Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File:                     r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier:          Dwlcu475p7s5B77An57nBu8zEXzYi/QiFR4ma3QpXPE=
Subject key identifier:   E2:24:15:D8:9E:B2:BE:D4:4C:90:0A:C0:17:8F:44:C4:50:39:87:B8
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer:       /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial:       019746D47495874F08C41DB35F8D29D90604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 20:00:17 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:17 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:17 +0000
Files and hashes:         1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
                          2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: 9of5Vxr8jIdNL6PXFHTK0GnlEw8vPAhKu0xbujVoxlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:74:95:87:4f:08:c4:1d:b3:5f:8d:29:d9:06:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
        Validity
            Not Before: Jun  6 20:00:17 2025 GMT
            Not After : Jun  7 20:00:17 2025 GMT
        Subject: CN=e22415d89eb2bed44c900ac0178f44c4503987b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:63:a6:f2:49:64:bc:3f:46:bd:4b:c4:3f:
                    4b:61:e5:6d:22:39:e7:97:9c:74:7e:1e:20:b4:30:
                    72:7c:c3:71:a8:9b:2b:02:c8:7a:e6:c9:ee:08:a8:
                    c4:c0:a2:c7:20:8c:c5:3a:c4:85:c4:09:b8:76:f8:
                    67:1e:e5:e1:88:6a:37:b9:5e:fa:7b:e1:e1:7a:14:
                    87:7a:1f:69:2d:c9:b5:b6:02:39:30:e1:c7:a0:32:
                    37:d4:26:09:1d:10:5b:ae:ea:aa:ab:a3:74:cd:f9:
                    2d:45:3b:ad:1a:b2:da:e0:9e:e5:81:2f:34:65:66:
                    b0:95:59:7d:27:72:45:d0:ab:a0:f8:a3:4c:7a:20:
                    a8:4c:05:2c:84:2b:57:6e:cb:67:94:4d:a2:8b:16:
                    06:4e:87:b9:1f:b3:c4:de:7a:68:6e:4e:cc:7a:4b:
                    54:46:40:8f:33:ac:e4:50:b1:2f:59:7a:66:19:d4:
                    4d:6e:86:d4:84:25:79:53:23:e0:ff:46:87:ad:8a:
                    a3:b8:99:10:ec:6f:f9:b3:7f:b4:05:61:8f:3a:19:
                    e1:c1:47:21:62:43:01:db:df:5f:c0:41:c3:d3:77:
                    6e:7c:19:25:7c:f4:f9:ad:bf:9c:b3:20:95:d3:5d:
                    84:2b:3d:34:1c:14:88:95:c7:0d:33:ec:33:eb:24:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:15:D8:9E:B2:BE:D4:4C:90:0A:C0:17:8F:44:C4:50:39:87:B8
            X509v3 Authority Key Identifier:
                keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:7d:4c:a1:b2:ee:81:7a:d2:db:7e:55:d2:1c:34:23:b5:
         2b:48:1b:f4:5e:45:c1:5d:52:50:67:18:92:8e:25:7d:48:5a:
         73:f9:eb:5c:41:1f:58:01:1a:7c:c0:b5:e6:d4:fc:77:3e:3c:
         35:f6:b3:97:e6:c2:17:5c:df:2c:07:46:98:5c:19:07:b6:17:
         4a:fb:05:f1:53:1d:ce:a9:fd:18:5f:d8:cd:10:9d:91:b9:5d:
         df:37:30:7b:b1:bb:d4:5e:6f:97:13:26:59:ec:ac:bc:1b:21:
         c1:b6:d3:68:fb:27:ad:ea:07:44:1d:91:96:52:a2:6f:13:09:
         b1:df:a5:af:ca:8e:01:76:c4:67:39:ab:fa:e8:55:00:10:fe:
         e5:36:1c:14:fe:55:41:3f:a1:21:65:bd:18:cc:ac:d0:dd:27:
         2f:90:5d:fe:89:e3:fb:37:8b:1a:aa:05:2e:4c:27:c9:d7:32:
         6f:84:72:6f:8e:f3:d5:63:a7:e9:1f:95:4f:59:9e:f6:ed:83:
         93:24:b3:70:37:6b:49:ba:54:16:0f:6b:57:82:39:3e:a0:f6:
         7a:39:93:39:b8:d5:30:27:13:ae:35:83:24:f8:b1:57:ed:9a:
         3f:ee:46:27:48:1b:c0:64:f6:bd:ef:ba:df:7d:b9:74:6f:c2:
         70:e8:bf:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1HSVh08IxB2zX40p2QYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh
ZjkyYjAwHhcNMjUwNjA2MjAwMDE3WhcNMjUwNjA3MjAwMDE3WjAzMTEwLwYDVQQD
EyhlMjI0MTVkODllYjJiZWQ0NGM5MDBhYzAxNzhmNDRjNDUwMzk4N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4xjpvJJZLw/Rr1LxD9LYeVtIjnn
l5x0fh4gtDByfMNxqJsrAsh65snuCKjEwKLHIIzFOsSFxAm4dvhnHuXhiGo3uV76
e+HhehSHeh9pLcm1tgI5MOHHoDI31CYJHRBbruqqq6N0zfktRTutGrLa4J7lgS80
ZWawlVl9J3JF0Kug+KNMeiCoTAUshCtXbstnlE2iixYGToe5H7PE3npobk7MektU
RkCPM6zkULEvWXpmGdRNbobUhCV5UyPg/0aHrYqjuJkQ7G/5s3+0BWGPOhnhwUch
YkMB299fwEHD03dufBklfPT5rb+csyCV012EKz00HBSIlccNM+wz6yQlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIkFdiesr7UTJAKwBePRMRQOYe4MB8GA1UdIwQY
MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt
MTQ3ZTQ1NzI4NzNhLzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh
LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAF9TKGy
7oF60tt+VdIcNCO1K0gb9F5FwV1SUGcYko4lfUhac/nrXEEfWAEafMC15tT8dz48
Nfazl+bCF1zfLAdGmFwZB7YXSvsF8VMdzqn9GF/YzRCdkbld3zcwe7G71F5vlxMm
WeysvBshwbbTaPsnreoHRB2RllKibxMJsd+lr8qOAXbEZzmr+uhVABD+5TYcFP5V
QT+hIWW9GMys0N0nL5Bd/onj+zeLGqoFLkwnydcyb4Ryb47z1WOn6R+VT1me9u2D
kySzcDdrSbpUFg9rV4I5PqD2ejmTObjVMCcTrjWDJPixV+2aP+5GJ0gbwGT2ve+6
3325dG/CcOi/KQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:21 2025 by rpki-client