Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          Lc8tiP/4MAFbm6+46LeXzesm8mLfvDUVevYHSE2aQFg=
Subject key identifier:   55:D7:67:47:4D:C2:EB:A9:BC:E8:E8:71:A8:70:62:68:A8:D1:19:19
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       01976DAC1EC506AEA0E2FDF9E6895C218D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 09:01:26 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:26 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:26 +0000
Files and hashes:         1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
                          2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
                          3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
                          4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: gPKFoTgYE9E542kxBbuFDvYYFPfSR1/CnZ7pd5Op7OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ac:1e:c5:06:ae:a0:e2:fd:f9:e6:89:5c:21:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jun 14 09:01:26 2025 GMT
            Not After : Jun 15 09:01:26 2025 GMT
        Subject: CN=55d767474dc2eba9bce8e871a8706268a8d11919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:de:63:9f:49:57:d0:67:6d:16:ba:7d:9b:
                    d5:f4:6e:89:3d:19:9b:f6:fd:46:78:b3:de:c3:ce:
                    1a:19:f7:a6:61:60:be:9d:63:f6:d5:7b:5a:bd:fe:
                    cf:fb:b3:91:ec:06:a2:81:a4:f3:ef:89:ba:2c:0f:
                    b7:28:d8:10:5e:1d:e2:d4:30:1a:a9:f0:18:09:31:
                    6f:a8:04:62:9e:59:a1:4e:15:5f:51:a0:ad:d0:76:
                    f9:7b:b6:00:9f:cc:40:26:17:2b:91:2e:54:29:7a:
                    84:db:70:07:a7:08:8b:23:08:d1:c7:02:db:e0:16:
                    da:cc:e1:6d:ea:3b:3f:4f:53:66:65:4f:c9:ee:84:
                    0a:76:16:a8:24:29:6b:83:ca:97:de:13:a8:ba:16:
                    d6:0a:d4:92:b1:db:73:4d:b1:97:e6:0e:79:b8:08:
                    e8:83:13:e9:57:10:da:ef:82:38:7d:dd:c5:cb:83:
                    7f:32:6b:93:c0:e0:f8:bf:11:16:a1:fa:99:90:a0:
                    5c:16:92:c3:b9:b4:f2:32:7d:a5:84:49:9f:1c:f9:
                    95:15:84:dc:2e:d9:4e:ce:90:d4:cb:bb:b4:76:74:
                    c3:fe:c5:9c:d5:ab:a5:bb:5b:e8:ed:1a:0b:e4:15:
                    b5:38:00:02:7c:15:50:7c:18:a9:e9:cf:5b:4d:1a:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:67:47:4D:C2:EB:A9:BC:E8:E8:71:A8:70:62:68:A8:D1:19:19
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:87:a0:32:27:9f:9f:2f:2a:a6:0d:33:cd:87:4e:97:84:
         b4:44:83:7d:2b:87:0d:dc:74:08:5e:04:13:47:9e:c6:1c:5e:
         88:dc:47:5d:07:39:13:29:a3:d2:14:c9:29:74:2b:58:60:d8:
         ca:b4:4a:df:0e:a9:39:40:bc:cb:3b:20:13:4a:df:aa:84:e5:
         c8:38:07:38:8f:f4:a2:ac:66:9e:49:e5:19:1c:27:7c:3d:64:
         c3:1d:42:18:af:34:f9:9f:56:bf:5f:98:97:86:54:5f:c1:fe:
         c5:cd:4f:36:fd:02:e4:cd:29:3b:8d:be:7e:1e:38:5b:5c:58:
         b6:09:10:19:bb:44:b6:54:aa:eb:9d:b5:79:00:0a:98:d9:93:
         3c:65:51:32:6e:55:76:28:69:42:17:9d:16:4e:6d:4e:7c:1b:
         0e:fd:17:da:f9:5a:42:73:8c:d4:e2:40:40:c8:d6:44:41:92:
         2c:cd:f3:41:28:10:68:8b:22:7f:d7:34:14:2e:b8:c9:64:7d:
         d5:ae:c0:73:bd:b0:e0:38:39:fc:fa:59:86:c1:61:aa:21:ae:
         4f:59:9f:ad:25:4e:1b:e9:08:57:d5:f4:a8:1f:58:e5:43:fb:
         a6:e3:e6:6f:85:40:d3:73:01:ed:ca:e3:7e:63:65:06:2e:99:
         c5:ab:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:08:40 2025 by rpki-client