Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          snUqyWeFtNql19q3vPkLuwsICWal2QCSm94fp+pGmNE=
Subject key identifier:   1B:2F:E9:A5:A4:3A:89:7F:21:48:1D:55:7B:FD:D0:6B:08:04:93:98
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       01976F631AF0A0EB89D466581ECEADA5A1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 17:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:55 +0000
Files and hashes:         1: 1-PxoxI0pjeoIhSSKerY6tOEWuoI.roa (hash: lBboLe7L0MERYDzzwiB1Vs/DVbFyBwYxqUhr24nvp7g=)
                          2: Q6c7o6uPHQhvoxwmQLzyhtDVMdE.roa (hash: zg0a7LCWPIx/36rTK801mypOCjtsncvR5b3j9h5SrdE=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: tOge3+axR3YwKutLD4g2W5UPOKaJkR6l/z1PFSJuccc=)
                          4: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (hash: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=)
                          5: najBQqT2olWE08kevELmXwGT57k.roa (hash: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=)
                          6: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (hash: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:1a:f0:a0:eb:89:d4:66:58:1e:ce:ad:a5:a1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Jun 14 17:00:55 2025 GMT
            Not After : Jun 15 17:00:55 2025 GMT
        Subject: CN=1b2fe9a5a43a897f21481d557bfdd06b08049398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3c:d2:10:18:2e:1c:e9:96:09:9b:a9:43:05:
                    29:49:ad:3a:d3:ed:d2:0f:b8:a1:38:8f:f4:1c:1e:
                    68:22:89:49:1f:46:9c:a5:e8:d1:cc:19:47:e7:c3:
                    87:90:50:99:22:e0:04:95:5f:b9:97:ee:0e:77:df:
                    3d:21:4d:81:d8:5b:7a:6b:b4:1b:cd:66:c4:d9:a5:
                    28:81:00:cb:17:eb:64:54:3b:b2:ef:15:a9:f3:d0:
                    76:eb:0d:20:1d:0b:a4:43:98:fc:b7:c2:2a:41:36:
                    b5:d6:ac:c4:84:f6:23:a1:ec:55:f5:58:a7:1b:18:
                    30:dd:4a:42:47:49:74:88:ef:ca:6f:23:01:76:80:
                    a8:7a:04:25:df:f2:e5:fc:8a:b0:1c:87:6b:3f:04:
                    c1:dd:ee:7e:aa:b3:51:0b:26:eb:7d:0f:58:ab:62:
                    33:8d:34:f4:8f:27:b5:64:a1:b8:49:df:4c:3e:20:
                    37:85:53:21:8d:48:20:a9:bf:5e:b8:08:ef:ad:ba:
                    c4:0d:2c:c8:48:ea:95:fb:b9:a0:22:59:7e:d3:93:
                    34:fa:90:ef:2f:53:ad:d5:4e:6d:63:07:76:44:c8:
                    10:53:51:14:f8:a5:34:5d:74:7c:7c:8b:dc:65:24:
                    61:6d:e0:29:e9:4e:32:6d:a5:96:50:92:78:33:e6:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:E9:A5:A4:3A:89:7F:21:48:1D:55:7B:FD:D0:6B:08:04:93:98
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:01:b5:0d:62:41:c8:72:21:d5:d7:26:9e:5c:6c:b5:94:fd:
         27:a2:3a:af:8b:8d:e7:36:1c:01:04:bf:ee:da:f7:30:7b:fe:
         c6:d2:e1:75:be:98:15:0f:8f:ec:d5:79:8c:cb:87:2d:c9:cc:
         6c:51:48:ce:68:44:e3:d8:74:59:40:78:e1:ee:bf:37:b0:9c:
         bd:8d:ed:ae:b4:b7:4a:7b:30:08:81:b1:49:d5:9e:42:29:0e:
         d9:47:b1:e4:56:c4:03:8c:09:ef:ed:c6:3c:b3:9a:00:f7:01:
         8a:a7:50:de:96:bb:cc:6c:52:96:6e:09:bf:bc:f6:bc:78:fe:
         b0:50:45:d5:3a:5d:72:97:c7:73:b0:51:18:0d:93:9a:c5:dd:
         c7:32:24:9c:dc:b1:d9:e3:6c:81:9c:50:62:0c:e0:f5:5c:45:
         ca:e0:3b:dc:5b:d7:9f:a8:6d:07:0f:47:69:62:d3:59:a2:1b:
         89:98:86:c4:69:f1:ca:f8:1e:7c:70:a1:b5:0f:a4:fc:70:c3:
         1d:b5:39:39:a8:fd:94:9b:9f:03:ab:ec:13:2c:52:cb:20:6f:
         04:d4:1f:dc:f7:38:d3:a6:38:13:55:1d:eb:df:4d:ed:97:81:
         8e:76:9b:ab:1f:16:e2:d3:09:78:63:a1:42:3b:20:13:56:3a:
         13:f5:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:56:21 2025 by rpki-client