Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File:                     4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier:          Wrsdm42cd9LO3xlygQ11Kq6SrOgoMkIZ44YHhGbXzN0=
Subject key identifier:   02:2D:EC:20:94:59:9D:0E:6E:D8:30:BB:67:84:DA:04:6B:05:63:CA
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer:       /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial:       01976170C1DD3AECF0DF92E27E508A244995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number:          1588
Signing time:             Thu 12 Jun 2025 00:01:08 +0000
Manifest this update:     Thu 12 Jun 2025 00:01:08 +0000
Manifest next update:     Fri 13 Jun 2025 00:01:08 +0000
Files and hashes:         1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: gsJIrUmgTODAZSBouOQg2+vjOZ/n0SgdNg9fzVjRGLc=)
                          2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:c1:dd:3a:ec:f0:df:92:e2:7e:50:8a:24:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
        Validity
            Not Before: Jun 12 00:01:08 2025 GMT
            Not After : Jun 13 00:01:08 2025 GMT
        Subject: CN=022dec2094599d0e6ed830bb6784da046b0563ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:0c:20:08:2c:e3:25:64:47:c6:77:69:71:
                    a8:b6:74:18:11:dc:8c:26:11:25:e6:78:92:28:6b:
                    db:7b:2d:82:44:ab:cd:b5:fb:dc:7d:89:52:8d:6d:
                    cc:bc:7e:70:10:b8:a8:31:4d:51:de:02:6c:12:8a:
                    b5:b8:7a:8d:ba:4b:27:54:39:dd:0c:44:de:d4:7e:
                    14:2a:b0:25:95:20:61:12:e5:ab:46:53:35:21:8e:
                    a5:04:e0:d6:19:cb:57:9c:cd:43:85:73:6d:18:4d:
                    87:12:fb:68:45:53:e8:03:74:d5:0a:4e:ec:e8:15:
                    62:fc:e5:57:da:44:30:36:e0:f9:0d:76:ea:54:87:
                    d9:4d:2b:c5:3d:a4:60:8e:f4:8c:d0:c4:dd:b2:38:
                    99:e6:24:cd:d7:f4:c5:6f:78:ab:49:16:43:6d:a6:
                    86:b9:45:9d:26:bf:22:1b:e3:36:aa:2b:cf:a7:d8:
                    87:83:a0:fe:dd:16:46:5e:bd:df:ea:9c:33:8f:75:
                    6d:a2:c7:81:a2:b7:66:b1:d8:c6:26:3f:91:c2:0e:
                    66:38:15:7d:6b:93:03:a7:08:e8:f8:a1:d2:f5:69:
                    93:19:5f:bd:02:4b:dc:60:54:8a:cc:74:a7:b1:6e:
                    57:90:2e:6e:cb:96:a5:da:ff:96:1f:f4:9a:22:59:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:EC:20:94:59:9D:0E:6E:D8:30:BB:67:84:DA:04:6B:05:63:CA
            X509v3 Authority Key Identifier:
                keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:01:ec:bd:d0:9b:27:f3:28:84:67:ea:02:05:23:13:2f:
         4c:5d:c6:46:62:af:84:7a:b0:e2:d1:fc:3f:a3:6a:ec:3f:6b:
         cf:43:67:17:4d:1a:8c:e7:c9:91:77:a5:58:f1:70:74:63:0a:
         af:71:17:02:71:81:35:33:57:7d:e2:59:90:3d:e9:e6:76:9a:
         71:53:11:ad:96:5d:31:96:76:26:1b:7e:aa:3d:c0:7d:04:2f:
         6a:f5:36:cc:cb:e3:e3:cc:24:78:bc:75:4e:8d:3f:13:dd:14:
         3b:85:87:5b:19:37:87:70:55:41:43:33:1e:28:8d:56:cf:8c:
         82:78:a1:8d:33:d4:e6:bb:62:9e:e9:06:c7:ca:c6:66:13:99:
         6d:82:ed:09:6c:57:7c:08:86:9e:4c:c7:9d:a5:6d:da:c9:87:
         80:53:60:eb:02:40:f4:c7:36:00:47:20:43:73:a7:f5:dc:57:
         1f:5e:7c:f2:88:9e:8f:5a:6d:ad:a3:b6:b2:93:03:26:0d:39:
         d2:17:7d:85:06:44:ab:a7:50:7f:55:6f:89:23:2a:a3:0a:74:
         5f:72:fa:f9:b9:dd:21:0a:3f:8f:36:25:9e:7f:ac:98:f1:02:
         89:c6:5d:62:29:bc:5e:33:11:ef:17:3a:f7:d8:b6:d0:d3:49:
         f9:a0:09:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcMHdOuzw35LiflCKJEmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz
YWYyMjgwHhcNMjUwNjEyMDAwMTA4WhcNMjUwNjEzMDAwMTA4WjAzMTEwLwYDVQQD
EygwMjJkZWMyMDk0NTk5ZDBlNmVkODMwYmI2Nzg0ZGEwNDZiMDU2M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMgMIAgs4yVkR8Z3aXGotnQYEdyM
JhEl5niSKGvbey2CRKvNtfvcfYlSjW3MvH5wELioMU1R3gJsEoq1uHqNuksnVDnd
DETe1H4UKrAllSBhEuWrRlM1IY6lBODWGctXnM1DhXNtGE2HEvtoRVPoA3TVCk7s
6BVi/OVX2kQwNuD5DXbqVIfZTSvFPaRgjvSM0MTdsjiZ5iTN1/TFb3irSRZDbaaG
uUWdJr8iG+M2qivPp9iHg6D+3RZGXr3f6pwzj3VtoseBordmsdjGJj+Rwg5mOBV9
a5MDpwjo+KHS9WmTGV+9AkvcYFSKzHSnsW5XkC5uy5al2v+WH/SaIllQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIt7CCUWZ0Obtgwu2eE2gRrBWPKMB8GA1UdIwQY
MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct
ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5
LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8sB7L3Q
myfzKIRn6gIFIxMvTF3GRmKvhHqw4tH8P6Nq7D9rz0NnF00ajOfJkXelWPFwdGMK
r3EXAnGBNTNXfeJZkD3p5naacVMRrZZdMZZ2Jht+qj3AfQQvavU2zMvj48wkeLx1
To0/E90UO4WHWxk3h3BVQUMzHiiNVs+MgnihjTPU5rtinukGx8rGZhOZbYLtCWxX
fAiGnkzHnaVt2smHgFNg6wJA9Mc2AEcgQ3On9dxXH1588oiej1ptraO2spMDJg05
0hd9hQZEq6dQf1VviSMqowp0X3L6+bndIQo/jzYlnn+smPECicZdYim8XjMR7xc6
99i20NNJ+aAJMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:41 2025 by rpki-client