Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File:                     SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier:          uNurLFOt9E/2HGadLaEEokhI8VyJ5pTm1EI7rdIEBBE=
Subject key identifier:   6D:3C:0C:5B:7A:D8:6F:3E:90:45:BB:5E:FA:E7:6F:F8:56:78:08:17
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer:       /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial:       01974E2078FA9CF5B57383EFF600B682E364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number:          1583
Signing time:             Sun 08 Jun 2025 06:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:40 +0000
Files and hashes:         1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
                          2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: BbHRqg2+lZkASsnV9lxkUvsJ5pa7OrAPdHufuQekMiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:78:fa:9c:f5:b5:73:83:ef:f6:00:b6:82:e3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
        Validity
            Not Before: Jun  8 06:00:40 2025 GMT
            Not After : Jun  9 06:00:40 2025 GMT
        Subject: CN=6d3c0c5b7ad86f3e9045bb5efae76ff856780817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:af:14:51:66:89:e4:7c:88:0f:da:fd:3e:6f:
                    21:7a:71:8a:d6:14:46:83:e7:df:21:a5:0d:09:9f:
                    57:40:cd:bf:b3:3a:35:72:e3:ae:de:ea:13:35:4e:
                    2d:e6:21:a3:e4:ef:82:08:68:ef:50:30:03:d6:7f:
                    1c:54:9e:17:5f:e4:b6:29:45:65:ba:8a:69:38:f3:
                    93:99:d4:e1:ca:65:da:89:3c:a3:75:21:0d:f3:c3:
                    29:27:2e:0f:f6:c3:ed:b1:c5:27:e5:31:7d:b0:70:
                    d7:7d:bb:b4:7a:d9:a2:ff:a6:72:16:79:bc:0c:94:
                    33:bd:26:ec:b1:ed:ab:15:13:f7:3a:26:a9:42:05:
                    48:6c:6e:d9:9d:c7:ed:fd:a6:5c:a9:66:26:04:32:
                    65:42:57:e0:f7:8b:49:3d:27:11:ed:45:92:83:b2:
                    61:1e:d3:6c:1f:7b:4b:e5:7b:01:23:67:2e:d5:ff:
                    52:77:38:e7:42:c6:fe:70:c8:54:77:f3:1f:10:95:
                    62:19:d3:9f:eb:ae:e6:a9:77:0a:2a:fb:b3:83:79:
                    32:e1:91:cc:04:fd:40:9a:38:87:38:12:0e:9b:b6:
                    fb:49:d0:d1:b5:39:5c:f7:5b:90:2f:01:19:a3:d1:
                    10:d6:ab:fb:79:c4:ec:9b:62:14:6a:16:be:3c:0c:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:0C:5B:7A:D8:6F:3E:90:45:BB:5E:FA:E7:6F:F8:56:78:08:17
            X509v3 Authority Key Identifier:
                keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2a:57:00:09:e5:0f:1f:63:b6:cb:3d:f3:b9:be:b4:69:a0:
         58:6c:69:40:68:08:50:e1:85:82:74:41:6e:2c:95:3f:8b:87:
         c2:13:73:84:07:5d:e9:44:3e:b6:95:17:81:fb:83:24:f3:a6:
         ff:d5:36:53:54:c6:87:8b:66:f6:26:73:4a:be:31:00:c0:4e:
         0d:97:d6:11:7a:31:b9:d9:84:f9:b1:e9:37:b7:09:c7:e9:59:
         ad:8a:1e:be:4b:77:ba:83:82:bd:46:09:48:9d:a5:27:08:3f:
         04:c1:44:3f:d1:02:2d:20:ca:3c:55:2e:a5:5f:06:f5:b4:fc:
         1a:8e:68:de:d7:03:bf:a4:7a:d7:73:04:3a:44:2d:8c:08:a6:
         52:9d:d6:a2:23:fb:fc:72:83:17:4c:32:2d:d6:68:b4:de:c3:
         13:f4:0e:d0:7c:a4:56:b7:cc:fa:b0:e2:00:66:79:8b:ca:71:
         0f:8b:c4:cd:65:ae:f7:12:25:de:ae:20:55:51:6b:e4:6b:7a:
         5b:22:10:10:28:03:bc:85:24:e4:45:31:12:3d:80:c3:70:ea:
         0e:5c:36:47:c5:8d:21:db:c8:e7:62:0e:ac:ad:d5:9a:3e:90:
         3e:36:af:1c:e1:92:12:f6:7a:1c:94:ca:5a:53:79:6e:3c:a0:
         7a:92:be:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIHj6nPW1c4Pv9gC2guNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl
MDMzZTgwHhcNMjUwNjA4MDYwMDQwWhcNMjUwNjA5MDYwMDQwWjAzMTEwLwYDVQQD
Eyg2ZDNjMGM1YjdhZDg2ZjNlOTA0NWJiNWVmYWU3NmZmODU2NzgwODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA468UUWaJ5HyID9r9Pm8henGK1hRG
g+ffIaUNCZ9XQM2/szo1cuOu3uoTNU4t5iGj5O+CCGjvUDAD1n8cVJ4XX+S2KUVl
uoppOPOTmdThymXaiTyjdSEN88MpJy4P9sPtscUn5TF9sHDXfbu0etmi/6ZyFnm8
DJQzvSbsse2rFRP3OiapQgVIbG7Zncft/aZcqWYmBDJlQlfg94tJPScR7UWSg7Jh
HtNsH3tL5XsBI2cu1f9SdzjnQsb+cMhUd/MfEJViGdOf667mqXcKKvuzg3ky4ZHM
BP1AmjiHOBIOm7b7SdDRtTlc91uQLwEZo9EQ1qv7ecTsm2IUaha+PAyAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG08DFt62G8+kEW7Xvrnb/hWeAgXMB8GA1UdIwQY
MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt
ZTJjM2QzMjAzNGM0LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0
LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSpXAAnl
Dx9jtss987m+tGmgWGxpQGgIUOGFgnRBbiyVP4uHwhNzhAdd6UQ+tpUXgfuDJPOm
/9U2U1TGh4tm9iZzSr4xAMBODZfWEXoxudmE+bHpN7cJx+lZrYoevkt3uoOCvUYJ
SJ2lJwg/BMFEP9ECLSDKPFUupV8G9bT8Go5o3tcDv6R613MEOkQtjAimUp3WoiP7
/HKDF0wyLdZotN7DE/QO0HykVrfM+rDiAGZ5i8pxD4vEzWWu9xIl3q4gVVFr5Gt6
WyIQECgDvIUk5EUxEj2Aw3DqDlw2R8WNIdvI52IOrK3Vmj6QPjavHOGSEvZ6HJTK
WlN5bjygepK+FA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:01:09 2025 by rpki-client