Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          pPnZmTIX5H1V6U7whI7VxyDVgwxcUyCpcXFvvGxOS4c=
Subject key identifier:   85:9D:85:37:CE:3E:7E:B6:F8:ED:31:01:17:0F:91:F0:BD:F1:52:E3
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019747E798D14FCC6D96A4C6F99F91323BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1595
Signing time:             Sat 07 Jun 2025 01:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:49 +0000
Files and hashes:         1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: gYKw6EX+SAtvtPIcHWByyvQjRp6pCd0+sTcNFh6uiSs=)
                          3: MYE4-6Z5Xj2T0N4Zr1zjN4EpQhc.roa (hash: ZnNqulOiB+cymToT/52VvNa1rfFFIHJMaeQgFhSQ+AU=)
                          4: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=)
                          5: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
                          6: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:98:d1:4f:cc:6d:96:a4:c6:f9:9f:91:32:3b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Jun  7 01:00:49 2025 GMT
            Not After : Jun  8 01:00:49 2025 GMT
        Subject: CN=859d8537ce3e7eb6f8ed3101170f91f0bdf152e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:27:ed:fa:92:7a:10:4e:9e:e6:6d:96:cb:
                    c7:9d:a3:b0:ec:dd:f3:34:e3:57:99:74:64:13:7a:
                    8d:a3:d8:4d:e6:7b:ac:03:14:25:03:df:9f:06:0c:
                    f2:61:83:23:40:19:46:b8:ce:83:a2:84:73:2c:c1:
                    ce:53:70:b7:29:59:c9:60:0d:fa:c7:be:7d:fc:d3:
                    28:ac:a0:7c:54:6c:da:8c:ec:95:3e:f1:40:79:8f:
                    4f:59:a8:6c:a6:ac:cd:28:ec:ac:77:48:8a:78:cd:
                    a2:4c:d4:ab:ca:e0:c7:f6:1a:07:97:b1:58:d2:f3:
                    19:ed:73:4f:66:10:8b:75:2f:b7:9a:16:ee:1a:ec:
                    ab:d1:68:5e:6d:5c:2b:d4:23:9f:d7:df:c2:e9:a4:
                    6b:aa:1d:c7:bd:1d:0e:67:71:37:6e:92:0e:c0:6c:
                    53:a7:79:d4:b6:21:e3:78:1b:5b:3f:b5:cb:de:61:
                    74:34:fa:6a:1b:2b:46:c1:b3:30:4e:0c:ae:25:a3:
                    3e:33:60:cd:da:16:3b:cd:ef:e5:a2:ff:68:56:0a:
                    a8:24:e0:bb:c7:ab:6a:5e:fc:22:b6:8c:c9:3d:f5:
                    82:de:20:51:e2:6d:e1:e7:7c:e1:eb:53:f3:61:89:
                    b0:cc:8e:60:7d:d9:8d:a1:37:ce:21:a0:68:d5:db:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:85:37:CE:3E:7E:B6:F8:ED:31:01:17:0F:91:F0:BD:F1:52:E3
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:22:30:b0:6b:aa:7c:63:d4:c7:90:e6:93:b1:c9:ab:ae:
         cb:94:db:d3:52:4e:a6:ed:76:5a:f8:89:53:5e:9f:95:f2:ab:
         8f:4a:57:10:e1:fe:cb:4a:06:f0:47:57:1a:88:2e:c2:a3:7e:
         08:11:49:f4:45:57:f5:41:f2:43:07:3c:15:9a:30:c6:90:17:
         0f:fb:b0:77:a0:1c:ec:48:7d:83:f0:cb:cf:7c:e4:44:63:25:
         16:a0:45:60:a7:50:0a:0f:af:2f:cd:20:e9:24:bf:f8:67:52:
         55:e0:f4:97:a9:8f:76:e8:09:5c:cf:c2:0d:3c:c9:41:27:77:
         22:bf:60:a3:2c:f8:c0:49:c8:16:f1:2e:d2:c8:7a:7a:40:fc:
         73:e7:44:f6:12:76:c6:c1:3a:54:c6:bd:97:d0:7d:32:51:84:
         a4:2b:80:a1:24:58:2d:fb:1c:6a:ef:c2:91:09:73:7d:a7:19:
         78:94:18:8a:af:f7:b5:f6:04:0a:e7:a6:b3:a0:07:08:0c:23:
         20:e5:20:54:ec:fd:ff:9b:39:49:3a:e9:4c:e6:54:f6:14:b9:
         6c:a8:43:ed:33:27:c1:c4:73:c8:7d:aa:20:d6:72:8c:57:df:
         d4:2a:28:c7:e8:44:67:61:5d:13:75:ea:45:5c:74:21:4a:a4:
         c6:68:f5:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH55jRT8xtlqTG+Z+RMjvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUwNjA3MDEwMDQ5WhcNMjUwNjA4MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg4NTlkODUzN2NlM2U3ZWI2ZjhlZDMxMDExNzBmOTFmMGJkZjE1MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWIn7fqSehBOnuZtlsvHnaOw7N3z
NONXmXRkE3qNo9hN5nusAxQlA9+fBgzyYYMjQBlGuM6DooRzLMHOU3C3KVnJYA36
x759/NMorKB8VGzajOyVPvFAeY9PWahspqzNKOysd0iKeM2iTNSryuDH9hoHl7FY
0vMZ7XNPZhCLdS+3mhbuGuyr0WhebVwr1COf19/C6aRrqh3HvR0OZ3E3bpIOwGxT
p3nUtiHjeBtbP7XL3mF0NPpqGytGwbMwTgyuJaM+M2DN2hY7ze/lov9oVgqoJOC7
x6tqXvwitozJPfWC3iBR4m3h53zh61PzYYmwzI5gfdmNoTfOIaBo1dszwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWdhTfOPn62+O0xARcPkfC98VLjMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI0iMLBr
qnxj1MeQ5pOxyauuy5Tb01JOpu12WviJU16flfKrj0pXEOH+y0oG8EdXGoguwqN+
CBFJ9EVX9UHyQwc8FZowxpAXD/uwd6Ac7Eh9g/DLz3zkRGMlFqBFYKdQCg+vL80g
6SS/+GdSVeD0l6mPdugJXM/CDTzJQSd3Ir9goyz4wEnIFvEu0sh6ekD8c+dE9hJ2
xsE6VMa9l9B9MlGEpCuAoSRYLfscau/CkQlzfacZeJQYiq/3tfYECuems6AHCAwj
IOUgVOz9/5s5STrpTOZU9hS5bKhD7TMnwcRzyH2qINZyjFff1Coox+hEZ2FdE3Xq
RVx0IUqkxmj10A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:06 2025 by rpki-client