Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          R0Uld4kX60pJs6MKevR2kdIhdqMEHtNrXGbUBoK3qpE=
Subject key identifier:   38:EB:19:AF:C4:9A:7B:97:70:FE:AD:A5:28:AB:CE:16:3D:03:73:ED
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       0197684E2E27B56C6BAC8C74C054EF3A7BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 08:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:43 +0000
Files and hashes:         1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
                          2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
                          3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
                          4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: u3angkRbMSYqkzG3QnDRTcRgIp4rvV8LqiLdmF2yDnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:2e:27:b5:6c:6b:ac:8c:74:c0:54:ef:3a:7b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Jun 13 08:00:43 2025 GMT
            Not After : Jun 14 08:00:43 2025 GMT
        Subject: CN=38eb19afc49a7b9770feada528abce163d0373ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:c2:d4:02:3f:3a:be:9d:fe:cb:e1:a4:39:
                    38:a9:f5:d9:04:69:96:fe:a7:2e:68:b1:63:33:68:
                    d8:c3:1b:7a:95:30:7b:b0:74:0a:07:6e:55:01:df:
                    81:93:99:d5:83:64:7b:a6:c0:0e:73:de:11:e4:6c:
                    f6:be:d6:85:ef:6d:63:d3:70:19:8d:22:47:10:8a:
                    39:93:85:45:f7:19:8b:09:59:8b:d2:be:0f:4b:54:
                    e7:8c:ca:ad:33:d7:2d:ef:18:6b:6f:11:dd:04:25:
                    ce:f8:77:37:d2:6d:41:7f:9a:ff:5e:3f:66:6a:58:
                    55:f9:f3:53:03:5f:1f:63:a3:05:07:84:22:1f:b3:
                    e0:77:53:6a:e7:cd:41:af:1b:1f:6d:48:01:2f:d8:
                    fa:71:6f:d7:80:74:ae:aa:dd:c6:7f:6c:3e:a5:39:
                    e7:3f:91:d0:35:d5:70:6e:78:57:5f:38:49:2a:0e:
                    38:a7:f1:4c:58:0c:11:c3:b9:08:47:b8:07:c5:c4:
                    b2:4c:28:26:74:94:8d:17:bb:ad:71:b6:a6:1d:3a:
                    5b:54:a1:5b:ce:eb:03:d5:76:50:79:e9:54:b5:70:
                    e9:12:33:45:c7:a4:ae:30:63:31:e5:0c:54:fd:17:
                    3e:d2:6c:c9:75:d5:81:14:c2:8d:33:df:ff:b8:7a:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:19:AF:C4:9A:7B:97:70:FE:AD:A5:28:AB:CE:16:3D:03:73:ED
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:cd:c3:c1:ab:c0:68:0b:87:4c:d4:f4:11:de:e6:47:9b:f3:
         17:fd:8f:e2:0a:ec:08:4d:e3:d9:43:10:3a:62:d6:f0:e7:f5:
         6a:0e:6e:65:e7:b8:05:d5:fd:dc:49:a2:34:2d:cb:08:50:c0:
         da:40:80:71:cd:be:25:4f:f3:38:90:1c:f6:ab:c8:f7:5a:d4:
         d9:4e:ac:32:8d:cf:e1:f3:4d:5b:25:76:0e:4c:3f:8d:27:c1:
         f0:cd:ec:10:c0:2c:8f:35:1a:98:59:e9:10:62:be:2a:01:a9:
         dc:72:97:5b:f1:01:d8:e9:5e:27:48:e6:0e:5f:8e:3d:66:93:
         45:9b:00:2a:3e:84:38:8c:97:ad:df:df:ae:d6:32:79:15:c3:
         75:f2:c4:a7:c1:9e:0d:7a:aa:b4:6b:db:c0:ee:dc:64:10:24:
         81:49:8e:1a:d4:7e:29:ff:80:f8:2f:a6:7e:23:d9:9e:0c:e1:
         c1:cf:87:12:ff:ee:56:c3:48:1e:9b:81:8e:ab:f1:9e:3a:c8:
         25:ed:9d:ba:d1:9a:8d:f2:ab:c0:b6:e9:d0:fd:63:fd:99:d6:
         0d:23:5c:7b:84:f2:c4:62:43:10:77:de:10:fd:e3:4d:95:48:
         a4:5f:46:48:8c:78:b8:13:5d:d0:c8:3e:a7:48:7a:fb:a1:9c:
         d6:61:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:58 2025 by rpki-client