Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          iDpOth1WAYV9Pl4JMFvJEmpjChCBq2HqbdEoxTEUboI=
Subject key identifier:   60:65:8A:58:A4:C2:85:2E:E9:A3:2F:88:CF:CE:25:02:47:6D:EB:E5
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       01976F2CCD47B86020366ECB453C78C98F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 16:01:36 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:36 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:36 +0000
Files and hashes:         1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=)
                          2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=)
                          3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=)
                          4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: XCshm8gFPKT3Rj3PNvfHpcyerE1hMNVbFCqHotlKmrM=)
                          5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:cd:47:b8:60:20:36:6e:cb:45:3c:78:c9:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Jun 14 16:01:36 2025 GMT
            Not After : Jun 15 16:01:36 2025 GMT
        Subject: CN=60658a58a4c2852ee9a32f88cfce2502476debe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:a0:a6:db:d8:35:45:de:ea:84:5e:ad:bc:
                    b4:78:c2:14:3e:d9:f0:7a:fd:57:05:4a:2f:75:61:
                    8d:86:d7:d6:94:e2:a6:f3:f7:82:3b:41:f6:29:b7:
                    5f:ee:35:18:4f:3d:3f:da:e4:91:bb:13:27:ed:80:
                    88:bd:52:29:a2:9b:13:58:90:80:a1:ff:08:1a:ef:
                    03:4e:d6:cd:f5:a8:de:fc:18:68:5b:ea:79:66:95:
                    c0:a3:7a:5b:48:4f:c2:e9:dd:04:79:43:15:f8:fa:
                    94:ae:7e:2d:de:13:2a:0a:d8:e1:fb:f5:24:90:35:
                    3e:a9:1d:43:c3:15:75:8c:c0:6b:5e:9f:4f:d5:98:
                    21:41:cc:8d:c6:3d:4a:33:37:41:09:f7:26:08:ac:
                    db:bc:0d:b8:ca:eb:64:56:d7:83:a9:0b:28:a9:83:
                    b1:3e:7f:d6:40:86:bf:d5:82:1c:ae:6d:8b:38:57:
                    17:44:dd:b8:f3:ba:79:b6:d8:f5:3a:cf:66:6a:e7:
                    8b:2f:91:03:b7:7e:77:7f:29:01:b3:ea:5d:0e:63:
                    2c:39:73:7b:80:cf:2d:99:63:8b:0e:49:1b:c7:15:
                    3e:53:43:ca:0f:7d:4b:62:c7:74:17:d2:f7:5c:88:
                    72:c8:d7:ba:1f:ce:0a:93:4b:ac:19:58:79:5e:29:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:8A:58:A4:C2:85:2E:E9:A3:2F:88:CF:CE:25:02:47:6D:EB:E5
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:06:d2:48:c2:b7:9e:e0:da:e9:10:9e:44:b0:68:3e:40:
         95:c4:da:a9:7e:56:df:b9:e8:de:4c:02:1e:8e:46:ac:c6:06:
         74:25:b5:9b:94:4d:26:d4:74:18:10:cb:b3:93:09:b6:72:38:
         c9:f6:ff:df:61:7f:fd:e4:c2:29:41:0e:54:42:2b:fb:7a:2f:
         cc:83:49:1e:64:41:f3:cb:40:51:e0:30:03:ab:e5:48:5e:0a:
         4b:c4:d8:33:b2:e7:c1:7d:91:e6:30:de:ce:6f:6d:29:1d:b2:
         ba:4f:4b:33:94:95:60:05:b1:1c:86:84:fb:93:f9:36:f2:72:
         a2:0e:b9:33:35:88:27:60:f9:25:87:44:68:0d:cd:97:78:42:
         03:1b:34:f1:59:2a:50:ca:31:da:73:df:87:3e:cf:45:5d:86:
         4c:69:29:a0:ae:4a:27:ed:5a:1f:0d:5b:27:5f:a8:6f:b1:a0:
         2a:b5:d6:05:7e:6c:61:45:ac:82:53:ae:ff:d2:6d:a3:d4:7b:
         84:16:75:2a:24:7b:ae:fe:6d:f5:b6:51:89:4c:47:80:6c:fe:
         0a:0e:93:c8:28:2e:08:c1:57:ae:7d:68:23:7c:c0:2e:5a:35:
         3d:c2:c1:bd:25:58:6b:5a:43:75:cb:de:09:54:5d:84:92:23:
         5b:17:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:40 2025 by rpki-client