Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          1XU0UTSSDbTTEqVOLOmG/oVasEv5NgkgHtOjzJWiezs=
Subject key identifier:   16:EB:A5:80:E9:86:D5:69:32:ED:0D:2A:8C:90:48:AC:0C:3C:CC:0F
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       01976E19A2143339B93552DDD841853DFE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:02 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: dSGImX10Z8iNH6RJUBuCD3YgJ+gWSbdHxOHWv6poLdI=)
                          2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:a2:14:33:39:b9:35:52:dd:d8:41:85:3d:fe:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Jun 14 11:01:02 2025 GMT
            Not After : Jun 15 11:01:02 2025 GMT
        Subject: CN=16eba580e986d56932ed0d2a8c9048ac0c3ccc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:4d:04:35:bb:4b:f8:bc:02:6d:8e:e8:da:
                    64:83:24:5a:64:39:45:28:b2:ef:c9:73:95:0c:80:
                    12:dc:32:d1:a7:f0:33:94:ff:d1:f9:8b:8d:c8:c9:
                    f8:d3:03:aa:a6:e2:61:da:02:be:ce:de:68:23:f1:
                    a5:5c:23:d0:18:ab:ee:ea:c6:3e:88:fa:d2:05:df:
                    2a:8c:2a:05:fd:65:07:bb:1a:ce:99:b8:ff:23:5c:
                    01:5d:8e:13:32:00:a0:ca:2d:46:54:fc:62:2d:94:
                    91:24:f1:6d:af:14:80:b7:d9:e9:31:fe:91:1c:2c:
                    b8:8a:fe:87:70:db:bc:57:80:8f:e8:2f:28:cd:b7:
                    66:01:96:fd:33:33:60:be:b0:6c:83:d2:45:c6:23:
                    b3:a3:4e:1f:85:ca:b9:8f:fc:10:ce:03:df:17:0e:
                    de:d6:99:24:b1:79:c4:ce:cd:89:bb:1b:35:f6:ea:
                    84:b3:c5:4a:24:81:39:20:f2:f3:8f:8e:4c:71:b4:
                    a0:fa:0b:06:3e:c2:23:a0:33:c1:20:6f:71:34:f2:
                    91:1a:dc:f3:e1:54:93:25:00:dc:9f:e4:b2:a3:b5:
                    4f:c0:db:af:9f:de:dc:4c:2b:95:61:f1:63:02:51:
                    6d:63:33:71:fe:92:70:8b:d4:e7:07:a8:db:2e:43:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:A5:80:E9:86:D5:69:32:ED:0D:2A:8C:90:48:AC:0C:3C:CC:0F
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:b9:15:bf:fc:e6:09:61:34:be:f5:ad:b8:a8:ef:2a:6a:
         1b:4a:d6:43:5f:80:8e:5a:29:5e:b4:9e:e1:9c:a1:99:95:61:
         f8:87:77:74:2c:79:cf:af:51:1a:54:1b:88:c7:03:6c:f5:f1:
         86:ed:42:4e:aa:a9:5e:4d:e3:6f:b2:4d:b2:2f:b2:31:23:2a:
         ed:30:6f:33:fe:84:bd:75:d0:33:d4:e7:8e:16:d0:24:72:1d:
         c4:30:1c:65:58:4d:60:98:a9:1c:e6:73:a4:4b:f0:6f:5e:67:
         e9:ea:44:fa:0e:ec:ae:12:cc:c0:bc:63:9b:4d:fd:f6:c5:2d:
         27:7e:71:83:5a:4c:eb:29:b3:48:b5:be:67:08:46:37:b9:a1:
         25:1b:cf:86:54:92:9a:73:dc:d9:15:60:a5:89:34:47:48:6c:
         2a:81:88:a5:cc:40:a1:7e:a1:8c:fc:97:f2:bb:4c:64:04:ae:
         32:c3:ee:2a:65:c4:86:4c:90:67:2d:a3:4a:44:e1:b8:5e:56:
         82:81:ce:da:3b:d8:d0:d0:8c:74:40:74:2a:59:59:8f:f8:40:
         88:3d:cd:b5:44:8d:4e:a7:a5:4a:c9:72:e4:cd:67:a3:c5:69:
         71:34:ef:6d:97:71:60:9d:e0:39:67:4f:6d:bd:61:e2:dd:67:
         f1:0d:b6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGaIUMzm5NVLd2EGFPf5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj
MDE3YzEwHhcNMjUwNjE0MTEwMTAyWhcNMjUwNjE1MTEwMTAyWjAzMTEwLwYDVQQD
EygxNmViYTU4MGU5ODZkNTY5MzJlZDBkMmE4YzkwNDhhYzBjM2NjYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4VNBDW7S/i8Am2O6NpkgyRaZDlF
KLLvyXOVDIAS3DLRp/AzlP/R+YuNyMn40wOqpuJh2gK+zt5oI/GlXCPQGKvu6sY+
iPrSBd8qjCoF/WUHuxrOmbj/I1wBXY4TMgCgyi1GVPxiLZSRJPFtrxSAt9npMf6R
HCy4iv6HcNu8V4CP6C8ozbdmAZb9MzNgvrBsg9JFxiOzo04fhcq5j/wQzgPfFw7e
1pkksXnEzs2Juxs19uqEs8VKJIE5IPLzj45McbSg+gsGPsIjoDPBIG9xNPKRGtzz
4VSTJQDcn+Syo7VPwNuvn97cTCuVYfFjAlFtYzNx/pJwi9TnB6jbLkOzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbrpYDphtVpMu0NKoyQSKwMPMwPMB8GA1UdIwQY
MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt
M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2
LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLq5Fb/8
5glhNL71rbio7ypqG0rWQ1+AjlopXrSe4ZyhmZVh+Id3dCx5z69RGlQbiMcDbPXx
hu1CTqqpXk3jb7JNsi+yMSMq7TBvM/6EvXXQM9TnjhbQJHIdxDAcZVhNYJipHOZz
pEvwb15n6epE+g7srhLMwLxjm0399sUtJ35xg1pM6ymzSLW+ZwhGN7mhJRvPhlSS
mnPc2RVgpYk0R0hsKoGIpcxAoX6hjPyX8rtMZASuMsPuKmXEhkyQZy2jSkThuF5W
goHO2jvY0NCMdEB0KllZj/hAiD3NtUSNTqelSsly5M1no8VpcTTvbZdxYJ3gOWdP
bb1h4t1n8Q22jQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:24:32 2025 by rpki-client