Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File:                     EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier:          7dFLufx9Xt9sjlRN0agMSNWPKq40e3xPQqYc6aUdN0s=
Subject key identifier:   3A:38:2B:6E:EF:79:6E:03:27:B1:75:8D:6A:C4:20:78:05:89:95:4C
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer:       /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial:       019770E380E4107B486E581C378B907F9369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 00:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:47 +0000
Files and hashes:         1: 3wY6oGANv8v5KdwOhq0YCyGCR3c.roa (hash: YTsANZzZhIeMDaKWnAImTcGoqYZxIqqraKwHHW/4AQQ=)
                          2: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: hFiJXsYroPPZBDN+y3YkELsgif+aViuTJ+Sd+nIX87w=)
                          3: N6mQt4p5LaN2cPNO7YXd-z2Q3Ds.roa (hash: NGM3dzWw+RuSOK1JbfI7JvooWiDasEuAqNb3dRiWmXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:80:e4:10:7b:48:6e:58:1c:37:8b:90:7f:93:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
        Validity
            Not Before: Jun 15 00:00:47 2025 GMT
            Not After : Jun 16 00:00:47 2025 GMT
        Subject: CN=3a382b6eef796e0327b1758d6ac420780589954c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:00:fe:bd:f9:20:f2:ce:fe:a8:f8:50:d0:
                    ff:dc:ea:e0:2f:62:43:fd:65:dd:2c:ed:eb:0f:bf:
                    a4:86:c7:0d:a2:99:f3:c6:57:1b:f2:b7:fd:bc:a5:
                    39:21:a2:40:95:9e:87:d9:35:22:fc:3d:52:3e:f1:
                    a3:97:cb:f6:aa:98:e2:1e:84:1e:76:28:ab:18:45:
                    ce:0f:92:f1:b5:c1:1d:06:fd:c3:0a:a0:75:a8:c7:
                    e3:fc:83:3c:65:7c:ea:d2:e3:62:55:4c:16:8c:61:
                    2b:a6:d7:c5:96:bf:30:c1:81:9c:f3:15:f0:bb:1c:
                    bf:e8:56:b3:d4:a0:38:fc:f1:d9:ee:69:e1:5c:a2:
                    24:80:08:9a:b0:43:6e:99:98:2b:c5:f2:f3:11:af:
                    b7:7e:c8:3c:52:19:81:37:bd:e2:e9:f5:28:d5:40:
                    94:21:e4:b0:93:61:2c:52:fc:b2:73:2d:06:6f:e5:
                    ff:a2:ba:74:30:15:59:0b:0d:d6:26:84:a7:35:5d:
                    33:d7:04:ca:0b:ef:37:00:7b:71:99:ec:fe:7a:75:
                    24:a7:ae:75:d0:21:ca:68:9d:20:4e:47:1f:8d:62:
                    ab:6b:c0:ab:aa:06:c4:9a:83:27:07:38:2a:2e:99:
                    c9:ea:8e:4a:33:fa:7d:b3:13:0a:60:d9:a4:60:20:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:38:2B:6E:EF:79:6E:03:27:B1:75:8D:6A:C4:20:78:05:89:95:4C
            X509v3 Authority Key Identifier:
                keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:c5:c7:9a:01:2c:84:5e:a4:bb:df:a4:77:d5:e6:c9:6a:
         62:18:59:1c:dc:91:b6:cd:68:1c:5c:ce:08:9c:98:0d:d8:2c:
         e2:68:3f:2c:0e:6c:1b:2d:75:ed:2e:9e:db:72:ef:42:66:d9:
         b0:11:3a:79:f6:9a:6b:5a:cb:40:43:95:e1:5e:a3:be:94:f9:
         29:79:e8:0a:d7:2d:26:bf:09:77:e7:6c:52:37:7b:b8:96:8b:
         37:ce:50:46:81:84:b3:69:cb:75:cd:b6:28:fa:a2:f7:80:79:
         b7:48:cb:fd:0a:d7:77:f7:c7:ad:75:89:80:0d:3f:3d:30:f7:
         e9:c5:f7:e5:cb:96:c8:df:d7:89:f4:be:bc:68:fe:ba:d9:48:
         b3:1e:55:c4:ae:c0:d1:13:ca:b5:7c:61:ef:c2:6f:a4:d8:d3:
         bd:5a:af:86:1f:25:97:58:c2:3e:23:bb:53:79:61:f2:96:cc:
         3b:be:c5:93:66:2a:d0:3e:d7:89:bb:8b:b9:c9:3a:ae:ff:19:
         55:c3:9e:45:8e:89:35:bb:9b:f2:a2:fa:61:34:e8:20:34:38:
         2f:cf:c8:0c:e6:1e:d0:da:66:4a:60:28:61:97:19:5e:1b:bd:
         28:e5:df:14:aa:6b:de:a7:aa:92:08:9b:7e:55:c7:65:16:8d:
         b6:5f:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:43 2025 by rpki-client