Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          6lErxHj/Kw19jSgPYhIkmpqHdXnPDJ0P5zwe77XYJT4=
Subject key identifier:   77:73:57:06:D9:9E:07:8E:52:83:E8:DE:1E:19:06:05:DF:6C:9D:FC
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       01976EF4D4571ED764178F576CE7FD0B0B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 15:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:28 +0000
Files and hashes:         1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
                          2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
                          3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: xBhstBgrQDmZWbRL881QjD+vjmcUsmpGYGj6CmgVluw=)
                          4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
                          5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:d4:57:1e:d7:64:17:8f:57:6c:e7:fd:0b:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jun 14 15:00:28 2025 GMT
            Not After : Jun 15 15:00:28 2025 GMT
        Subject: CN=77735706d99e078e5283e8de1e190605df6c9dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:16:e8:42:07:1a:b1:24:c2:92:c3:09:46:
                    61:41:84:54:c2:e0:88:c1:4a:f4:ef:98:1e:80:65:
                    d0:3e:53:f9:aa:62:de:82:4d:4c:b3:6b:b3:ac:91:
                    c4:03:f9:5f:0f:0d:14:bb:d7:7e:6c:de:12:05:34:
                    a4:43:de:e3:49:ec:6c:39:3e:8e:8f:8d:3f:ac:1d:
                    9e:f2:8b:de:f0:b7:84:47:77:1c:32:58:83:2a:0d:
                    49:b5:b2:40:4e:d8:30:a5:94:55:a7:46:1b:b9:af:
                    90:e9:18:09:0a:94:52:3b:2d:87:7a:9a:78:64:b1:
                    b8:69:b1:33:b5:2e:52:99:38:c8:3e:96:05:eb:52:
                    1d:3c:1c:a0:ee:71:f1:21:35:b7:89:1b:0c:21:f3:
                    c8:9a:17:68:3e:f8:d6:b9:53:5a:14:5a:f9:75:9d:
                    74:46:26:44:75:8a:47:e8:da:a2:af:2b:24:79:77:
                    b2:85:53:6b:32:fa:ac:73:7f:f6:bb:88:be:b7:09:
                    d9:a2:eb:55:0f:01:90:d6:e4:c6:9e:cc:45:9f:e0:
                    4a:bb:fa:ea:c6:ad:8c:46:2f:86:86:a4:d7:43:30:
                    9d:69:11:12:90:72:7e:9e:e5:54:dc:e0:96:9e:9d:
                    3b:3b:32:11:f5:1b:25:1f:34:49:7a:33:e6:c6:46:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:73:57:06:D9:9E:07:8E:52:83:E8:DE:1E:19:06:05:DF:6C:9D:FC
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:81:26:41:ce:23:1d:17:59:c8:c5:36:72:4c:57:c1:c3:b4:
         b2:7c:5c:58:61:9f:cf:53:f1:08:80:92:c7:d1:6f:f1:b4:ca:
         ff:7f:ba:90:45:0d:aa:42:4e:d3:ec:4d:8b:fa:ee:59:27:64:
         ee:d8:10:40:63:a2:d3:44:a6:3a:33:21:e9:49:78:36:a5:37:
         fc:bf:45:b3:b3:e8:1e:98:45:6b:e5:bb:b0:c4:25:6e:39:f4:
         1d:88:81:3f:aa:eb:f2:b6:84:b8:f5:2d:a1:2e:e2:22:eb:60:
         95:0c:32:04:61:61:94:cd:92:2e:64:b0:7b:d3:35:2d:b1:ee:
         83:29:b7:c3:4b:d7:4d:51:58:66:d5:a3:f5:a5:5c:63:bf:02:
         21:2a:9b:97:77:7e:92:19:86:b1:6a:32:dc:c3:69:7a:2c:01:
         a0:e8:a2:a4:03:3e:d3:a6:3b:29:ac:b1:02:af:62:b8:81:c0:
         5e:b6:f9:15:bc:dd:c3:db:b6:64:d2:df:ea:0a:44:00:65:f7:
         36:4d:9e:52:e5:f0:23:7a:80:1a:40:e8:b6:ee:e5:83:4a:bd:
         3b:0c:4e:45:c8:53:14:3f:a4:a8:58:e9:1e:e5:ae:1f:8b:89:
         1b:b0:71:a1:2f:cb:66:f5:63:53:fb:77:37:bf:bf:30:d9:a3:
         94:c0:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:22:37 2025 by rpki-client