Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          772XpDffYKEsTMVyI+T/i4ViuRzU2qGTo1Ajeziekl0=
Subject key identifier:   EB:F9:B4:3F:05:42:46:A1:E6:61:16:53:1D:27:F9:A4:2A:3D:F8:9A
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       019769616481A8B5FE1A6E84734EED1CF999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 13:01:19 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:19 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:19 +0000
Files and hashes:         1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
                          2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
                          3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: UaKCop8PnELz4XZNp11D+J0nblCwSamk9dAXLKJpXrE=)
                          4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:64:81:a8:b5:fe:1a:6e:84:73:4e:ed:1c:f9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Jun 13 13:01:19 2025 GMT
            Not After : Jun 14 13:01:19 2025 GMT
        Subject: CN=ebf9b43f054246a1e66116531d27f9a42a3df89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:b3:89:2a:97:57:1d:d0:a3:8c:8a:d9:d3:
                    b6:30:5a:43:68:e3:91:95:33:dc:5d:68:d6:b8:83:
                    c7:92:f2:51:bc:98:8c:3f:64:21:51:b2:9e:d5:3e:
                    4c:57:bd:84:4f:d5:6b:9e:2b:2e:2e:1e:7b:77:fe:
                    4f:81:bc:02:f0:c4:8c:a9:e7:3d:b7:ff:4f:6f:66:
                    c6:d8:59:1c:73:fa:02:87:85:ac:0e:6a:e6:2c:57:
                    58:91:38:7b:f7:35:e8:30:d4:df:c3:16:21:6b:fc:
                    94:da:64:8f:a7:4a:63:6c:f3:b6:e0:31:0b:de:53:
                    68:f9:f9:67:66:f0:b9:6c:02:6d:91:67:e3:9f:b9:
                    fd:9e:37:fc:fc:b0:5d:09:86:ad:c3:4d:5f:2a:11:
                    ab:c1:b5:42:07:a2:eb:9b:f2:81:16:84:b3:99:9c:
                    b7:08:38:eb:1d:57:21:8a:93:a9:4a:a6:89:46:92:
                    5b:20:6c:9f:21:c2:2b:03:d2:ec:88:4e:09:0b:c9:
                    71:96:f9:db:25:7f:73:f2:fb:e7:5d:01:f1:a6:6e:
                    cc:ec:11:1d:d3:6b:ab:6b:31:25:62:a1:1a:9c:8b:
                    c3:5e:7a:85:61:2c:7b:17:7c:41:de:6d:2b:44:eb:
                    c6:57:48:c6:58:47:45:a2:19:cf:aa:60:53:35:12:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:B4:3F:05:42:46:A1:E6:61:16:53:1D:27:F9:A4:2A:3D:F8:9A
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:81:d9:f8:39:19:5d:7a:25:a1:13:56:69:92:b4:49:ea:
         17:a3:cd:01:61:2c:a0:70:64:64:d4:43:19:69:51:55:6b:49:
         b1:eb:9c:9d:61:67:82:46:e0:dd:64:b9:b3:95:90:34:2c:f9:
         e7:aa:c1:4c:35:9a:40:b9:57:14:5e:3e:a8:ed:89:6a:75:1d:
         10:67:d1:c6:6f:7f:88:3d:d9:51:b2:47:b1:c3:b8:85:89:e5:
         61:51:ad:99:94:dd:4c:68:da:d7:dc:f9:0f:9e:37:0b:1c:85:
         15:79:1b:94:26:e1:1a:ae:1b:bc:16:2d:3f:f5:90:72:4b:b7:
         b9:d2:1a:00:2b:12:e9:30:88:7c:27:10:7c:24:c5:2a:6f:6e:
         46:ce:60:81:4d:f9:4d:d7:86:69:7c:12:2e:d5:00:d3:49:cf:
         e7:5d:d0:e1:12:ee:12:f4:18:98:b3:07:38:5d:f1:c0:33:fb:
         4c:59:ff:42:81:86:c8:e2:96:71:a1:e8:3a:8c:a0:35:f7:63:
         77:d1:f5:38:e8:e2:52:e2:1b:a6:58:db:23:e2:5a:92:2f:ab:
         1f:15:a5:5f:3a:07:7d:c3:75:d6:36:19:18:03:d1:31:3f:ca:
         da:e4:0e:87:73:5e:76:2d:d6:74:74:9b:b9:77:85:aa:e5:12:
         d2:da:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:42 2025 by rpki-client