Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File:                     t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier:          Mzef4s43ynDNjQ4HAMu9rxkaUVho5BsxTvAk3DaOoSA=
Subject key identifier:   7B:31:B0:7B:14:BB:85:24:C3:47:F1:FE:83:4B:1D:F0:F7:49:BD:24
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer:       /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial:       0197499F41AD9C64504B04DAE0DC9547B0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number:          1585
Signing time:             Sat 07 Jun 2025 09:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:03 +0000
Files and hashes:         1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
                          2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: wBYFejYlk93aKlo/yLz1Oujjr6Ww9MBf+4Ne6v5RF28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:41:ad:9c:64:50:4b:04:da:e0:dc:95:47:b0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
        Validity
            Not Before: Jun  7 09:01:03 2025 GMT
            Not After : Jun  8 09:01:03 2025 GMT
        Subject: CN=7b31b07b14bb8524c347f1fe834b1df0f749bd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:ba:ce:22:b5:09:1a:ed:14:a6:a0:da:f3:
                    e0:69:05:93:1f:8e:c1:d5:7e:81:13:7d:a4:19:76:
                    28:19:9c:20:df:51:61:00:3b:24:8b:43:68:47:7a:
                    de:79:e8:6b:0c:b2:c6:d7:06:40:c0:d9:34:e9:27:
                    f4:4d:de:eb:87:6a:50:c1:11:4d:61:39:f9:93:9b:
                    78:ca:41:d1:c3:6e:7a:2e:be:6c:70:6a:82:06:ec:
                    d5:a6:2f:54:d7:5e:70:99:fe:31:aa:db:4f:c6:ba:
                    5a:78:b1:cc:b3:bc:c6:7e:7f:59:b4:3a:ae:00:fe:
                    3c:0e:8c:82:67:22:b3:54:d2:ee:1a:7f:b5:7e:70:
                    17:0c:d4:67:1f:25:12:a8:6b:a1:33:0b:79:13:84:
                    69:d9:68:c5:cc:89:13:87:82:8a:61:62:91:39:b1:
                    8a:46:e0:ea:0e:47:9b:b8:36:70:10:ac:ab:ef:fb:
                    7f:53:b1:86:0c:30:66:ae:b1:97:95:71:fe:70:d1:
                    9c:72:0d:5d:d0:d9:cc:df:7b:5a:34:57:65:de:77:
                    44:1b:f6:6c:1b:d1:57:c5:f9:6d:29:83:14:e6:2d:
                    2f:af:9c:2d:f8:33:fe:bb:b1:f9:45:9b:7f:9f:85:
                    ea:bd:15:f8:78:ee:a2:b2:b3:0e:f1:9f:85:91:13:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:B0:7B:14:BB:85:24:C3:47:F1:FE:83:4B:1D:F0:F7:49:BD:24
            X509v3 Authority Key Identifier:
                keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:ae:05:66:bd:8d:12:6c:ad:59:3c:7f:75:37:55:c3:75:
         2e:f7:32:c2:4f:c2:56:24:df:c9:f7:af:2f:fa:53:8e:43:90:
         85:10:dc:97:ab:f2:f5:f6:26:89:d9:20:32:3d:16:b8:fe:66:
         04:7e:f2:78:5a:3b:2a:fd:80:16:c4:d6:f7:41:95:c7:7b:ed:
         eb:1c:dc:e1:6a:47:db:07:9a:36:5f:e7:6e:2a:4b:c1:38:44:
         8b:2f:43:ff:05:ad:3d:21:68:fd:4e:b8:b4:44:f2:a7:ad:7a:
         3b:5a:e7:50:bc:13:7f:c0:a3:c7:4e:95:75:0b:e7:11:ec:f6:
         38:a9:aa:0e:3e:1c:c6:ff:13:eb:c4:e3:61:41:db:46:c5:f8:
         0d:55:b9:a7:55:dc:35:26:8b:d8:68:3b:a8:64:f2:00:e6:7f:
         92:9f:c5:37:c1:38:a3:2c:64:20:95:cf:e0:a2:aa:a1:49:00:
         3f:f7:af:8c:bb:5e:0c:d2:d1:71:64:89:1a:43:0a:2b:5e:da:
         f3:16:24:4f:2e:f4:52:ab:7c:b7:d4:dd:cc:18:bd:16:91:37:
         d0:69:02:62:78:4b:75:e4:6f:75:19:de:e9:be:58:d6:72:81:
         7c:90:ca:b6:52:29:8a:6b:9b:10:27:11:d4:a7:c8:fb:22:18:
         7b:32:14:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn0GtnGRQSwTa4NyVR7CqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Y2MyZGEyYmRiOTdiZTkxMmEyZDk0MmViZTdlYWZhNDY1
MWU4ODUwHhcNMjUwNjA3MDkwMTAzWhcNMjUwNjA4MDkwMTAzWjAzMTEwLwYDVQQD
Eyg3YjMxYjA3YjE0YmI4NTI0YzM0N2YxZmU4MzRiMWRmMGY3NDliZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h+6ziK1CRrtFKag2vPgaQWTH47B
1X6BE32kGXYoGZwg31FhADski0NoR3reeehrDLLG1wZAwNk06Sf0Td7rh2pQwRFN
YTn5k5t4ykHRw256Lr5scGqCBuzVpi9U115wmf4xqttPxrpaeLHMs7zGfn9ZtDqu
AP48DoyCZyKzVNLuGn+1fnAXDNRnHyUSqGuhMwt5E4Rp2WjFzIkTh4KKYWKRObGK
RuDqDkebuDZwEKyr7/t/U7GGDDBmrrGXlXH+cNGccg1d0NnM33taNFdl3ndEG/Zs
G9FXxfltKYMU5i0vr5wt+DP+u7H5RZt/n4XqvRX4eO6isrMO8Z+FkRO5/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsxsHsUu4Ukw0fx/oNLHfD3Sb0kMB8GA1UdIwQY
MBaAFLfMLaK9uXvpEqLZQuvn6vpGUeiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2Yt
MjJlN2EzN2U4ZTM4LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2YtMjJlN2EzN2U4ZTM4
LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw6uBWa9
jRJsrVk8f3U3VcN1Lvcywk/CViTfyfevL/pTjkOQhRDcl6vy9fYmidkgMj0WuP5m
BH7yeFo7Kv2AFsTW90GVx3vt6xzc4WpH2weaNl/nbipLwThEiy9D/wWtPSFo/U64
tETyp616O1rnULwTf8Cjx06VdQvnEez2OKmqDj4cxv8T68TjYUHbRsX4DVW5p1Xc
NSaL2Gg7qGTyAOZ/kp/FN8E4oyxkIJXP4KKqoUkAP/evjLteDNLRcWSJGkMKK17a
8xYkTy70Uqt8t9TdzBi9FpE30GkCYnhLdeRvdRne6b5Y1nKBfJDKtlIpimubECcR
1KfI+yIYezIU4A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:06 2025 by rpki-client