Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File:                     TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier:          mXafHpRo+920IPkaaoVFsdJTGeoZEyNpNovLG/wEgeg=
Subject key identifier:   F7:27:84:D1:37:D8:4C:56:41:A1:D8:B3:16:76:23:6C:F9:4F:31:F0
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       0197499F310ED1235DE50D106D9F71274DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 09:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:58 +0000
Files and hashes:         1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: IrxTR/4Da8H1yNY2ozHzsxSIm1Jfx1iNF3umxTyBtAA=)
                          2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
                          3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
                          4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
                          5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:31:0e:d1:23:5d:e5:0d:10:6d:9f:71:27:4d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jun  7 09:00:58 2025 GMT
            Not After : Jun  8 09:00:58 2025 GMT
        Subject: CN=f72784d137d84c5641a1d8b31676236cf94f31f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:55:ff:70:cd:99:c3:a8:fc:0a:4f:fd:24:
                    7d:83:3b:38:8a:bf:77:f4:e6:00:a9:0a:5b:e3:26:
                    1d:6e:9f:1a:54:78:79:0b:b0:d0:5c:41:8a:8d:5c:
                    da:2e:4b:1d:59:44:d3:63:6d:88:35:33:1b:90:fd:
                    60:c1:28:73:21:c2:f5:cd:39:e4:3b:3c:10:c3:1f:
                    23:f8:b5:0b:eb:53:bb:55:16:bb:58:e2:9c:80:c4:
                    22:1b:d2:29:8c:37:26:a7:5b:be:1e:d6:95:d7:72:
                    b7:3e:19:a3:c7:b3:dd:a4:f2:f1:1f:94:48:0e:c6:
                    5e:23:2a:47:a1:cb:74:55:a5:36:b6:69:93:a6:71:
                    aa:16:ba:9d:6d:d6:3c:72:56:aa:7d:77:12:cc:c3:
                    1b:a4:16:46:e3:16:e0:95:48:5c:01:1a:fe:6a:ee:
                    b4:d4:1d:9c:92:9e:7c:ee:cd:f3:c7:07:6a:55:10:
                    b5:82:dd:5d:5f:b1:10:fc:90:a1:a5:9f:b6:3a:0d:
                    1e:cd:4d:10:5a:44:e7:0f:89:f9:4b:5c:7c:14:5c:
                    98:29:36:86:be:06:d5:c0:48:9b:78:87:47:c7:06:
                    6a:87:f8:e4:55:bd:e6:f2:bf:0f:3a:f0:48:8d:74:
                    f9:d1:9a:7a:d0:fb:33:55:f7:bd:e7:ae:07:9f:c6:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:84:D1:37:D8:4C:56:41:A1:D8:B3:16:76:23:6C:F9:4F:31:F0
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:64:e6:47:58:f7:20:e2:77:e8:a3:ad:aa:ba:ce:80:4a:
         54:2e:e9:7a:2c:21:2f:c1:7d:09:f1:50:6c:0b:07:aa:71:1b:
         47:f5:b6:67:6a:cc:94:b5:36:47:bf:18:ad:19:42:b5:14:c4:
         87:99:d1:7c:16:f3:d0:68:cd:f0:ab:65:81:aa:cd:13:57:4c:
         97:41:f7:c2:62:8c:51:49:2e:8b:39:9a:81:7e:ac:bd:b5:98:
         75:59:d4:4d:5f:9d:0b:f9:aa:49:b6:74:7f:e6:5f:78:85:8e:
         4d:dc:5b:ba:41:50:f0:8e:0f:a1:83:ba:1d:c5:3b:62:69:6d:
         e6:69:6b:d6:bc:b7:20:b1:5e:88:32:8a:47:ac:bb:20:67:5e:
         f9:dd:72:4c:ec:f8:fd:cb:5d:b3:b6:0e:b6:78:66:28:9d:62:
         c5:74:40:e5:01:ee:2c:fb:19:17:71:38:d4:5a:28:49:a3:09:
         66:eb:57:70:04:51:c1:0c:d4:8c:48:b9:a9:82:15:72:b3:99:
         8e:de:c4:19:6c:5e:ec:75:69:6c:b9:ed:7f:ab:ae:ec:2e:b8:
         dd:d3:54:36:3e:a4:df:a0:86:97:ca:86:a7:62:d9:1c:32:c0:
         f5:d6:09:b7:57:70:f2:c2:02:f0:45:8d:d0:62:13:ba:d1:3b:
         c1:90:2f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnzEO0SNd5Q0QbZ9xJ03bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjUwNjA3MDkwMDU4WhcNMjUwNjA4MDkwMDU4WjAzMTEwLwYDVQQD
EyhmNzI3ODRkMTM3ZDg0YzU2NDFhMWQ4YjMxNjc2MjM2Y2Y5NGYzMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA555V/3DNmcOo/ApP/SR9gzs4ir93
9OYAqQpb4yYdbp8aVHh5C7DQXEGKjVzaLksdWUTTY22INTMbkP1gwShzIcL1zTnk
OzwQwx8j+LUL61O7VRa7WOKcgMQiG9IpjDcmp1u+HtaV13K3Phmjx7PdpPLxH5RI
DsZeIypHoct0VaU2tmmTpnGqFrqdbdY8claqfXcSzMMbpBZG4xbglUhcARr+au60
1B2ckp587s3zxwdqVRC1gt1dX7EQ/JChpZ+2Og0ezU0QWkTnD4n5S1x8FFyYKTaG
vgbVwEibeIdHxwZqh/jkVb3m8r8POvBIjXT50Zp60PszVfe9564Hn8b76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcnhNE32ExWQaHYsxZ2I2z5TzHwMB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRdk5kdY
9yDid+ijraq6zoBKVC7peiwhL8F9CfFQbAsHqnEbR/W2Z2rMlLU2R78YrRlCtRTE
h5nRfBbz0GjN8KtlgarNE1dMl0H3wmKMUUkuizmagX6svbWYdVnUTV+dC/mqSbZ0
f+ZfeIWOTdxbukFQ8I4PoYO6HcU7Ymlt5mlr1ry3ILFeiDKKR6y7IGde+d1yTOz4
/ctds7YOtnhmKJ1ixXRA5QHuLPsZF3E41FooSaMJZutXcARRwQzUjEi5qYIVcrOZ
jt7EGWxe7HVpbLntf6uu7C643dNUNj6k36CGl8qGp2LZHDLA9dYJt1dw8sIC8EWN
0GITutE7wZAvSw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:26 2025 by rpki-client