Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File:                     k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier:          rFDdNeyFFUwCD+gKdgJ1SrsUHWrXFlB7CZ7Lv4d4stE=
Subject key identifier:   D2:67:35:4A:4B:14:29:D4:C5:E1:61:97:CD:8A:B1:74:23:5D:73:C7
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer:       /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial:       01977640FBAABE7A6F0BB6D7CCFF55BEC8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 01:00:59 +0000
Manifest this update:     Mon 16 Jun 2025 01:00:59 +0000
Manifest next update:     Tue 17 Jun 2025 01:00:59 +0000
Files and hashes:         1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
                          2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
                          3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: OkShqz5v8cCRc/D2zjYbS4Xa5Zc6WSJAUP0S0BYQPrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:40:fb:aa:be:7a:6f:0b:b6:d7:cc:ff:55:be:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
        Validity
            Not Before: Jun 16 01:00:59 2025 GMT
            Not After : Jun 17 01:00:59 2025 GMT
        Subject: CN=d267354a4b1429d4c5e16197cd8ab174235d73c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:53:7d:07:1b:05:ce:cb:3a:eb:51:43:aa:
                    11:c9:6f:27:9f:e7:d2:9b:20:a1:a6:4b:2e:6f:07:
                    a7:88:7a:ca:42:17:f6:88:56:a3:a3:e5:25:ae:95:
                    75:d4:1b:fd:92:78:e2:db:e4:c6:72:51:fd:68:0a:
                    59:1a:2b:5c:4e:4a:9b:47:b9:f3:15:9f:70:c8:cc:
                    81:63:dd:bb:09:6b:20:85:82:4c:d1:f9:79:e2:b1:
                    d3:22:32:3c:23:97:99:5f:77:8b:55:3d:d8:56:01:
                    9f:c1:91:e1:05:08:59:76:0c:21:8e:c0:92:69:5c:
                    9a:70:de:a8:38:44:10:33:8a:4c:13:46:ee:dc:41:
                    44:ff:27:d1:3a:7a:88:53:c0:36:97:e0:d0:39:85:
                    e3:79:46:39:0a:80:86:1e:f9:f2:01:57:f5:7a:08:
                    0b:17:b3:a9:bb:2d:05:5d:fc:74:5c:1b:f5:d7:17:
                    54:96:86:7f:41:40:ce:04:f4:d5:b8:1d:79:74:32:
                    86:56:9f:08:19:40:57:12:38:b5:47:2a:bc:20:38:
                    28:a7:c1:34:fa:cf:0d:8d:9b:f2:77:10:3e:17:5c:
                    3a:c1:6c:c9:17:d2:9d:a9:6d:02:9a:18:8d:26:46:
                    f0:b3:b9:78:86:2a:22:af:9e:67:cf:c5:58:e2:1e:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:35:4A:4B:14:29:D4:C5:E1:61:97:CD:8A:B1:74:23:5D:73:C7
            X509v3 Authority Key Identifier:
                keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:f7:e4:02:5f:98:82:63:6d:aa:c2:97:69:0b:5d:0b:46:
         b0:cc:d1:77:1d:f3:16:d4:6f:fb:7b:1c:63:a6:13:ed:4e:b9:
         99:5d:7a:9a:8d:2d:6c:07:19:e6:75:54:4e:32:dd:d2:43:8b:
         f7:ba:7d:b1:7d:1d:f8:e0:69:06:c9:78:f2:da:80:f6:de:8c:
         ee:48:5c:0b:f9:77:47:4c:41:52:b3:ff:0b:f8:44:4e:14:d4:
         f7:df:ab:93:74:2f:41:e3:d1:0b:b6:00:5d:8f:87:f9:0b:72:
         08:6e:c6:a9:7d:f3:5b:71:2d:6c:e8:99:94:02:f9:2a:52:78:
         f0:41:c3:98:5d:61:94:b1:87:2f:f0:d3:d7:75:d2:4d:98:02:
         53:5a:d2:4e:59:6d:a2:b0:88:54:c9:b4:04:67:b3:c0:04:ee:
         48:31:0d:5c:64:14:b8:7f:ab:aa:57:87:94:c8:db:cd:1e:43:
         7d:3a:47:78:1a:ae:74:d6:e0:f0:2b:25:fc:69:18:c0:02:90:
         8d:21:32:1f:e6:68:a6:32:25:0f:ca:4d:df:ec:8a:73:d5:e2:
         15:82:57:ad:a0:b6:12:4f:d6:2c:e4:38:90:f2:ab:bd:54:4d:
         7c:b6:8a:90:c7:7b:ac:e8:e0:93:c8:78:e9:23:5b:dd:a6:f6:
         6a:7f:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:17:51 2025 by rpki-client