Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File:                     AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier:          jNW5Zat3BNmhxljEuSRV6Ssi2AlOPvoZODBOrnmZROM=
Subject key identifier:   4E:38:BF:E4:97:02:F6:70:2E:F5:DD:75:F7:6B:F3:C0:69:C4:E7:5C
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer:       /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial:       01975CB8057F7D6E5366CF4C0C23F39BF69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 02:00:53 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:53 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:53 +0000
Files and hashes:         1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Qv6WjcdHHc6MQaaoMV+fIb6dBgGtDYGbIqchSkK7ASI=)
                          2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
                          3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b8:05:7f:7d:6e:53:66:cf:4c:0c:23:f3:9b:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
        Validity
            Not Before: Jun 11 02:00:53 2025 GMT
            Not After : Jun 12 02:00:53 2025 GMT
        Subject: CN=4e38bfe49702f6702ef5dd75f76bf3c069c4e75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:68:62:88:b4:ba:20:d2:47:c9:de:a0:25:
                    be:71:e3:38:c3:d1:43:02:49:c7:21:a2:1e:35:7a:
                    63:f8:b6:02:a4:38:c5:84:25:2b:a2:f2:9f:f2:df:
                    35:bf:d1:6c:8d:14:ff:ab:43:84:5a:54:95:29:61:
                    6d:05:a1:c5:ab:90:bc:03:12:31:1a:1f:45:33:cf:
                    cd:00:a2:bf:ed:61:c5:bb:47:2a:d0:b1:1d:e4:4b:
                    4a:b3:39:72:9d:4f:5d:02:49:79:52:61:69:c0:49:
                    9c:c4:bf:a7:eb:d9:ed:a3:56:e1:95:6c:dd:2a:4c:
                    e7:d4:40:13:75:ef:d4:d5:8c:7b:6a:c8:49:59:49:
                    e0:dd:30:11:02:f5:08:36:e8:8d:3f:a8:f8:dc:af:
                    68:52:37:d1:ed:68:3e:1f:53:4b:9a:5a:f4:bf:79:
                    ef:df:90:43:0c:11:10:11:66:b6:a1:e5:ee:93:70:
                    8a:eb:56:5a:1f:d1:7c:4b:d5:b0:6d:ca:b0:76:ad:
                    67:37:f6:a4:db:da:44:5f:91:4d:4e:3d:6e:c3:d9:
                    95:6f:ee:f4:c8:f0:0f:34:9d:1c:af:4d:0d:7f:5d:
                    23:84:25:b9:0c:e9:89:21:84:23:26:b3:83:31:7e:
                    56:67:58:c0:55:30:77:cd:39:dc:58:7b:24:65:74:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:38:BF:E4:97:02:F6:70:2E:F5:DD:75:F7:6B:F3:C0:69:C4:E7:5C
            X509v3 Authority Key Identifier:
                keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:8c:bc:1a:97:66:7f:fa:8f:83:a6:1c:c8:ee:14:ce:39:
         f8:e0:de:79:a7:8b:b2:85:3e:83:c7:75:90:73:28:f2:ab:2a:
         a2:e4:77:19:bf:4f:24:88:c5:14:a9:75:db:5a:cd:94:aa:1a:
         f8:26:e0:52:3f:98:6f:70:b0:7c:80:54:34:bf:24:fd:2e:c8:
         bc:61:c5:ad:76:8f:b1:29:3c:75:70:48:21:28:74:41:9e:f6:
         a8:c5:0e:ae:1d:6e:94:02:d4:f4:b0:4c:17:a4:49:91:1b:b2:
         23:db:9e:fb:5f:b6:6f:e5:c8:bf:a6:06:c2:b8:d6:5a:23:53:
         35:a3:03:01:71:bd:35:2a:4e:58:5f:7d:c8:a3:ac:ee:56:6d:
         48:8a:6e:e0:a3:e6:51:fb:af:75:9e:51:b6:b1:3e:14:57:bb:
         f9:b1:12:46:a2:48:7a:15:4f:ef:c6:1d:83:0a:44:b5:a0:9d:
         47:0f:03:10:24:e1:89:57:30:82:68:38:a2:84:cb:ca:fc:d0:
         04:e6:37:c9:d6:60:d0:bb:c9:a6:5d:b0:97:b4:fd:0a:4c:5f:
         9c:53:df:de:c2:b1:62:84:ce:82:76:5e:f4:88:1b:44:49:7e:
         25:84:8a:52:1d:a3:ba:51:04:33:03:7c:b8:f9:b8:01:eb:6c:
         0f:0b:65:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcuAV/fW5TZs9MDCPzm/aeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjUwNjExMDIwMDUzWhcNMjUwNjEyMDIwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTM4YmZlNDk3MDJmNjcwMmVmNWRkNzVmNzZiZjNjMDY5YzRlNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZoYoi0uiDSR8neoCW+ceM4w9FD
AknHIaIeNXpj+LYCpDjFhCUrovKf8t81v9FsjRT/q0OEWlSVKWFtBaHFq5C8AxIx
Gh9FM8/NAKK/7WHFu0cq0LEd5EtKszlynU9dAkl5UmFpwEmcxL+n69nto1bhlWzd
Kkzn1EATde/U1Yx7ashJWUng3TARAvUINuiNP6j43K9oUjfR7Wg+H1NLmlr0v3nv
35BDDBEQEWa2oeXuk3CK61ZaH9F8S9Wwbcqwdq1nN/ak29pEX5FNTj1uw9mVb+70
yPAPNJ0cr00Nf10jhCW5DOmJIYQjJrODMX5WZ1jAVTB3zTncWHskZXRgLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE44v+SXAvZwLvXddfdr88BpxOdcMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbGMvBqX
Zn/6j4OmHMjuFM45+ODeeaeLsoU+g8d1kHMo8qsqouR3Gb9PJIjFFKl121rNlKoa
+CbgUj+Yb3CwfIBUNL8k/S7IvGHFrXaPsSk8dXBIISh0QZ72qMUOrh1ulALU9LBM
F6RJkRuyI9ue+1+2b+XIv6YGwrjWWiNTNaMDAXG9NSpOWF99yKOs7lZtSIpu4KPm
UfuvdZ5RtrE+FFe7+bESRqJIehVP78YdgwpEtaCdRw8DECThiVcwgmg4ooTLyvzQ
BOY3ydZg0LvJpl2wl7T9CkxfnFPf3sKxYoTOgnZe9IgbREl+JYSKUh2julEEMwN8
uPm4AetsDwtlBg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:27:49 2025 by rpki-client