Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File:                     MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier:          RJpZO74oQwRDhJ7jtfufoG9ugpRCfcIeVIGhS+JvhrI=
Subject key identifier:   D8:1D:03:75:C5:78:D7:4D:A6:D8:81:8B:17:3C:50:3B:4A:17:CB:57
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       0197575A69B552A53C271FEC57B5D33290F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number:          1590
Signing time:             Tue 10 Jun 2025 01:00:32 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:32 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:32 +0000
Files and hashes:         1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=)
                          2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: j45x1dN5A6Z7nFQqVgZTzubZn/FQeE/IlgnAMCm4xJU=)
                          3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=)
                          4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=)
                          5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=)
                          6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=)
                          7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=)
                          8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=)
                          9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=)
                          10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:69:b5:52:a5:3c:27:1f:ec:57:b5:d3:32:90:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: Jun 10 01:00:32 2025 GMT
            Not After : Jun 11 01:00:32 2025 GMT
        Subject: CN=d81d0375c578d74da6d8818b173c503b4a17cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:1c:0b:1c:a0:f4:2c:e8:90:4e:4d:60:99:
                    d2:68:2e:5e:a4:b0:09:5f:b6:ab:dc:f3:d0:17:1e:
                    25:d8:2f:dc:44:5a:12:20:43:1a:bf:52:3d:21:47:
                    15:51:70:78:38:73:35:9d:18:aa:9c:e3:cd:16:06:
                    62:6c:44:cc:37:a5:30:fe:11:12:5a:59:19:56:8f:
                    ef:80:00:b7:af:57:dc:35:a3:4e:53:e4:ac:65:79:
                    18:a3:80:65:fc:f9:7d:be:89:04:6c:29:df:b0:70:
                    85:93:56:c5:ff:e9:11:39:8c:0d:56:ff:ff:dc:37:
                    6d:d1:58:19:39:4c:b0:3d:29:db:e8:6a:be:4b:47:
                    30:72:ec:f0:90:c0:be:63:2e:d6:a2:b4:90:d6:cc:
                    5b:4c:05:a8:b7:66:6c:81:f2:1f:f3:e2:3b:2d:fa:
                    09:94:fa:59:d9:ce:89:0b:87:da:72:c3:23:49:ef:
                    92:21:64:c3:04:5c:04:f2:4a:e7:73:a7:31:e7:2e:
                    1a:fa:e6:60:5e:1d:bc:0f:c7:8e:05:fc:bf:5b:7f:
                    fe:b2:e6:77:7a:2c:aa:e0:c1:ed:c3:1c:58:31:69:
                    f6:0c:16:73:73:af:55:bf:c0:07:55:33:6e:e0:ec:
                    c3:b5:39:0b:a7:45:60:9e:e9:37:bc:5d:bd:9c:8d:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:03:75:C5:78:D7:4D:A6:D8:81:8B:17:3C:50:3B:4A:17:CB:57
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:65:2e:e7:98:af:07:2b:1c:00:8a:1a:5f:4a:c0:e5:4d:46:
         b3:a8:4d:45:e6:df:01:b8:57:a8:00:e6:79:7b:94:9d:0d:a0:
         8e:a7:70:04:de:d4:0e:c7:4a:88:56:07:c5:86:20:22:9d:18:
         67:ad:53:c7:0d:f9:7e:74:56:fc:42:3e:a0:c6:9e:af:3e:4f:
         8a:1f:25:70:fc:17:88:35:d4:39:53:8f:8d:68:e1:02:40:97:
         9e:a3:3a:7b:bb:fa:3e:69:82:19:45:85:ac:75:b3:6d:7f:bc:
         89:d0:01:f3:76:d4:8f:65:5c:ff:31:a0:b9:e8:85:d7:c6:eb:
         a1:6b:c1:5c:94:5f:7f:30:28:4d:91:d7:74:f6:cb:bf:c1:da:
         27:66:e2:8d:ac:10:c6:57:da:46:ac:7c:8a:64:bb:51:66:45:
         d8:95:a7:a9:14:63:99:a3:e3:b9:99:60:1f:c1:8a:1c:4a:37:
         4c:a4:bc:ac:eb:2d:5d:2e:aa:d6:ae:91:29:f5:6a:2b:bb:56:
         62:ea:22:fc:64:2e:57:ba:5e:1e:34:08:1c:49:a0:7b:4a:c3:
         82:a7:47:ef:23:16:a7:07:68:5b:1e:62:60:5a:94:21:ff:80:
         eb:c1:60:b4:ca:04:96:8c:06:15:73:10:91:ac:e2:f1:0b:7d:
         f7:ef:58:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXWmm1UqU8Jx/sV7XTMpD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2
YjJiNDIwHhcNMjUwNjEwMDEwMDMyWhcNMjUwNjExMDEwMDMyWjAzMTEwLwYDVQQD
EyhkODFkMDM3NWM1NzhkNzRkYTZkODgxOGIxNzNjNTAzYjRhMTdjYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAcCxyg9CzokE5NYJnSaC5epLAJ
X7ar3PPQFx4l2C/cRFoSIEMav1I9IUcVUXB4OHM1nRiqnOPNFgZibETMN6Uw/hES
WlkZVo/vgAC3r1fcNaNOU+SsZXkYo4Bl/Pl9vokEbCnfsHCFk1bF/+kROYwNVv//
3Ddt0VgZOUywPSnb6Gq+S0cwcuzwkMC+Yy7WorSQ1sxbTAWot2ZsgfIf8+I7LfoJ
lPpZ2c6JC4facsMjSe+SIWTDBFwE8krnc6cx5y4a+uZgXh28D8eOBfy/W3/+suZ3
eiyq4MHtwxxYMWn2DBZzc69Vv8AHVTNu4OzDtTkLp0Vgnuk3vF29nI3gVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgdA3XFeNdNptiBixc8UDtKF8tXMB8GA1UdIwQY
MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt
YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0
LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGUu55iv
ByscAIoaX0rA5U1Gs6hNRebfAbhXqADmeXuUnQ2gjqdwBN7UDsdKiFYHxYYgIp0Y
Z61Txw35fnRW/EI+oMaerz5Pih8lcPwXiDXUOVOPjWjhAkCXnqM6e7v6PmmCGUWF
rHWzbX+8idAB83bUj2Vc/zGgueiF18broWvBXJRffzAoTZHXdPbLv8HaJ2bijawQ
xlfaRqx8imS7UWZF2JWnqRRjmaPjuZlgH8GKHEo3TKS8rOstXS6q1q6RKfVqK7tW
Yuoi/GQuV7peHjQIHEmge0rDgqdH7yMWpwdoWx5iYFqUIf+A68FgtMoElowGFXMQ
kazi8Qt99+9YJw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:42:28 2025 by rpki-client