Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          PrJau6Ydq4YiAnwNSFOXUBbIqtbx6zuE0o11w1fKouc=
Subject key identifier:   79:3F:04:BC:C2:E9:49:7F:89:D2:16:DA:8B:73:E9:C8:BB:4A:72:D4
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       01977B9E2FC0D6B12B92EFC8376D31EF3E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          1599
Signing time:             Tue 17 Jun 2025 02:00:53 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:53 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:53 +0000
Files and hashes:         1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
                          2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
                          3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: y6BlafBVmrW6hfPQ6rq/Et96fVca8n0aU+0cE5AFMAw=)
                          4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9e:2f:c0:d6:b1:2b:92:ef:c8:37:6d:31:ef:3e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Jun 17 02:00:53 2025 GMT
            Not After : Jun 18 02:00:53 2025 GMT
        Subject: CN=793f04bcc2e9497f89d216da8b73e9c8bb4a72d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:fc:8e:f0:c2:5e:89:cf:9c:de:62:cb:1d:
                    05:09:a5:35:cb:80:1a:48:7c:79:ea:fd:d2:a8:b8:
                    89:a8:b6:d7:52:e9:43:5c:e0:18:6b:08:f2:a9:d8:
                    c4:3f:72:a8:47:c3:d1:ed:43:af:53:c6:7a:01:05:
                    54:b0:8a:1e:4c:81:ec:a2:c6:ae:02:84:88:5b:ed:
                    87:5b:d7:d5:45:07:28:67:20:1b:e8:a0:57:27:b3:
                    84:15:3b:08:30:08:df:28:44:2a:60:a1:52:5d:b5:
                    a5:98:a1:9d:5f:c2:68:e6:4f:66:8a:f2:a9:65:dd:
                    72:58:48:e0:3c:86:13:02:87:05:e4:79:25:c4:e6:
                    f8:20:68:9a:5f:f7:77:e7:2e:6d:d3:31:c8:b3:11:
                    31:54:28:31:96:15:74:3d:fe:53:24:59:9d:1a:54:
                    b6:05:7b:2b:71:64:94:e2:21:a4:97:bd:80:01:7f:
                    5f:83:21:a8:7e:91:d6:ed:ae:c3:08:73:64:2d:48:
                    42:93:c8:f3:8b:ed:05:d9:71:80:bc:ce:07:c3:34:
                    2d:b9:af:a5:24:1c:33:7a:72:2b:8e:21:72:03:27:
                    10:7c:9d:70:0e:ae:bd:4e:a0:34:35:9f:44:19:a3:
                    c2:ff:22:51:da:2f:be:e7:b7:17:21:bb:9e:1b:92:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:04:BC:C2:E9:49:7F:89:D2:16:DA:8B:73:E9:C8:BB:4A:72:D4
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:d5:fe:52:34:c6:4a:c8:53:30:a5:ef:34:21:7a:c7:55:
         d2:be:26:2a:78:98:0d:bc:a6:5b:39:6a:34:bf:14:ce:f3:a8:
         91:ac:0b:0d:bb:7c:e2:57:bd:8e:de:9b:73:9e:d5:a0:f6:2d:
         f4:92:a7:9a:da:8b:d6:70:16:17:09:5f:55:da:c8:8f:0d:bf:
         cb:4d:df:13:fa:77:f0:fb:53:b8:fb:4d:52:b5:e2:9b:b2:ae:
         5c:ec:2a:fc:af:e4:fa:c8:b1:a1:b0:7f:05:88:72:85:5c:b9:
         bb:7f:81:2b:12:fe:f0:e5:ad:79:62:e9:1e:2c:f7:7e:f2:2c:
         a5:4a:4d:15:58:3d:10:54:62:4f:9c:18:fe:41:ca:69:83:92:
         b9:eb:b0:9d:a6:c1:9c:4e:57:3f:08:c7:e6:0b:08:fd:7e:7f:
         9f:80:2b:e1:9d:8c:4d:46:90:4b:9b:8c:75:14:24:d1:54:7e:
         83:1b:47:2a:fe:73:e2:e1:a7:cc:19:77:a6:6c:8d:ee:8e:76:
         d0:d1:ea:bb:90:dd:9b:9a:36:e3:47:80:26:b6:e7:19:1f:80:
         10:a1:e5:fc:ed:f4:f3:50:4b:d2:ae:91:81:f7:ae:9b:79:3d:
         ff:69:55:b3:76:8a:55:97:70:55:63:af:dc:85:58:d7:aa:ef:
         a8:66:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:54:33 2025 by rpki-client