Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File:                     p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier:          FUJ8w1Vy365jgfECI8z/JhTUx5NJoXJ2lJNppilupiQ=
Subject key identifier:   0B:7B:83:30:BE:F8:26:8B:27:B9:DD:72:62:F4:FA:A1:9C:FC:A1:5D
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer:       /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial:       01974A4377FCF6C212AB9EA43D20C72F7B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number:          1590
Signing time:             Sat 07 Jun 2025 12:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:24 +0000
Files and hashes:         1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
                          2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
                          3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
                          4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
                          5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
                          6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
                          7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: fmArPzYiTP/1L/waCJ+0pexvS7KnHHuDrZaKIn/qadQ=)
                          8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:77:fc:f6:c2:12:ab:9e:a4:3d:20:c7:2f:7b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
        Validity
            Not Before: Jun  7 12:00:24 2025 GMT
            Not After : Jun  8 12:00:24 2025 GMT
        Subject: CN=0b7b8330bef8268b27b9dd7262f4faa19cfca15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:6f:12:00:99:c5:fe:05:96:d1:8a:d7:c1:
                    ee:1b:70:2c:8a:86:46:7c:dc:7e:81:a9:19:06:a1:
                    be:ed:d6:40:36:44:65:29:74:bf:93:33:83:53:b1:
                    bb:c2:e5:6e:77:64:34:d1:dd:83:31:bc:81:0c:c8:
                    b3:53:e3:a8:f4:bc:a4:64:a4:3b:5e:33:98:08:87:
                    40:7c:fb:d0:b8:b4:cb:70:93:ae:bf:63:50:5d:94:
                    e5:b5:3a:95:ea:ed:db:78:fe:26:f4:5d:21:b8:91:
                    f3:39:6c:0e:fe:c4:ec:69:ff:05:25:ec:c1:5d:f8:
                    63:a7:51:ae:1f:2d:55:c3:98:1b:3f:42:c8:89:88:
                    2b:ab:7e:fa:10:09:88:3b:46:c1:d8:3b:a5:d4:75:
                    c5:cd:85:3f:c8:e2:85:4d:9a:a4:31:a8:a8:8e:57:
                    5e:0f:f5:94:b7:43:29:1f:0d:93:c9:24:b4:0b:76:
                    24:5f:60:50:f9:84:b6:db:38:cf:52:01:6a:40:91:
                    cb:49:62:25:6b:c6:f0:db:c8:bc:c5:0b:af:a9:00:
                    67:18:28:0c:8e:e5:38:a9:d4:42:6e:b4:4a:9f:63:
                    cf:5b:e3:52:44:50:f1:d7:11:f0:3d:90:eb:1c:ac:
                    e9:a3:a0:37:9e:14:da:77:a2:50:65:9b:4b:43:e9:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:83:30:BE:F8:26:8B:27:B9:DD:72:62:F4:FA:A1:9C:FC:A1:5D
            X509v3 Authority Key Identifier:
                keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:17:b2:01:17:14:2c:c4:51:3d:19:2a:48:e7:40:09:1a:
         26:ed:3d:4a:ad:6f:5b:c7:bc:2b:59:0b:a4:f7:88:52:7d:62:
         7b:6e:05:27:3d:32:2c:37:0b:c4:d6:ca:a9:62:05:dd:c5:3e:
         ef:b4:0d:fc:80:dd:ec:a6:56:18:3e:bf:61:20:8c:92:46:52:
         1b:07:45:f2:f9:19:a3:1c:1e:bf:9f:37:8d:ea:f6:3e:84:4e:
         54:fe:3e:ad:7c:82:4c:2f:69:76:01:41:f6:a2:4c:b7:47:ac:
         ff:81:60:fa:9e:9a:bd:30:ba:ec:b1:78:c7:7a:81:f9:24:a8:
         65:bb:76:09:be:eb:f5:a6:00:1b:b0:6c:90:2b:68:2c:97:c9:
         74:0c:d1:6d:47:79:5c:bd:4d:b0:bb:fa:b0:ad:8c:ec:39:14:
         28:83:1e:16:04:08:c1:0b:99:58:60:32:61:f6:39:c5:5b:54:
         4f:0d:43:4c:1b:07:dd:fd:84:e7:98:34:e0:d5:44:c0:84:18:
         1b:c0:a0:96:d4:24:af:36:c3:ef:2b:4e:03:b4:8f:1b:5c:c3:
         ef:9e:d6:f7:78:b7:fe:01:f0:2f:d6:03:20:5f:22:b9:55:a5:
         e0:74:67:4b:66:f5:14:c6:94:ce:b6:41:5c:f4:33:20:83:84:
         ba:5e:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ3f89sISq56kPSDHL3snMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjUwNjA3MTIwMDI0WhcNMjUwNjA4MTIwMDI0WjAzMTEwLwYDVQQD
EygwYjdiODMzMGJlZjgyNjhiMjdiOWRkNzI2MmY0ZmFhMTljZmNhMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5tvEgCZxf4FltGK18HuG3AsioZG
fNx+gakZBqG+7dZANkRlKXS/kzODU7G7wuVud2Q00d2DMbyBDMizU+Oo9LykZKQ7
XjOYCIdAfPvQuLTLcJOuv2NQXZTltTqV6u3beP4m9F0huJHzOWwO/sTsaf8FJezB
Xfhjp1GuHy1Vw5gbP0LIiYgrq376EAmIO0bB2Dul1HXFzYU/yOKFTZqkMaiojlde
D/WUt0MpHw2TySS0C3YkX2BQ+YS22zjPUgFqQJHLSWIla8bw28i8xQuvqQBnGCgM
juU4qdRCbrRKn2PPW+NSRFDx1xHwPZDrHKzpo6A3nhTad6JQZZtLQ+kv5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt7gzC++CaLJ7ndcmL0+qGc/KFdMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkd0XsgEX
FCzEUT0ZKkjnQAkaJu09Sq1vW8e8K1kLpPeIUn1ie24FJz0yLDcLxNbKqWIF3cU+
77QN/IDd7KZWGD6/YSCMkkZSGwdF8vkZoxwev583jer2PoROVP4+rXyCTC9pdgFB
9qJMt0es/4Fg+p6avTC67LF4x3qB+SSoZbt2Cb7r9aYAG7BskCtoLJfJdAzRbUd5
XL1NsLv6sK2M7DkUKIMeFgQIwQuZWGAyYfY5xVtUTw1DTBsH3f2E55g04NVEwIQY
G8CgltQkrzbD7ytOA7SPG1zD757W93i3/gHwL9YDIF8iuVWl4HRnS2b1FMaUzrZB
XPQzIIOEul7ioQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:28 2025 by rpki-client