Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          4BiB8AAji2Dr56ZnGHtjkcs5U0m3E2wwelPF1O2v2fw=
Subject key identifier:   33:37:55:74:B7:24:0A:1D:32:68:36:DD:44:43:F8:AE:ED:C1:8B:EF
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       01974AE871D606D080FECAC546B28D6BE626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 15:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:36 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: jcFTji12LCC1TfVpyjUmb/inet0mfZVgN71xLvhrsN0=)
                          2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
                          3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
                          4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:71:d6:06:d0:80:fe:ca:c5:46:b2:8d:6b:e6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Jun  7 15:00:36 2025 GMT
            Not After : Jun  8 15:00:36 2025 GMT
        Subject: CN=33375574b7240a1d326836dd4443f8aeedc18bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:fe:66:ff:56:5d:e2:9b:03:eb:63:8d:56:
                    f6:e9:68:22:e9:e9:0d:07:a2:df:c0:14:84:03:06:
                    6f:ca:9e:e8:16:1f:ca:d0:d3:df:51:29:13:b0:c1:
                    ac:8a:89:ab:e5:81:6c:c3:0a:aa:51:d8:0a:82:06:
                    c9:59:21:d0:58:23:1b:7e:95:84:64:ca:f3:4c:c7:
                    f3:7c:7f:e1:d9:0b:f9:17:e6:f0:6f:db:18:9c:e9:
                    3a:b5:9c:be:3f:e9:6c:a3:80:2d:ac:cf:28:8c:05:
                    6c:f1:a9:cd:03:fe:00:60:41:77:c2:c5:5a:54:0f:
                    7b:df:41:7d:ad:73:90:e5:62:6a:47:5b:db:c4:70:
                    04:f6:e0:a8:06:aa:cf:34:47:83:d6:7e:8b:ae:2c:
                    9f:db:8e:91:cb:40:65:82:1d:49:24:38:2e:11:29:
                    cd:03:34:3e:9d:75:c7:17:6f:64:10:c7:54:09:ef:
                    5a:b9:3f:f0:01:5d:2c:e9:69:cd:1f:08:53:25:87:
                    e3:2b:ac:bd:0d:79:39:e8:f3:69:15:93:7c:1c:df:
                    9d:2e:5a:52:7c:0d:59:a7:c4:23:43:7a:13:c5:40:
                    90:c5:41:62:90:8a:ee:68:f8:0d:ae:26:af:a7:71:
                    75:aa:33:7f:b5:04:22:22:0e:d0:56:ab:98:7b:13:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:55:74:B7:24:0A:1D:32:68:36:DD:44:43:F8:AE:ED:C1:8B:EF
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:a0:b9:c5:e1:34:9f:88:8c:32:cd:44:ef:6a:35:5c:70:
         8e:1a:21:79:9e:87:a2:88:e0:d1:d0:86:ca:54:e2:75:f8:e7:
         bf:de:86:91:08:59:ef:27:ab:b2:8b:1d:82:a4:52:97:30:c3:
         40:d9:ab:16:df:82:48:ae:31:e9:3b:7c:26:a7:8b:39:8c:64:
         ff:56:b2:90:a5:8f:94:5e:cf:44:76:45:67:c7:7c:43:79:26:
         b7:cb:a8:a6:7d:18:bd:e3:8a:ae:c1:15:1e:22:50:95:5c:30:
         b3:85:15:a7:85:a7:1d:75:5d:0e:94:33:cc:b0:a4:9c:35:b0:
         1c:e5:ac:e2:d5:e9:82:46:67:c4:74:46:93:f1:cd:16:6d:e8:
         c6:45:f4:9e:a4:18:5c:5b:17:54:32:34:d8:f4:31:e6:c6:a0:
         3c:bf:12:ac:80:8e:0d:1e:72:57:c7:3f:b4:88:67:f6:6f:a8:
         f4:e5:fa:26:33:73:74:5c:d1:e6:57:4d:ee:89:99:52:5c:bb:
         eb:24:ed:06:44:da:39:a8:2b:a0:2c:00:04:3e:c2:a4:53:12:
         df:80:34:50:b4:ae:77:16:5c:e5:eb:c5:73:00:55:6e:2d:d9:
         54:fe:68:82:85:bf:9f:a3:5a:a1:a4:19:1c:18:d2:4f:4a:09:
         61:44:a0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6HHWBtCA/srFRrKNa+YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz
NTk3MzgwHhcNMjUwNjA3MTUwMDM2WhcNMjUwNjA4MTUwMDM2WjAzMTEwLwYDVQQD
EygzMzM3NTU3NGI3MjQwYTFkMzI2ODM2ZGQ0NDQzZjhhZWVkYzE4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjv+Zv9WXeKbA+tjjVb26Wgi6ekN
B6LfwBSEAwZvyp7oFh/K0NPfUSkTsMGsiomr5YFswwqqUdgKggbJWSHQWCMbfpWE
ZMrzTMfzfH/h2Qv5F+bwb9sYnOk6tZy+P+lso4AtrM8ojAVs8anNA/4AYEF3wsVa
VA9730F9rXOQ5WJqR1vbxHAE9uCoBqrPNEeD1n6Lriyf246Ry0Blgh1JJDguESnN
AzQ+nXXHF29kEMdUCe9auT/wAV0s6WnNHwhTJYfjK6y9DXk56PNpFZN8HN+dLlpS
fA1Zp8QjQ3oTxUCQxUFikIruaPgNriavp3F1qjN/tQQiIg7QVquYexO9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM3VXS3JAodMmg23URD+K7twYvvMB8GA1UdIwQY
MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt
OTZkZGQ1YTAyMzlkLzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk
LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbKgucXh
NJ+IjDLNRO9qNVxwjhoheZ6Hoojg0dCGylTidfjnv96GkQhZ7yersosdgqRSlzDD
QNmrFt+CSK4x6Tt8JqeLOYxk/1aykKWPlF7PRHZFZ8d8Q3kmt8uopn0YveOKrsEV
HiJQlVwws4UVp4WnHXVdDpQzzLCknDWwHOWs4tXpgkZnxHRGk/HNFm3oxkX0nqQY
XFsXVDI02PQx5sagPL8SrICODR5yV8c/tIhn9m+o9OX6JjNzdFzR5ldN7omZUly7
6yTtBkTaOagroCwABD7CpFMS34A0ULSudxZc5evFcwBVbi3ZVP5ogoW/n6NaoaQZ
HBjST0oJYUSg7A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:19:53 2025 by rpki-client