Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File:                     zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier:          OhUIQNlC+Wh9HJUT7jRS2JbErcHvD2PfxIP2yThLB1k=
Subject key identifier:   3D:12:05:CD:63:92:89:F3:C8:5E:FB:4D:2B:DC:BA:6B:24:25:18:BC
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer:       /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial:       01975C812BF5E55AAF25571E57987F2FA5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number:          1588
Signing time:             Wed 11 Jun 2025 01:00:58 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:58 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:58 +0000
Files and hashes:         1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
                          2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: LAVEZqMz98qcwdq9tfv7qnFyVF/R7ObFAb3MYQ7Cg3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:81:2b:f5:e5:5a:af:25:57:1e:57:98:7f:2f:a5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
        Validity
            Not Before: Jun 11 01:00:58 2025 GMT
            Not After : Jun 12 01:00:58 2025 GMT
        Subject: CN=3d1205cd639289f3c85efb4d2bdcba6b242518bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:38:46:26:fc:25:04:fc:3b:06:fd:d6:39:
                    85:8c:1d:88:be:07:b2:df:7a:52:87:42:05:45:13:
                    30:2f:0b:c0:74:55:be:b5:c1:26:cc:b7:71:bd:67:
                    3e:80:ba:f4:e9:54:41:76:45:51:90:8c:0f:ea:33:
                    c2:8d:30:15:14:f5:fe:e2:39:84:f0:d8:84:6e:1d:
                    2e:18:c0:af:a5:fa:b1:bf:c8:60:b1:66:41:a6:a3:
                    c5:d9:5e:53:cb:ba:70:ff:01:84:73:c3:db:42:2a:
                    26:22:ed:41:e4:99:a9:7d:0a:34:cc:d8:4b:09:40:
                    98:0c:c8:19:77:14:2c:f2:16:40:28:72:44:1b:21:
                    16:b9:74:3b:27:ed:b2:e0:32:e7:89:19:0b:70:c3:
                    a6:80:34:ef:c4:00:5c:4d:95:40:78:eb:a9:f7:f0:
                    f3:3f:09:e2:0b:97:47:87:46:90:8d:ff:cc:03:c5:
                    e1:9c:55:8d:2f:d9:92:3f:ae:e4:21:75:49:8f:e5:
                    dc:4e:8b:18:a1:a2:f9:0c:73:65:e2:48:d9:bf:e0:
                    65:14:d7:1d:68:e2:0e:9c:73:9d:e0:f1:ff:f4:a1:
                    43:c1:88:33:f6:f9:9f:dd:be:f6:67:e8:cb:65:b8:
                    76:1c:a7:f3:63:c1:11:58:c1:51:42:6f:aa:aa:cb:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:05:CD:63:92:89:F3:C8:5E:FB:4D:2B:DC:BA:6B:24:25:18:BC
            X509v3 Authority Key Identifier:
                keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:b6:6b:4e:a9:c9:a3:f5:36:33:2c:6a:a0:34:8d:3c:47:
         eb:2d:41:07:1a:82:f7:42:e0:6e:99:6f:29:e3:31:8d:5f:a4:
         5a:26:e6:26:85:86:31:1b:40:43:69:12:9b:e9:8e:c3:22:57:
         43:23:ae:c2:1a:8e:e1:c7:4a:1d:f9:37:ed:1c:2a:60:f4:a6:
         e0:88:07:c9:74:4c:82:f2:c9:6a:b2:51:70:24:e3:36:72:7c:
         04:d5:b9:67:e6:47:ea:93:df:09:93:cb:19:7d:be:46:90:ea:
         5c:e6:8a:86:19:1d:7b:52:78:34:f8:aa:e5:58:0a:d7:5a:48:
         52:1d:92:ec:74:c6:37:7e:81:f5:cd:d4:11:93:e2:9c:82:4b:
         bb:98:3f:fe:8e:9b:a1:2c:50:d4:37:7e:c7:84:01:3e:93:e6:
         89:d2:65:52:d0:ca:40:14:56:6a:56:ae:b2:62:08:61:76:c0:
         13:32:d4:7c:c5:cb:99:02:24:d9:e6:3a:47:00:aa:6c:d9:27:
         00:72:a4:45:85:a9:2d:76:9a:52:70:50:a6:6d:c0:78:f3:54:
         66:45:6a:82:33:ab:b8:31:42:96:96:4c:ab:25:dd:82:01:2f:
         be:dd:cb:e9:87:13:83:3d:00:4e:53:0a:90:8a:d1:c8:09:96:
         d2:c2:1f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcgSv15VqvJVceV5h/L6XYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwNjExMDEwMDU4WhcNMjUwNjEyMDEwMDU4WjAzMTEwLwYDVQQD
EygzZDEyMDVjZDYzOTI4OWYzYzg1ZWZiNGQyYmRjYmE2YjI0MjUxOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ts4Rib8JQT8Owb91jmFjB2Ivgey
33pSh0IFRRMwLwvAdFW+tcEmzLdxvWc+gLr06VRBdkVRkIwP6jPCjTAVFPX+4jmE
8NiEbh0uGMCvpfqxv8hgsWZBpqPF2V5Ty7pw/wGEc8PbQiomIu1B5JmpfQo0zNhL
CUCYDMgZdxQs8hZAKHJEGyEWuXQ7J+2y4DLniRkLcMOmgDTvxABcTZVAeOup9/Dz
PwniC5dHh0aQjf/MA8XhnFWNL9mSP67kIXVJj+XcTosYoaL5DHNl4kjZv+BlFNcd
aOIOnHOd4PH/9KFDwYgz9vmf3b72Z+jLZbh2HKfzY8ERWMFRQm+qqst+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0SBc1jkonzyF77TSvcumskJRi8MB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0G2a06p
yaP1NjMsaqA0jTxH6y1BBxqC90LgbplvKeMxjV+kWibmJoWGMRtAQ2kSm+mOwyJX
QyOuwhqO4cdKHfk37RwqYPSm4IgHyXRMgvLJarJRcCTjNnJ8BNW5Z+ZH6pPfCZPL
GX2+RpDqXOaKhhkde1J4NPiq5VgK11pIUh2S7HTGN36B9c3UEZPinIJLu5g//o6b
oSxQ1Dd+x4QBPpPmidJlUtDKQBRWalausmIIYXbAEzLUfMXLmQIk2eY6RwCqbNkn
AHKkRYWpLXaaUnBQpm3AePNUZkVqgjOruDFClpZMqyXdggEvvt3L6YcTgz0ATlMK
kIrRyAmW0sIfJA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:44:51 2025 by rpki-client