Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File:                     1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier:          QCtiHnCcA6vgt1dADzX335E1NZOyNQ8ULUxm0pNKfzI=
Subject key identifier:   4D:86:21:E8:05:24:B0:59:04:41:50:A7:35:33:13:D8:00:D5:AE:D6
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer:       /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial:       019758DAF49FBC2DE230783772C02861723D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 08:00:33 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:33 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:33 +0000
Files and hashes:         1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: t0fEETBTEnWBneUmPbMaku0eRbw888sNoF177DtdRXo=)
                          2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:f4:9f:bc:2d:e2:30:78:37:72:c0:28:61:72:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
        Validity
            Not Before: Jun 10 08:00:33 2025 GMT
            Not After : Jun 11 08:00:33 2025 GMT
        Subject: CN=4d8621e80524b059044150a7353313d800d5aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:c2:55:25:2b:2b:ff:4a:14:3c:42:56:38:
                    3f:5b:ea:1e:a1:d4:87:ad:0f:ef:0a:79:bb:96:2f:
                    67:81:04:af:b9:fe:1f:0a:27:74:0f:2e:dc:cf:58:
                    38:51:97:e8:b6:fc:1a:bf:45:83:c2:f8:b5:ce:f5:
                    34:77:8f:4d:fd:0f:32:f6:48:d6:5d:e9:bc:07:38:
                    47:46:98:31:63:84:38:f1:a3:de:70:07:82:a8:b2:
                    8c:54:b0:b6:5a:2c:f1:5c:00:f5:68:c3:84:db:6e:
                    a7:e3:77:57:65:e2:c1:8e:e6:f5:a7:84:1d:5c:b2:
                    89:5a:dd:7a:98:2e:d8:ff:45:33:b0:b7:d2:bb:96:
                    30:4e:db:1f:5c:43:86:9e:ce:e8:19:51:3f:d9:ef:
                    fe:e2:41:08:ba:5e:e6:ae:e2:27:da:e3:a2:46:4d:
                    c2:32:40:f6:13:93:3b:28:25:78:5d:bc:67:1f:bc:
                    5f:cc:ec:95:75:b3:aa:86:47:a2:f7:3e:37:47:74:
                    58:b0:49:a9:8d:c6:f0:81:32:ca:40:f3:2c:11:b1:
                    f6:1f:18:ae:45:d7:2b:51:f1:42:22:bb:40:1e:64:
                    e0:ba:52:d3:4a:c7:ef:4c:f2:04:72:bb:03:17:34:
                    e4:8f:87:7f:a3:5f:8c:9c:7b:25:16:fe:c2:14:d8:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:21:E8:05:24:B0:59:04:41:50:A7:35:33:13:D8:00:D5:AE:D6
            X509v3 Authority Key Identifier:
                keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:a6:88:80:01:6a:4b:0b:6d:3d:08:92:40:44:28:05:b3:
         c2:18:d6:aa:88:74:6e:79:fe:7d:30:c1:8a:9e:34:fa:be:a8:
         23:46:3c:1f:0a:08:d3:d9:20:4a:0c:7d:d1:c5:57:8a:3f:a4:
         da:02:32:af:e9:07:39:36:ef:17:a9:fc:17:d9:ad:d7:60:dd:
         86:42:59:66:0d:46:5b:06:a2:01:a1:7c:09:ef:fe:7c:55:29:
         cd:8d:79:a2:a5:08:a7:f7:1d:0f:13:c4:f1:bb:fb:8e:c8:9f:
         47:22:e2:80:dd:83:14:74:ad:1d:b0:d1:de:85:48:9d:25:06:
         46:21:bd:82:4e:9f:88:f8:fe:1f:fc:7d:19:ea:f4:aa:65:ad:
         36:f2:49:b1:89:65:2a:2f:4f:79:0e:da:b4:13:57:4a:fe:c0:
         d0:9f:3b:4a:d1:1e:c7:96:7f:1e:9e:37:6f:35:b9:74:6d:65:
         f6:ea:9a:49:3a:13:d7:27:a7:a1:12:f3:a5:0c:25:c3:94:c8:
         51:7c:ad:56:f5:40:2c:fa:f7:63:5c:7b:af:31:ea:17:3f:89:
         0c:69:18:ab:e3:6d:8a:72:33:51:9f:d3:fe:4a:61:b5:67:91:
         cf:05:e8:7a:0f:2d:7c:2d:97:fa:ef:d8:bb:84:e5:1b:ff:bf:
         8a:d0:d2:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdY2vSfvC3iMHg3csAoYXI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUwNjEwMDgwMDMzWhcNMjUwNjExMDgwMDMzWjAzMTEwLwYDVQQD
Eyg0ZDg2MjFlODA1MjRiMDU5MDQ0MTUwYTczNTMzMTNkODAwZDVhZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFzCVSUrK/9KFDxCVjg/W+oeodSH
rQ/vCnm7li9ngQSvuf4fCid0Dy7cz1g4UZfotvwav0WDwvi1zvU0d49N/Q8y9kjW
Xem8BzhHRpgxY4Q48aPecAeCqLKMVLC2WizxXAD1aMOE226n43dXZeLBjub1p4Qd
XLKJWt16mC7Y/0UzsLfSu5YwTtsfXEOGns7oGVE/2e/+4kEIul7mruIn2uOiRk3C
MkD2E5M7KCV4XbxnH7xfzOyVdbOqhkei9z43R3RYsEmpjcbwgTLKQPMsEbH2Hxiu
RdcrUfFCIrtAHmTgulLTSsfvTPIEcrsDFzTkj4d/o1+MnHslFv7CFNh+sQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE2GIegFJLBZBEFQpzUzE9gA1a7WMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiGm
iIABaksLbT0IkkBEKAWzwhjWqoh0bnn+fTDBip40+r6oI0Y8HwoI09kgSgx90cVX
ij+k2gIyr+kHOTbvF6n8F9mt12DdhkJZZg1GWwaiAaF8Ce/+fFUpzY15oqUIp/cd
DxPE8bv7jsifRyLigN2DFHStHbDR3oVInSUGRiG9gk6fiPj+H/x9Ger0qmWtNvJJ
sYllKi9PeQ7atBNXSv7A0J87StEex5Z/Hp43bzW5dG1l9uqaSToT1yenoRLzpQwl
w5TIUXytVvVALPr3Y1x7rzHqFz+JDGkYq+NtinIzUZ/T/kphtWeRzwXoeg8tfC2X
+u/Yu4TlG/+/itDSmw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:49:27 2025 by rpki-client