:02:82:96:b5:9d:5c:09:37:d5:ef:29:03:
         d5:35:e6:81:d4:5e:bb:38:ac:ba:7e:55:80:8d:18:5d:64:da:
         02:86:84:65:67:cb:45:57:26:ba:55:ea:3f:ea:1f:72:ba:27:
         56:af:9b:a4:44:12:18:13:7c:87:0f:57:e6:9f:fa:f0:4e:c9:
         20:ab:76:68:e0:40:6f:a3:a9:7f:07:cc:1d:d8:2d:c7:93:ec:
         16:33:ae:0c:4a:96:9a:56:1f:c6:70:7a:6a:7d:df:b9:5c:a4:
         8d:f2:b4:94:3c:78:5a:60:de:71:73:9c:71:42:9e:a9:4b:72:
         87:a8:ad:ea:43:be:ff:5d:4c:18:4d:52:dc:59:81:11:91:0e:
         37:a5:46:b6:2c:12:5b:c4:0b:97:d2:d9:c1:39:1e:4c:a6:f5:
         b8:9c:b4:3d:a6:18:35:40:a5:74:31:73:93:3f:45:fc:05:55:
         57:db:c8:4b:64:31:df:ee:5a:b1:36:95:ba:49:f8:ea:89:59:
         35:47:df:ea:8e:81:32:c2:da:00:6a:56:a9:26:67:a3:a5:13:
         96:b8:28:9b:8b:e5:df:dc:cf:64:66:ea:97:ed:70:91:55:c4:
         c3:41:f5:a7:66:20:2d:66:0c:a3:ec:06:ea:f2:15:8a:44:bc:
         fe:21:10:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlFjsePq50PQXAHWzG0gmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjUwNjEyMTcwMDQ1WhcNMjUwNjEzMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg1MzRkZGM5Y2M0Zjk1MDA5YzFmMmViMDk4N2JlYjFhZTc0M2I4ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQWraBDUvszFOPTzTzWSNR/8u7NH
U9Xp4Z5SGtyFmc+Gj9/4dfzZaqbWUrJC4zgEi6ykLKR1E/3qkyYwOMeisVRpn8ef
PVw/y4Gj97jDRmogb4MJoxgYGQVuFP3FFrG2S37xFf9H3YyhNNZDJTG4f0ZL4EYw
Sd10+Bz3JduD98OORx0svdRSIpQZurykEh5mjZnV+nj1QnL2IwCw9ZL5r0Q5VZxX
PflUlwooyFiAPJcMbSDUCgiTcD1DfTHZNPb+JFT9ZBzbxKTw3MjiatO8oyhvowSm
OnyQ0a6QFyHjhtqjArrwo0hi09kGS3VwsEiNC1rUF0gj9GJ7edaBvUb3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNN3JzE+VAJwfLrCYe+sa50O48sMB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGN8mrZvH
AoKWtZ1cCTfV7ykD1TXmgdReuzisun5VgI0YXWTaAoaEZWfLRVcmulXqP+ofcron
Vq+bpEQSGBN8hw9X5p/68E7JIKt2aOBAb6OpfwfMHdgtx5PsFjOuDEqWmlYfxnB6
an3fuVykjfK0lDx4WmDecXOccUKeqUtyh6it6kO+/11MGE1S3FmBEZEON6VGtiwS
W8QLl9LZwTkeTKb1uJy0PaYYNUCldDFzkz9F/AVVV9vIS2Qx3+5asTaVukn46olZ
NUff6o6BMsLaAGpWqSZno6UTlrgom4vl39zPZGbql+1wkVXEw0H1p2YgLWYMo+wG
6vIVikS8/iEQLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:42:33 2025 by rpki-client