Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          JfyF5tPuS3XtQguoIHO4kEl3qTBOwv0dl9cwUeeOEcI=
Subject key identifier:   2A:99:5B:AB:AD:57:B6:37:3A:C8:A7:6C:44:02:17:BC:8C:FE:53:67
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       01974D0E2E607D13783A19C04F52479E111A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 01:01:04 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:04 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:04 +0000
Files and hashes:         1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=)
                          2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=)
                          3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=)
                          4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: d+4HXZKoUaKvWNtWZDOlbgCY3IlBGtXhv3VuxnSPfz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:2e:60:7d:13:78:3a:19:c0:4f:52:47:9e:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Jun  8 01:01:04 2025 GMT
            Not After : Jun  9 01:01:04 2025 GMT
        Subject: CN=2a995babad57b6373ac8a76c440217bc8cfe5367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:41:3a:2b:94:2d:6a:7b:5a:c6:ab:dc:5b:
                    f3:03:6f:9f:61:1a:0c:f1:7f:5e:b3:e6:9a:cd:b2:
                    02:a5:42:37:70:2e:24:6e:90:50:37:ee:f4:f9:fc:
                    6e:3d:a2:29:00:d5:ab:48:5d:b5:76:a6:b1:47:7d:
                    3c:c7:fc:2d:9d:ed:c0:1e:ed:1c:58:ea:66:16:da:
                    27:b4:ad:c7:77:e7:03:f0:65:7f:30:71:ed:44:54:
                    f4:42:90:46:54:8b:62:8c:b6:71:ec:4b:0a:b1:8b:
                    de:a1:6f:8c:21:4f:42:8e:9b:b6:07:b1:55:e4:21:
                    e4:38:74:9d:a5:a3:ac:b9:c0:9b:16:24:13:1f:0b:
                    91:4e:fd:e5:62:09:21:63:7f:2f:9c:41:cc:85:43:
                    31:7f:d1:96:31:5d:81:8c:a6:e7:8a:83:98:0d:e0:
                    4a:39:0d:ec:00:ce:79:8a:86:10:a9:90:08:c6:9d:
                    b8:45:04:9c:a4:08:59:99:09:be:a5:c2:ab:ec:f2:
                    59:e9:10:f3:40:e2:29:35:ec:01:57:af:f7:b7:a1:
                    d6:67:67:a9:6e:07:d3:2f:fc:bf:c4:35:16:3a:4b:
                    28:89:05:72:42:b2:12:0b:d7:a3:f4:d0:51:ae:b9:
                    04:ae:ed:e8:95:5a:0e:0b:45:77:b0:0f:99:72:84:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:5B:AB:AD:57:B6:37:3A:C8:A7:6C:44:02:17:BC:8C:FE:53:67
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:db:46:61:2c:64:7d:b5:5a:84:2a:a7:7e:3e:40:cd:f6:
         be:c9:72:7d:c6:3d:8b:70:2e:bb:6f:b1:11:6a:51:8f:1c:59:
         35:b4:f1:9e:2a:98:ff:06:e3:ec:98:e1:a7:4a:7a:54:5b:f2:
         64:0b:83:3d:ca:ac:ae:6a:e2:49:5c:ce:a4:f2:05:b8:d2:ae:
         b0:8f:6e:20:ff:f3:69:8c:c1:81:db:16:ca:78:d0:3d:6e:8a:
         cd:d7:f0:25:1a:40:78:1d:5b:1b:d6:e3:83:80:b5:39:80:af:
         0d:6b:68:e1:52:18:dc:12:d5:82:e7:dd:93:dd:54:7e:b3:57:
         b2:b3:2e:a3:86:4e:2a:82:40:9e:f2:cc:d8:db:5a:f5:89:85:
         24:59:95:38:ef:a3:0a:ae:81:62:dc:24:60:a3:db:ce:39:6c:
         c9:53:79:6d:58:77:41:0d:0f:4b:3a:33:96:47:63:32:a7:bb:
         dd:eb:33:24:a6:4c:39:e3:20:0b:58:05:cc:c6:8c:2e:f6:f4:
         c3:9e:2b:e1:ac:3e:77:39:b2:41:2b:20:c2:72:07:4e:4c:e0:
         aa:75:5b:c6:1f:cd:f5:ef:96:5e:43:43:08:27:b8:f3:a3:ef:
         ee:f7:1c:02:66:8c:36:a6:73:80:92:4f:dd:e5:d7:85:20:1e:
         b8:64:6f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDi5gfRN4OhnAT1JHnhEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky
ZmM5OWEwHhcNMjUwNjA4MDEwMTA0WhcNMjUwNjA5MDEwMTA0WjAzMTEwLwYDVQQD
EygyYTk5NWJhYmFkNTdiNjM3M2FjOGE3NmM0NDAyMTdiYzhjZmU1MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t1BOiuULWp7Wsar3FvzA2+fYRoM
8X9es+aazbICpUI3cC4kbpBQN+70+fxuPaIpANWrSF21dqaxR308x/wtne3AHu0c
WOpmFtontK3Hd+cD8GV/MHHtRFT0QpBGVItijLZx7EsKsYveoW+MIU9Cjpu2B7FV
5CHkOHSdpaOsucCbFiQTHwuRTv3lYgkhY38vnEHMhUMxf9GWMV2BjKbnioOYDeBK
OQ3sAM55ioYQqZAIxp24RQScpAhZmQm+pcKr7PJZ6RDzQOIpNewBV6/3t6HWZ2ep
bgfTL/y/xDUWOksoiQVyQrISC9ej9NBRrrkEru3olVoOC0V3sA+ZcoS6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqZW6utV7Y3OsinbEQCF7yM/lNnMB8GA1UdIwQY
MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt
YWU3NzQ2ZjA5NjMwLzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw
LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqvbRmEs
ZH21WoQqp34+QM32vslyfcY9i3Auu2+xEWpRjxxZNbTxniqY/wbj7Jjhp0p6VFvy
ZAuDPcqsrmriSVzOpPIFuNKusI9uIP/zaYzBgdsWynjQPW6KzdfwJRpAeB1bG9bj
g4C1OYCvDWto4VIY3BLVgufdk91UfrNXsrMuo4ZOKoJAnvLM2Nta9YmFJFmVOO+j
Cq6BYtwkYKPbzjlsyVN5bVh3QQ0PSzozlkdjMqe73eszJKZMOeMgC1gFzMaMLvb0
w54r4aw+dzmyQSsgwnIHTkzgqnVbxh/N9e+WXkNDCCe486Pv7vccAmaMNqZzgJJP
3eXXhSAeuGRvrg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:12 2025 by rpki-client