Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File:                     sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier:          wMPKeTFaXp/sPjdSUSN/dyQ982mjH6vG579md6dVGHE=
Subject key identifier:   25:D0:51:8F:E1:9E:E8:F5:BE:1D:48:BB:E0:68:32:EC:44:42:C7:07
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       01976CCF728E0C4F0B502CA5828C7AE68BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 05:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:23 +0000
Files and hashes:         1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
                          2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
                          3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
                          4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=)
                          5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
                          6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: vu2FxOiUso8kez4s1tkEb/h65NG8oAg09dGqcIedtBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:72:8e:0c:4f:0b:50:2c:a5:82:8c:7a:e6:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Jun 14 05:00:23 2025 GMT
            Not After : Jun 15 05:00:23 2025 GMT
        Subject: CN=25d0518fe19ee8f5be1d48bbe06832ec4442c707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:0a:14:93:34:fa:36:f8:61:eb:ad:7a:7d:
                    83:48:59:64:f0:74:79:ad:ff:42:57:ea:2e:2b:da:
                    83:2e:0c:4e:7c:0e:e0:5d:64:95:70:e1:6e:3a:6b:
                    f4:2a:db:9d:db:85:e7:67:10:e5:cc:eb:37:a8:4a:
                    bc:4b:60:8d:aa:d8:cf:89:47:3c:b5:89:f4:c0:c8:
                    05:08:5a:92:a7:9d:af:10:b9:f0:86:fb:e0:15:0d:
                    f2:64:41:7f:1b:ed:22:1c:da:b9:8e:5d:57:c9:9e:
                    85:9d:21:4a:70:5e:b2:17:c1:8d:10:37:45:c3:75:
                    3f:f3:fa:8b:d5:5e:fb:3d:a4:03:07:ce:49:9d:fd:
                    71:2d:b4:44:37:7b:39:24:f2:37:c5:de:57:49:73:
                    09:e7:97:fa:73:51:b7:63:ad:14:b1:09:a0:dd:5d:
                    fe:1a:d2:9e:a7:1c:28:cd:da:29:9d:0d:6a:19:00:
                    e6:07:a3:b0:d6:50:cf:50:26:de:e4:d1:e2:e3:4f:
                    c1:99:59:7b:62:90:8f:79:5b:95:45:91:1d:a8:a3:
                    69:1e:ed:b7:a6:7b:55:42:39:43:24:13:8b:43:f5:
                    e2:a3:12:c7:53:a5:5a:5c:80:b7:cd:94:ed:80:d7:
                    a0:00:5a:9b:17:5a:6a:2d:17:01:ae:74:7e:6e:66:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:51:8F:E1:9E:E8:F5:BE:1D:48:BB:E0:68:32:EC:44:42:C7:07
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:bd:c1:57:c8:f2:a3:52:a7:1e:bd:c3:1a:aa:36:d7:68:
         4d:a5:9f:ee:2f:9a:2d:90:e2:38:05:24:9e:07:fc:45:67:4b:
         e7:b8:ea:ed:96:3d:f7:2b:c4:b0:dd:4c:eb:a3:b1:47:95:e6:
         a2:85:5e:9e:dd:c2:1d:72:40:29:a0:a2:ac:c4:5a:e4:b1:02:
         7f:fc:06:0c:dd:a5:40:53:37:0c:a8:5d:00:14:fa:18:4a:90:
         1e:af:ce:b7:94:65:77:39:21:2a:9a:d0:fc:d8:57:97:97:3f:
         b1:b5:74:f6:38:73:ea:4c:4c:de:1c:8d:8a:92:4c:cb:a7:37:
         cf:d0:fb:e0:93:80:36:31:d9:3f:59:25:c2:70:b4:2c:e0:e6:
         0d:d0:90:ba:81:47:49:7c:6c:f8:aa:11:b0:6f:fb:57:88:3d:
         26:ae:cf:d7:04:88:4c:03:a3:b8:bb:bb:d2:a4:80:a2:e8:89:
         73:8b:ea:73:95:2f:d2:3c:3f:2c:77:6e:13:95:76:1a:4e:3d:
         c2:3d:97:4f:d6:73:d3:74:60:34:2a:df:50:ae:30:08:2c:96:
         b9:e6:56:91:c4:02:2d:6c:ac:6e:a7:5b:d9:a4:a6:66:d6:b1:
         51:2e:4c:6a:9a:63:1e:52:63:c7:84:79:f7:91:90:82:2b:36:
         8c:71:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:02 2025 by rpki-client