Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          3JvngegCtnARyQBDzLew7qM2nY4g8rMkaO5FiAk5K48=
Subject key identifier:   B5:3F:14:FD:B4:D1:32:CB:15:38:B9:F5:AF:FB:33:9F:71:98:84:AA
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       01977075E063A08170FAB8DA657FADC59ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 22:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 22:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 22:01:02 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: 3A0U9vmsdVUB4b68iALg9gPYDJTKMC2DcaYAjAm94wU=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:e0:63:a0:81:70:fa:b8:da:65:7f:ad:c5:9a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Jun 14 22:01:02 2025 GMT
            Not After : Jun 15 22:01:02 2025 GMT
        Subject: CN=b53f14fdb4d132cb1538b9f5affb339f719884aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:e7:30:cd:2d:80:1f:01:5f:52:58:2b:49:
                    f0:cb:f7:b4:3d:6d:79:c4:73:14:e8:a7:7d:a9:d3:
                    a5:87:2c:6b:30:54:77:65:ae:6b:f0:13:49:86:be:
                    fd:64:c5:7d:e4:40:ea:ba:32:1a:d8:78:4f:38:9c:
                    ab:a1:2d:b3:07:62:c3:59:3a:64:98:04:c4:6d:1b:
                    3e:85:40:1c:99:3a:26:23:61:4b:9f:d3:97:c5:35:
                    3d:63:34:af:f0:93:27:b7:58:9d:f5:ec:fc:ba:d0:
                    9f:ab:8f:bd:d4:5c:a6:b6:6a:e0:be:cf:6d:47:73:
                    75:74:b0:9b:a0:49:82:fc:ce:80:88:bb:53:a9:07:
                    4c:e0:26:cb:60:4c:24:88:18:4b:79:4f:6a:11:d1:
                    56:30:d7:53:f6:4a:1a:27:6b:3f:27:73:ac:d7:87:
                    0b:77:1c:eb:59:13:25:37:1a:5b:cd:64:68:60:91:
                    97:40:2e:55:f8:9b:64:f1:2a:90:90:e4:d5:f2:d6:
                    25:73:4e:72:7a:e3:90:67:71:fd:c2:3d:45:f6:1e:
                    da:33:5f:d1:0d:55:99:3f:f5:3a:58:e4:0d:f1:d0:
                    e4:ed:7d:42:9d:75:b0:6c:95:46:ea:f9:39:d5:86:
                    c5:2b:07:9b:db:21:5a:0c:78:87:3f:1f:ee:9c:a9:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:14:FD:B4:D1:32:CB:15:38:B9:F5:AF:FB:33:9F:71:98:84:AA
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:98:bc:ef:bf:5f:f5:0f:6e:b4:ff:d2:a9:80:55:d6:87:16:
         94:12:f4:8b:e8:5d:21:da:e8:7f:d0:48:ab:a5:70:33:c7:21:
         2e:31:ca:24:77:12:d0:0b:59:f1:1b:3c:b9:37:63:39:56:16:
         91:7d:aa:43:c0:f3:c0:39:ee:8a:3b:c0:d0:24:85:5a:e7:b9:
         da:61:74:e6:05:ce:2d:53:bc:27:a7:39:f8:c0:af:87:bd:f1:
         5a:78:cb:cf:4f:57:dc:c8:95:b1:d2:b5:77:2a:7c:89:df:6e:
         2d:10:51:20:4a:f5:fc:61:d2:30:ff:70:bd:5b:98:3e:1f:98:
         42:aa:cd:85:6b:0f:1a:a8:cc:71:2c:5d:ac:8e:42:5d:a3:be:
         d9:45:48:37:14:e7:58:1c:49:77:43:2f:cc:15:c6:67:f9:27:
         4d:03:75:3f:76:18:36:ba:06:88:ad:ee:74:6b:18:48:bc:f7:
         5e:2e:fc:09:09:92:66:24:f1:5c:9a:6a:b6:16:df:da:99:1f:
         b8:bb:c0:23:a8:04:c6:e2:77:3f:41:82:b7:c0:b4:74:69:fd:
         39:a1:27:8e:4d:c1:27:3c:0a:90:70:25:6a:78:4a:68:56:c7:
         d2:09:65:f1:47:f0:18:2d:bf:a5:b6:21:7b:81:97:d3:c6:1f:
         40:06:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:17 2025 by rpki-client