Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          ZszCCzWq4leqnKasTCg1MsrhAdoV3nn8IF2KKJcacNI=
Subject key identifier:   63:AF:57:96:56:18:14:FB:A4:EC:FC:02:5F:37:5B:7E:18:45:A0:6A
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       01974D0DDC330F84F8C7311CC79A32CCD88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 01:00:43 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:43 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:43 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: RLOxlN1jculT5akb1jCq2aOqQ86t6gzUcwSKGu8EvSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:dc:33:0f:84:f8:c7:31:1c:c7:9a:32:cc:d8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Jun  8 01:00:43 2025 GMT
            Not After : Jun  9 01:00:43 2025 GMT
        Subject: CN=63af5796561814fba4ecfc025f375b7e1845a06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:60:f5:14:63:c6:8d:1a:0c:33:16:f6:5f:
                    41:fe:66:35:9e:3b:a9:b0:5e:94:34:df:c8:bd:a3:
                    37:0a:47:b0:ec:c9:9e:d5:4d:f3:ad:70:92:4c:aa:
                    ec:03:49:55:fd:53:42:13:7a:87:3e:6e:b9:42:d1:
                    04:9f:19:3e:b2:d5:6b:42:ff:68:5c:f4:39:72:b8:
                    33:1e:73:dc:0b:38:9b:74:b4:c0:65:be:d1:6d:d9:
                    89:be:29:fa:72:14:f0:7b:67:bc:2a:91:d5:93:e4:
                    eb:f4:a4:72:df:41:43:a8:68:24:17:87:3e:fa:ef:
                    68:f6:5a:6b:e6:c1:6a:85:94:62:82:ab:e1:98:8b:
                    c7:8f:e6:15:de:e1:69:58:05:bd:94:ca:2a:fe:bd:
                    6c:44:50:28:b2:1b:2c:81:49:19:42:53:24:76:91:
                    72:fb:a7:eb:3b:2f:4f:a3:4e:ea:91:3b:ee:25:5a:
                    44:25:f2:79:1f:fd:c2:3f:65:32:bc:f5:ff:f9:bb:
                    8c:97:bd:65:18:bc:25:4f:81:f3:bf:3d:ea:10:af:
                    ff:ff:67:cc:67:a8:65:d6:b6:27:44:75:ea:8b:9a:
                    9a:51:cd:8a:1d:65:4e:f0:53:27:10:04:03:31:36:
                    49:d5:7b:55:4b:a6:80:53:11:9c:8a:02:ab:4a:34:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:57:96:56:18:14:FB:A4:EC:FC:02:5F:37:5B:7E:18:45:A0:6A
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:7f:7f:f7:42:7c:56:98:0c:d9:6b:5b:77:d3:70:39:27:
         a4:51:7d:c8:aa:8a:64:49:3c:fa:8c:1e:88:21:12:bd:86:a2:
         59:3b:fd:97:19:2a:a1:f1:77:fb:d4:a0:f5:16:85:14:77:ad:
         bd:46:bf:1a:1e:90:e6:ab:0c:10:f0:e3:63:6b:0f:e1:d0:5d:
         f6:76:31:b3:12:28:00:89:71:85:9d:7f:91:92:f1:2c:e3:f3:
         f5:cc:9d:c7:42:6f:8a:e7:91:2b:ac:44:91:c7:47:e4:f7:58:
         45:7d:6b:9f:da:cc:e6:62:8e:67:05:2d:68:d7:1f:e4:76:a5:
         af:c3:d4:0b:b0:39:52:64:61:75:d8:a5:d9:48:17:48:b3:9b:
         b2:ed:b7:c2:48:f7:75:1c:39:f6:39:e0:5a:89:65:3c:cd:c5:
         4f:9a:85:88:86:6b:b8:79:1c:36:95:0f:87:5d:cb:1a:bd:1a:
         06:cb:e5:9a:eb:21:83:99:84:21:cc:c9:e7:a3:e5:35:4a:83:
         38:5e:70:b1:15:65:92:f9:76:ef:2e:18:44:e1:c1:1d:2a:7a:
         8f:65:14:b9:6a:c7:61:8d:e4:c0:43:ee:1d:a3:e2:bd:5d:ae:
         76:ff:ae:2b:d4:a4:c2:16:5d:9e:07:49:8b:a4:06:fd:58:6e:
         16:c8:42:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDdwzD4T4xzEcx5oyzNiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2
Yzk4ZDUwHhcNMjUwNjA4MDEwMDQzWhcNMjUwNjA5MDEwMDQzWjAzMTEwLwYDVQQD
Eyg2M2FmNTc5NjU2MTgxNGZiYTRlY2ZjMDI1ZjM3NWI3ZTE4NDVhMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorBg9RRjxo0aDDMW9l9B/mY1njup
sF6UNN/IvaM3Ckew7Mme1U3zrXCSTKrsA0lV/VNCE3qHPm65QtEEnxk+stVrQv9o
XPQ5crgzHnPcCzibdLTAZb7RbdmJvin6chTwe2e8KpHVk+Tr9KRy30FDqGgkF4c+
+u9o9lpr5sFqhZRigqvhmIvHj+YV3uFpWAW9lMoq/r1sRFAoshssgUkZQlMkdpFy
+6frOy9Po07qkTvuJVpEJfJ5H/3CP2UyvPX/+buMl71lGLwlT4Hzvz3qEK///2fM
Z6hl1rYnRHXqi5qaUc2KHWVO8FMnEAQDMTZJ1XtVS6aAUxGcigKrSjRE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOvV5ZWGBT7pOz8Al83W34YRaBqMB8GA1UdIwQY
MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt
Y2RhYTU4MTUxOGYzLzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz
LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVl/f/dC
fFaYDNlrW3fTcDknpFF9yKqKZEk8+oweiCESvYaiWTv9lxkqofF3+9Sg9RaFFHet
vUa/Gh6Q5qsMEPDjY2sP4dBd9nYxsxIoAIlxhZ1/kZLxLOPz9cydx0JviueRK6xE
kcdH5PdYRX1rn9rM5mKOZwUtaNcf5Halr8PUC7A5UmRhddil2UgXSLObsu23wkj3
dRw59jngWollPM3FT5qFiIZruHkcNpUPh13LGr0aBsvlmushg5mEIczJ56PlNUqD
OF5wsRVlkvl27y4YROHBHSp6j2UUuWrHYY3kwEPuHaPivV2udv+uK9SkwhZdngdJ
i6QG/VhuFshCXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:17 2025 by rpki-client