Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          iyC2z3cJnnT1iXmApjXxNJFGUIExIqH95nL6NkEmnEw=
Subject key identifier:   C2:28:9F:BE:B6:0A:F1:80:82:7F:D7:CC:27:DC:82:A9:46:11:15:01
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01974E206914BB02CF68424A0D4A2AB63491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 06:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:36 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: fd6QsHnx/ckr4gsHZCwnrj+2psnxsqDmqfRbqhnvfBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:69:14:bb:02:cf:68:42:4a:0d:4a:2a:b6:34:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Jun  8 06:00:36 2025 GMT
            Not After : Jun  9 06:00:36 2025 GMT
        Subject: CN=c2289fbeb60af180827fd7cc27dc82a946111501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:0a:da:c8:da:9a:17:77:02:68:82:d3:5e:
                    c9:5f:18:6c:a0:5e:b1:3b:b3:31:b8:71:b2:35:87:
                    04:cf:76:63:30:86:62:f3:a1:be:5a:57:59:11:bc:
                    59:a0:83:c8:91:6d:d6:d9:07:96:95:b4:cd:d1:b4:
                    d7:fb:4f:04:db:86:0d:5c:80:26:f6:03:ac:65:b2:
                    88:f6:a0:52:95:05:f5:60:f5:03:80:4f:12:bb:83:
                    5b:ca:ca:8c:cb:f2:ad:f8:61:d9:0a:80:de:fc:bd:
                    1f:73:c7:7e:29:4f:41:e4:28:41:5f:ef:51:72:68:
                    1b:8b:a0:21:e2:12:b2:79:78:14:93:1f:f9:38:f6:
                    6a:7e:a1:0f:0c:ab:01:ce:95:ab:e3:6b:bf:a7:e0:
                    8c:1c:c3:9a:ce:14:a8:1a:b1:1d:57:7c:64:ae:67:
                    3a:c8:a2:62:ee:bb:d4:aa:ed:40:63:0e:75:99:f1:
                    da:d0:e9:ab:7f:7d:b2:ff:b1:a5:7e:3e:4a:63:aa:
                    41:fc:84:5f:fd:34:84:1e:6f:c8:c5:32:3a:98:e6:
                    be:8f:c1:f2:39:e1:04:a5:8f:76:51:82:ee:6a:fe:
                    7c:ce:e3:35:98:a0:b4:87:c8:37:5f:f0:5a:ef:9e:
                    7e:f5:21:ab:be:43:b9:64:82:00:23:ef:75:d2:1e:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:9F:BE:B6:0A:F1:80:82:7F:D7:CC:27:DC:82:A9:46:11:15:01
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:76:1b:bc:bd:02:5e:31:49:da:90:af:a8:cd:7c:93:b9:6e:
         94:e6:50:15:d6:12:84:a8:50:d8:60:b3:03:6b:7e:b2:56:21:
         b5:2c:56:05:f0:67:dd:e9:13:30:63:fb:84:fe:7c:47:6e:ef:
         c9:47:2d:99:72:d6:5f:89:42:52:82:c0:3f:4f:dc:f5:92:69:
         17:2e:e3:5a:aa:cd:c1:a6:82:65:f1:33:0a:6a:c1:46:54:1b:
         49:9b:5f:d5:61:ec:c5:03:02:55:80:93:00:db:99:13:b1:6e:
         bc:33:29:1f:d8:39:64:ec:6e:7e:92:e6:70:8d:b9:49:ae:0c:
         1b:af:73:c2:99:4b:c1:4a:ed:92:27:78:7f:ac:f4:7b:42:e6:
         13:00:62:01:5e:ed:7b:d4:d6:6b:62:24:2a:5a:af:cf:49:e3:
         14:2f:32:70:22:0b:a5:2c:52:e3:36:86:f4:b7:21:2a:ae:48:
         d4:f0:01:ed:32:81:ee:d0:27:bd:b1:99:a7:0c:17:b5:a4:94:
         49:b7:69:c1:75:51:b1:fe:03:cd:65:a7:d1:06:ef:f4:9e:af:
         5e:9e:86:f1:c0:c5:59:89:b0:cd:cb:48:14:91:c0:1a:6a:86:
         e8:d2:38:ab:fc:5a:54:ff:ed:0a:6d:23:0f:42:b6:8b:1e:da:
         aa:75:2e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIGkUuwLPaEJKDUoqtjSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl
N2Y4NWEwHhcNMjUwNjA4MDYwMDM2WhcNMjUwNjA5MDYwMDM2WjAzMTEwLwYDVQQD
EyhjMjI4OWZiZWI2MGFmMTgwODI3ZmQ3Y2MyN2RjODJhOTQ2MTExNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C8K2sjamhd3AmiC017JXxhsoF6x
O7MxuHGyNYcEz3ZjMIZi86G+WldZEbxZoIPIkW3W2QeWlbTN0bTX+08E24YNXIAm
9gOsZbKI9qBSlQX1YPUDgE8Su4NbysqMy/Kt+GHZCoDe/L0fc8d+KU9B5ChBX+9R
cmgbi6Ah4hKyeXgUkx/5OPZqfqEPDKsBzpWr42u/p+CMHMOazhSoGrEdV3xkrmc6
yKJi7rvUqu1AYw51mfHa0Omrf32y/7Glfj5KY6pB/IRf/TSEHm/IxTI6mOa+j8Hy
OeEEpY92UYLuav58zuM1mKC0h8g3X/Ba755+9SGrvkO5ZIIAI+910h7dvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIon762CvGAgn/XzCfcgqlGERUBMB8GA1UdIwQY
MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt
YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy
LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXYbvL0C
XjFJ2pCvqM18k7lulOZQFdYShKhQ2GCzA2t+slYhtSxWBfBn3ekTMGP7hP58R27v
yUctmXLWX4lCUoLAP0/c9ZJpFy7jWqrNwaaCZfEzCmrBRlQbSZtf1WHsxQMCVYCT
ANuZE7FuvDMpH9g5ZOxufpLmcI25Sa4MG69zwplLwUrtkid4f6z0e0LmEwBiAV7t
e9TWa2IkKlqvz0njFC8ycCILpSxS4zaG9LchKq5I1PAB7TKB7tAnvbGZpwwXtaSU
SbdpwXVRsf4DzWWn0Qbv9J6vXp6G8cDFWYmwzctIFJHAGmqG6NI4q/xaVP/tCm0j
D0K2ix7aqnUuMw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:11:48 2025 by rpki-client