Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          R32UYyF3BvRu5VVxrKp3JF3VK+MuHj6DURPdMsLStc0=
Subject key identifier:   34:F5:36:23:2A:C6:05:D2:1C:4A:12:8A:3D:2C:A6:8D:1B:02:82:C7
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       019771F666A06ACC4435CF1E731BDD823FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          1596
Signing time:             Sun 15 Jun 2025 05:01:02 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:02 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:02 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: O5nOpO9It0wR5ZWk0kTZ0AsZh0HDqbwJGbkW0u80HsA=)
                          2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=)
                          3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=)
                          4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=)
                          5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=)
                          6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=)
                          7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=)
                          8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=)
                          9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=)
                          10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:66:a0:6a:cc:44:35:cf:1e:73:1b:dd:82:3f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Jun 15 05:01:02 2025 GMT
            Not After : Jun 16 05:01:02 2025 GMT
        Subject: CN=34f536232ac605d21c4a128a3d2ca68d1b0282c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:5c:a9:46:41:27:cb:23:ec:7c:17:5d:ba:
                    f2:8d:1b:e7:b1:e4:e3:98:20:62:87:b1:04:d6:28:
                    f1:de:58:f7:d9:ce:68:c8:dd:82:0a:b3:be:4c:2f:
                    25:f7:1c:d5:7c:85:c0:f2:a0:21:12:22:9f:5a:ee:
                    07:1a:45:13:8b:cd:ba:f6:87:cf:68:22:88:b0:84:
                    ac:96:64:37:07:bf:eb:dc:70:c6:56:be:70:99:43:
                    ce:26:95:10:65:dc:7a:e5:56:63:07:f5:ac:59:07:
                    60:99:78:2c:2e:5b:05:bb:3a:0d:32:66:e0:88:52:
                    a7:3c:8b:dd:40:60:fa:b2:6d:50:a9:e8:a7:ff:c9:
                    bc:60:fa:87:24:4e:e4:78:d0:60:ac:f6:6a:de:e1:
                    6f:b3:48:9b:4b:1d:64:ea:ab:96:b4:ab:32:04:17:
                    b3:b2:7a:7a:eb:2e:50:17:2f:ee:5b:67:5d:61:24:
                    c9:1e:36:84:49:7f:83:f0:7b:ea:98:56:57:77:16:
                    98:d1:2b:3a:82:77:37:9a:17:2f:9c:e8:6d:9b:c8:
                    0a:bd:ba:3b:09:2b:63:49:8e:16:27:95:95:8d:f3:
                    28:6d:64:a1:01:30:ef:b2:f6:3d:af:c1:a8:2b:d5:
                    4c:37:9d:11:11:56:18:ab:51:ff:d5:d0:67:23:79:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:36:23:2A:C6:05:D2:1C:4A:12:8A:3D:2C:A6:8D:1B:02:82:C7
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:07:80:ed:d9:2e:4d:2a:25:a6:32:42:70:36:38:52:95:
         d6:fa:c8:a2:65:c7:89:cb:c1:c3:32:b2:91:f8:4a:1a:74:46:
         00:d3:cd:ed:7c:c5:07:ea:8e:6a:a4:c0:99:9d:99:77:24:69:
         d1:df:55:fd:90:e5:ed:b0:d7:ef:bd:b7:3b:cc:bc:52:50:71:
         38:97:74:40:4e:65:a6:18:ad:b8:be:d9:45:51:e2:ac:36:5a:
         a8:cc:2c:c8:67:56:cd:7f:b2:77:e5:d7:51:f7:45:4c:de:1f:
         a2:08:dd:5e:0e:cd:5d:8d:b2:66:40:7a:e1:b1:c6:9e:45:45:
         1b:a2:1b:36:96:4a:f9:23:8a:10:7e:08:f3:c7:ae:4f:b4:f0:
         c0:72:06:c6:4e:65:d2:4f:7c:5b:d2:d6:1d:ae:fc:f5:76:3b:
         cf:37:38:e1:09:88:f0:32:9e:e0:31:07:6e:e3:05:9c:bb:65:
         9a:e4:ee:15:06:cc:b3:28:f8:7a:3d:fe:97:8c:93:7f:6f:a2:
         67:76:76:d9:4e:1f:b0:75:13:ca:7b:5d:af:a7:92:95:54:77:
         b4:18:a6:ab:e5:91:92:2e:5f:a0:14:99:c5:18:a1:f3:9e:8e:
         05:7d:e4:59:f7:19:de:f4:d1:06:63:2b:f6:d3:ac:57:d9:04:
         bd:35:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:59 2025 by rpki-client