Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          rcV+sYfNGn/TY2reLzMhl3WHLcl6yP/PEztpvQi/LWo=
Subject key identifier:   E5:A1:63:EB:11:54:F1:F8:15:A3:EA:8E:F1:0F:92:FD:5F:47:16:60
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       0197488CFD58C3C5D2DB338E51F209FDE9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          1589
Signing time:             Sat 07 Jun 2025 04:01:28 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:28 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:28 +0000
Files and hashes:         1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=)
                          2: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=)
                          3: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=)
                          4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: RAuokt5rB70+qJmtC+C8JaFNrGzpPI5rPm/CU3x7QX0=)
                          5: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=)
                          6: tSkgtw28-Km5F0YiHIf1O1pkoXI.roa (hash: 0ECcSRlX4TniqxVIh1N6rLlLbSyp1biqLJH1F5jVobk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:fd:58:c3:c5:d2:db:33:8e:51:f2:09:fd:e9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Jun  7 04:01:28 2025 GMT
            Not After : Jun  8 04:01:28 2025 GMT
        Subject: CN=e5a163eb1154f1f815a3ea8ef10f92fd5f471660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:80:ad:37:08:23:78:cb:c0:6a:cb:85:6c:
                    14:58:d4:9c:7e:96:13:d0:cb:94:44:95:53:63:6a:
                    63:32:bd:9e:ee:7a:5d:30:c4:69:48:b2:f3:40:8c:
                    f1:83:44:af:6a:fd:47:7e:21:b5:5f:a7:19:98:42:
                    bb:8d:69:ca:e7:60:f7:bb:50:9a:b1:64:41:39:76:
                    07:93:18:39:e9:8c:94:c5:39:43:73:02:5a:30:7e:
                    03:04:ff:2e:ae:cc:3f:74:12:4d:b4:bb:31:b8:23:
                    f3:b1:27:eb:fa:31:7e:19:8d:bf:ae:30:00:16:b6:
                    1e:a4:53:9b:12:e5:c0:53:00:ae:f3:99:c0:95:3b:
                    33:bc:91:05:70:d3:34:4c:c0:c1:35:ac:13:ab:54:
                    71:53:91:e2:01:72:f3:2b:d1:3d:73:e8:2a:99:18:
                    b1:51:2f:03:7c:db:da:e5:20:a9:14:7b:16:93:e2:
                    05:c0:f9:2f:8f:a0:6a:4c:d5:ae:01:d8:48:86:b0:
                    22:5d:64:ff:cb:d7:13:e6:fe:0c:fa:d5:9e:37:24:
                    66:25:22:b3:9e:ff:10:a4:8c:45:12:94:6e:95:b3:
                    2e:54:0c:c1:b9:2d:43:d7:c7:9d:9a:8d:a0:70:6a:
                    83:6e:8a:f0:6f:dc:bd:84:eb:bf:f0:99:81:97:ac:
                    1d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:63:EB:11:54:F1:F8:15:A3:EA:8E:F1:0F:92:FD:5F:47:16:60
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:90:79:ef:05:b4:c8:7d:e2:2b:b7:f8:40:09:30:36:a2:
         b9:e0:d8:b5:31:2e:6d:3f:fb:5a:4a:ac:9b:a3:36:5a:02:a1:
         15:de:d8:6b:6a:eb:2f:b6:36:37:f3:54:9a:03:89:68:6e:02:
         b5:18:be:03:59:3f:6a:6b:a4:01:55:eb:c8:67:d2:cc:a1:0d:
         1c:c6:5f:c3:0d:6e:fe:55:a2:07:d3:32:de:7c:0a:a3:34:94:
         83:4a:20:c8:94:79:be:d3:f7:33:5f:29:36:81:a3:7e:58:21:
         f7:91:76:b9:72:74:ab:26:cc:10:d5:0b:f7:67:a4:7d:a7:4b:
         9e:ae:87:f9:85:53:a6:1c:b1:1f:87:d9:10:dd:fc:56:32:59:
         48:82:17:61:c5:8c:75:be:1a:05:07:41:86:97:af:ac:94:ac:
         e5:7a:81:c3:e8:e5:b5:24:b5:2d:61:85:0f:61:15:4a:ea:2b:
         ae:d3:7c:c9:8c:58:af:56:ea:e6:b2:6a:b4:ee:e4:05:3b:73:
         2f:fc:d8:92:f1:fa:24:2c:a8:7e:3c:5f:d7:2c:18:85:e7:54:
         22:b3:db:5f:d3:83:62:1b:37:bb:be:47:ea:40:9f:9c:e3:ce:
         ed:b4:6a:79:a0:84:d4:d1:2a:56:08:44:a7:18:a7:3a:6c:2a:
         f6:2e:d7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjP1Yw8XS2zOOUfIJ/enRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjUwNjA3MDQwMTI4WhcNMjUwNjA4MDQwMTI4WjAzMTEwLwYDVQQD
EyhlNWExNjNlYjExNTRmMWY4MTVhM2VhOGVmMTBmOTJmZDVmNDcxNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XqArTcII3jLwGrLhWwUWNScfpYT
0MuURJVTY2pjMr2e7npdMMRpSLLzQIzxg0Svav1HfiG1X6cZmEK7jWnK52D3u1Ca
sWRBOXYHkxg56YyUxTlDcwJaMH4DBP8ursw/dBJNtLsxuCPzsSfr+jF+GY2/rjAA
FrYepFObEuXAUwCu85nAlTszvJEFcNM0TMDBNawTq1RxU5HiAXLzK9E9c+gqmRix
US8DfNva5SCpFHsWk+IFwPkvj6BqTNWuAdhIhrAiXWT/y9cT5v4M+tWeNyRmJSKz
nv8QpIxFEpRulbMuVAzBuS1D18edmo2gcGqDborwb9y9hOu/8JmBl6wdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWhY+sRVPH4FaPqjvEPkv1fRxZgMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwaQee8F
tMh94iu3+EAJMDaiueDYtTEubT/7Wkqsm6M2WgKhFd7Ya2rrL7Y2N/NUmgOJaG4C
tRi+A1k/amukAVXryGfSzKENHMZfww1u/lWiB9My3nwKozSUg0ogyJR5vtP3M18p
NoGjflgh95F2uXJ0qybMENUL92ekfadLnq6H+YVTphyxH4fZEN38VjJZSIIXYcWM
db4aBQdBhpevrJSs5XqBw+jltSS1LWGFD2EVSuorrtN8yYxYr1bq5rJqtO7kBTtz
L/zYkvH6JCyofjxf1ywYhedUIrPbX9ODYhs3u75H6kCfnOPO7bRqeaCE1NEqVghE
pxinOmwq9i7XNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:42 2025 by rpki-client