Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File:                     Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier:          2M4IH4xjIIxXUehASYDEkEBTQpUd2PKWqP4112FJWkE=
Subject key identifier:   CA:96:56:3E:6D:1F:99:08:9F:9E:CA:D4:07:00:C6:09:60:74:22:DB
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer:       /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial:       01976D3D6197AC566B2EEFBC25061ACF57D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 07:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:28 +0000
Files and hashes:         1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=)
                          2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: PsPKAtNhF9mszi5ZdvHpY/XbQKeY/ewMI3z61px+8Gg=)
                          3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=)
                          4: pLsgoPgZwon5ItvVTFUsJaF7654.roa (hash: GzKHsFlhzzykyT0JK5oyDh4dgIyu8uoam0jj3L6SzGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:61:97:ac:56:6b:2e:ef:bc:25:06:1a:cf:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
        Validity
            Not Before: Jun 14 07:00:28 2025 GMT
            Not After : Jun 15 07:00:28 2025 GMT
        Subject: CN=ca96563e6d1f99089f9ecad40700c609607422db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:4d:5f:11:33:e4:b1:79:37:70:75:03:ef:
                    61:9b:33:b7:4a:20:70:82:86:a1:6c:8c:b9:66:80:
                    fb:06:78:eb:50:56:93:35:d4:b8:00:a5:05:ce:19:
                    7a:52:31:ee:c1:a2:f2:9b:c6:29:96:8a:eb:22:7c:
                    ce:ee:47:2e:c5:d0:d8:95:fc:90:36:2e:ba:7f:5d:
                    33:b1:55:8c:3d:75:86:4c:44:6c:e1:51:f7:a2:06:
                    31:7d:15:dd:67:41:b9:6c:57:b0:ea:78:a0:d4:e0:
                    49:e1:b9:3d:8e:c7:74:a0:69:71:23:4b:bb:68:d4:
                    e6:38:7b:ef:e1:07:9c:bd:ee:ab:e6:b3:f4:c0:26:
                    1b:c2:15:c4:6a:2e:96:2a:bd:b1:00:8f:bf:96:1e:
                    29:ac:44:57:bd:5c:b4:1c:4a:bc:4e:ef:47:3f:fe:
                    56:b1:ea:a9:cf:fc:e2:20:eb:d2:96:59:e9:25:72:
                    2b:c2:f1:d8:4f:66:f3:36:32:8a:7f:c5:9d:84:7f:
                    f3:96:c9:ef:63:a7:16:62:1e:ca:48:b4:a8:4d:95:
                    b4:3b:59:c4:82:4f:18:27:c4:ef:35:86:0e:0f:93:
                    18:0c:ef:97:56:f0:43:47:38:24:cf:26:3e:23:3c:
                    2f:e7:4b:04:11:e1:aa:c4:82:ed:04:13:86:d3:22:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:56:3E:6D:1F:99:08:9F:9E:CA:D4:07:00:C6:09:60:74:22:DB
            X509v3 Authority Key Identifier:
                keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:bc:a6:ca:8f:29:25:06:ac:07:6d:53:81:7e:5e:da:5f:
         68:15:31:16:25:d2:b0:fa:1a:68:e7:a5:48:10:8d:c4:47:88:
         af:db:8d:83:9a:9e:26:cf:b6:9a:d6:f4:68:27:9b:e8:4b:48:
         e8:2c:10:c5:d0:67:a0:3d:64:00:f1:5b:10:67:b9:dd:7c:15:
         b4:e8:f3:03:21:c3:70:21:4d:e3:5e:b9:21:b7:6d:b9:09:00:
         3f:35:cc:17:0f:d7:8a:be:3b:f9:d0:79:42:cd:ea:62:b3:ce:
         3a:86:af:74:f2:c9:51:73:dd:88:ae:9b:43:fc:94:f5:8d:61:
         d1:07:0f:d4:c5:eb:39:ab:df:db:88:c5:29:ef:fc:cc:43:04:
         97:87:01:68:f6:82:34:16:ed:60:dc:ef:54:ac:17:78:8d:d0:
         1e:c4:53:2a:46:26:2d:21:d9:b0:ce:92:1e:9c:cb:d0:89:c2:
         60:a2:cd:5d:8a:c0:0a:80:cc:e3:b5:2d:e4:79:d4:34:eb:c7:
         a9:01:4a:15:ce:ea:28:0c:bb:81:dc:02:30:c9:55:00:ca:ed:
         01:34:c6:5c:f6:7a:1d:45:d1:35:52:95:a4:6a:a3:bb:96:0e:
         06:81:32:c6:c6:32:d7:dd:3f:3f:84:73:48:65:c0:e0:d8:a9:
         2e:3c:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:41 2025 by rpki-client