Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          w6Rg3a0A6vt/FOoKfsoAbCgvWV1dy33Nf+LS4cLhyqU=
Subject key identifier:   B6:0E:89:F1:09:2D:4D:19:FB:C9:E4:25:33:7B:CC:87:09:4D:EC:0B
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       01976929E6E732C99E18971FF45C0F0D29E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 12:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:43 +0000
Files and hashes:         1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: bgELZlr7Utpz1iAm+GbT/3cQ8k7PurRxN2IY1YclYrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:e6:e7:32:c9:9e:18:97:1f:f4:5c:0f:0d:29:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Jun 13 12:00:43 2025 GMT
            Not After : Jun 14 12:00:43 2025 GMT
        Subject: CN=b60e89f1092d4d19fbc9e425337bcc87094dec0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:7c:17:33:d9:87:0d:e5:d4:bf:61:34:c8:
                    73:38:76:eb:f6:96:85:77:84:6b:09:b8:f7:44:75:
                    23:1c:cd:7a:01:d9:32:fa:0b:48:48:98:88:90:85:
                    1b:57:b0:70:9d:d8:71:dd:fc:56:18:a5:75:b2:ce:
                    fb:50:80:5f:cc:6c:27:b5:9f:64:9e:e9:d2:28:d2:
                    2c:dc:8c:8b:85:de:27:b6:aa:6f:61:c8:fb:8b:4d:
                    2a:90:ee:f5:2b:52:fe:f7:4d:e8:8a:a8:24:d8:d5:
                    6e:58:c0:0e:6d:66:8f:11:3a:53:94:8b:5d:13:6c:
                    08:b0:8c:fe:68:f6:6f:39:6d:49:6e:f4:71:bb:b0:
                    8f:f3:1c:12:01:b6:44:b9:e0:11:f8:77:82:a7:a0:
                    09:0a:b5:51:ea:2c:8b:6c:6f:2b:31:38:22:12:71:
                    6e:87:88:bc:3b:70:3e:8b:d3:d5:39:f6:d8:b4:a3:
                    83:5f:53:2c:28:08:b4:e8:9b:5e:c5:6a:cd:93:c8:
                    01:41:a0:64:4b:44:d4:47:17:cd:78:36:7b:30:30:
                    37:64:7f:ba:5d:9a:18:bb:88:83:2b:3d:3e:5b:89:
                    d2:9c:09:55:98:c5:7d:a5:27:6d:e2:11:68:72:16:
                    6f:31:a2:57:3b:be:aa:ff:4f:45:14:d2:1a:6c:10:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:89:F1:09:2D:4D:19:FB:C9:E4:25:33:7B:CC:87:09:4D:EC:0B
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:44:c7:19:a9:c8:33:c4:f8:d9:2e:56:27:98:e6:80:4a:c3:
         d8:45:6c:ce:6d:de:b6:ee:a6:d5:6b:b3:67:9a:1a:31:c0:be:
         44:73:04:27:fd:02:0e:4f:97:7d:de:06:70:eb:29:9e:0e:5b:
         99:2c:c3:b7:cd:e5:b5:b9:4f:30:b0:37:d2:9d:2d:ec:33:10:
         41:c3:2f:5f:64:b2:24:18:2a:8f:49:59:7c:56:c5:18:69:ea:
         37:00:c1:20:35:3f:fc:29:85:75:bb:36:8b:b1:63:56:d7:45:
         a3:78:0b:96:21:22:49:a6:6f:0d:09:4d:05:c2:20:37:fb:d7:
         46:fa:ec:0f:3a:b2:d1:38:dd:f7:10:a3:0a:1c:b2:7e:f4:cb:
         29:74:a2:5d:ed:c9:b7:85:92:67:25:f5:7a:ef:37:ed:da:c1:
         78:cb:82:93:c8:23:bf:94:8f:0a:82:9f:55:3e:fd:4b:ad:b8:
         76:0f:86:52:20:6d:cb:05:94:d8:09:de:4d:e2:e1:31:f2:05:
         91:01:d4:54:e8:13:74:40:61:6d:01:6c:a0:b6:66:64:4f:d8:
         7f:1e:6f:b3:6d:d2:fa:b8:2b:3d:e5:d5:c6:57:6e:ee:7a:ce:
         f8:ed:e8:85:d1:84:58:f7:29:f0:fb:cc:91:c2:32:fe:51:ef:
         14:d9:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:36 2025 by rpki-client