Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          WFIJBODNKVDiNSL8nFJyQDh021VVICQvoGS3O8Hu42Q=
Subject key identifier:   58:49:50:CE:70:63:23:1F:DE:8A:F3:01:7E:58:BD:FF:FA:D3:EF:76
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       019750EA4C4F8AFDAC5D414859BF699C7F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          1583
Signing time:             Sun 08 Jun 2025 19:00:21 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:21 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:21 +0000
Files and hashes:         1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
                          2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: wL1yNxvDhTQDVYeIaYFJilm86gCrZH6ZeaPhstUP4Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:4c:4f:8a:fd:ac:5d:41:48:59:bf:69:9c:7f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: Jun  8 19:00:21 2025 GMT
            Not After : Jun  9 19:00:21 2025 GMT
        Subject: CN=584950ce7063231fde8af3017e58bdfffad3ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:56:a3:ee:99:8c:a0:be:0a:eb:af:15:0d:
                    80:bf:95:00:2b:f7:a6:32:df:0d:3b:66:a7:11:4c:
                    19:a5:71:b6:72:23:9d:6c:66:c3:21:df:a7:40:de:
                    72:37:c7:99:05:34:12:d7:7f:99:c6:6a:3b:2a:71:
                    24:0d:51:ee:ba:4d:ee:68:86:65:03:27:fd:a5:1a:
                    bb:ee:17:26:34:f0:5b:da:9f:19:6d:45:be:df:37:
                    bb:14:db:52:f6:dc:20:6e:ca:bc:9a:3c:f8:14:9e:
                    4d:aa:b3:82:ec:94:d0:c6:0b:39:53:9f:de:d2:7f:
                    de:95:df:44:55:66:1d:85:ef:0f:e0:3d:c7:10:69:
                    38:1d:1a:5e:5a:42:58:a8:ea:ea:b2:33:fd:bc:d6:
                    87:a6:14:ef:c2:30:99:a2:40:84:5f:35:cd:e7:fe:
                    b7:68:4c:ee:8b:48:7e:4e:e0:df:ba:da:1d:70:72:
                    01:7b:03:55:bb:e9:c6:a9:0b:af:6b:b1:84:91:ee:
                    d8:b0:e8:69:78:9e:17:69:77:3b:b1:6b:57:90:fb:
                    27:48:1f:89:0f:fd:32:d1:f8:92:75:54:28:10:44:
                    c1:58:af:77:bc:88:af:b8:9b:02:f0:49:07:76:66:
                    c8:7b:da:5c:c2:4e:bb:7f:cc:8b:62:31:04:12:0f:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:49:50:CE:70:63:23:1F:DE:8A:F3:01:7E:58:BD:FF:FA:D3:EF:76
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:f6:53:56:08:11:05:89:db:90:83:35:b9:19:c2:65:8f:
         28:39:03:d8:8b:a2:8e:9e:2b:90:43:46:3b:bc:92:1b:5a:be:
         fb:fd:12:91:17:f5:14:c2:29:9c:ed:8c:a4:14:07:79:2e:8a:
         94:43:cf:42:2a:08:b4:b6:9e:10:91:42:35:f8:83:14:9f:af:
         f8:de:79:07:d3:87:fa:df:d4:30:d2:c2:3f:68:19:9f:a5:3e:
         71:a3:15:fe:74:da:27:2a:f4:85:2a:da:2d:55:4e:e4:c9:4e:
         8e:4d:45:84:da:ec:46:76:ab:4e:1e:bf:3b:c6:d0:22:e6:85:
         4f:6d:db:be:e6:79:5a:5a:d9:37:a3:74:0c:a8:73:0e:cb:06:
         15:6f:8d:bf:c2:8c:66:e7:5a:3b:4d:37:2e:49:a7:7a:03:b0:
         dc:97:ca:dc:32:c0:0e:5e:77:b4:1d:da:4b:c6:7e:cc:aa:56:
         d3:34:4b:34:06:03:72:57:e8:1c:a7:11:36:08:a1:87:31:16:
         f7:ee:cb:18:4d:dc:a1:33:23:fc:05:e0:59:ac:73:03:e9:56:
         83:2f:64:f2:b8:3a:7c:37:b1:3f:a8:96:b2:5d:e8:a7:26:1f:
         88:b6:ed:ba:e8:75:9c:2a:6b:ce:83:69:ce:13:05:b9:12:db:
         7a:0b:f3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6kxPiv2sXUFIWb9pnH95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4
MzMyMzgwHhcNMjUwNjA4MTkwMDIxWhcNMjUwNjA5MTkwMDIxWjAzMTEwLwYDVQQD
Eyg1ODQ5NTBjZTcwNjMyMzFmZGU4YWYzMDE3ZTU4YmRmZmZhZDNlZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTVWo+6ZjKC+CuuvFQ2Av5UAK/em
Mt8NO2anEUwZpXG2ciOdbGbDId+nQN5yN8eZBTQS13+Zxmo7KnEkDVHuuk3uaIZl
Ayf9pRq77hcmNPBb2p8ZbUW+3ze7FNtS9twgbsq8mjz4FJ5NqrOC7JTQxgs5U5/e
0n/eld9EVWYdhe8P4D3HEGk4HRpeWkJYqOrqsjP9vNaHphTvwjCZokCEXzXN5/63
aEzui0h+TuDfutodcHIBewNVu+nGqQuva7GEke7YsOhpeJ4XaXc7sWtXkPsnSB+J
D/0y0fiSdVQoEETBWK93vIivuJsC8EkHdmbIe9pcwk67f8yLYjEEEg+/cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhJUM5wYyMf3orzAX5Yvf/60+92MB8GA1UdIwQY
MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt
NTJiMDc3NWM3Y2I0LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEtNTJiMDc3NWM3Y2I0
LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRz2U1YI
EQWJ25CDNbkZwmWPKDkD2Iuijp4rkENGO7ySG1q++/0SkRf1FMIpnO2MpBQHeS6K
lEPPQioItLaeEJFCNfiDFJ+v+N55B9OH+t/UMNLCP2gZn6U+caMV/nTaJyr0hSra
LVVO5MlOjk1FhNrsRnarTh6/O8bQIuaFT23bvuZ5WlrZN6N0DKhzDssGFW+Nv8KM
ZudaO003LkmnegOw3JfK3DLADl53tB3aS8Z+zKpW0zRLNAYDclfoHKcRNgihhzEW
9+7LGE3coTMj/AXgWaxzA+lWgy9k8rg6fDexP6iWsl3opyYfiLbtuuh1nCprzoNp
zhMFuRLbegvzUg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:40 2025 by rpki-client