Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          OHtgZbS1at2rSwbsr1lAETCPrZunu4rYfYmcOZT+5+E=
Subject key identifier:   EA:28:DF:41:AD:25:80:0C:2D:B4:BE:C4:0E:41:E4:6A:0E:E6:EA:59
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       0197794220839A095C7260C8D0B91FF233FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 15:01:06 +0000
Manifest this update:     Mon 16 Jun 2025 15:01:06 +0000
Manifest next update:     Tue 17 Jun 2025 15:01:06 +0000
Files and hashes:         1: K-sDSYwSfmtvdGGKmz0K_s1-fbk.roa (hash: nTXDVmXDwxaVenEMyiJUZtNKTRSoq/vUuS1ln5SDlUo=)
                          2: MobINerBVuQmP-SIz5bmUV8BPPo.roa (hash: 6a2BmmDaX86zgOFsxT/j31kuD+dJU0v6H6ycoDKtjU0=)
                          3: UShqGyi6RZRV0Ph4_yVYYleIO40.roa (hash: ugrz3hjzhhiYzWWbWxwCGvT2Anh3/HoqFXI/J0yrilg=)
                          4: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
                          5: jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa (hash: zTJaslFTlA280BuQpjcGlBIpfzZ8r2vvsWV2BclBmps=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: T2vMnmTbU+vy1PU6w9CBaGaJL8mrovdA6862eVt2zw0=)
                          7: yJhIC_8JjNW0W6ROa-IL4XOkSek.roa (hash: iFeNdkxy875ayHL7GIsn4nPYfS0obttarf5urh9pLUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:42:20:83:9a:09:5c:72:60:c8:d0:b9:1f:f2:33:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Jun 16 15:01:06 2025 GMT
            Not After : Jun 17 15:01:06 2025 GMT
        Subject: CN=ea28df41ad25800c2db4bec40e41e46a0ee6ea59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:8b:8a:08:e2:57:53:2a:eb:ef:2c:0b:0d:
                    c7:f9:43:14:5f:cb:1d:af:61:b9:ba:9e:ae:1b:42:
                    81:c2:fa:0f:83:05:68:45:99:cc:63:63:09:0e:31:
                    25:85:87:42:c7:9b:b4:ba:5f:fd:a3:8e:0e:ac:5b:
                    6f:37:35:b4:18:e1:83:3f:e6:b6:10:24:4c:2d:fe:
                    56:d7:a5:b3:f9:49:78:ce:ec:07:f3:9f:88:a2:6e:
                    3b:7e:f7:57:97:3e:79:a2:b4:9c:40:64:83:a1:4c:
                    ec:9e:04:25:a2:67:f4:a7:07:5d:0e:08:d2:cf:38:
                    dc:2e:19:bf:10:c0:3e:7d:a3:d8:b2:84:09:08:42:
                    5f:2d:32:d3:34:d7:19:5a:75:26:a6:f9:7c:75:1c:
                    b8:0a:c2:79:86:02:af:e7:d8:66:d7:76:9d:3e:93:
                    ab:19:ee:ac:09:c2:3e:2a:fa:d4:0b:72:05:8c:6f:
                    89:60:c1:3c:cd:1b:c8:f8:1e:ed:ae:59:5d:57:ac:
                    39:0d:5b:dd:22:e9:11:ee:5f:ff:bd:aa:c0:19:99:
                    67:a8:f7:50:8f:ce:b3:b5:05:a1:ca:c3:91:04:44:
                    d6:a7:4f:9c:32:96:e6:1f:88:71:92:81:b4:9e:bd:
                    f4:9b:43:c3:7a:60:1c:d4:22:ee:2e:b1:07:b1:3d:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:28:DF:41:AD:25:80:0C:2D:B4:BE:C4:0E:41:E4:6A:0E:E6:EA:59
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:4a:c6:de:ce:a6:1e:8a:9c:30:8e:f9:2b:88:d6:78:c4:
         07:b9:15:36:23:72:6d:f4:b1:f1:a3:76:7f:be:bb:98:26:7c:
         96:84:1a:3d:94:2b:ca:c6:46:56:7b:f1:ff:46:db:f3:fd:71:
         c3:e3:bc:64:02:f0:5b:b6:7c:1d:f0:ec:63:39:15:f3:a4:b8:
         4f:f3:bc:da:74:5e:56:a7:78:17:82:31:0c:4a:5d:cc:cc:7d:
         5e:7a:ca:21:13:1e:a9:26:05:28:bf:cc:44:c0:fd:6e:48:d2:
         6f:91:aa:cb:07:a2:3f:61:be:c0:8f:c7:3d:63:c7:32:a8:b2:
         58:af:94:c5:ee:83:91:2c:1d:4d:7e:a8:3a:9a:4e:26:8d:8d:
         65:17:c3:a8:11:7c:d1:56:01:e9:3f:64:dc:61:7e:fb:94:23:
         86:3d:d3:20:3b:ae:ef:41:18:70:93:da:34:a9:9f:ee:de:7a:
         4f:02:78:cf:12:a6:65:71:b0:fc:10:49:8f:43:92:09:a2:46:
         a3:fa:9e:4b:b3:31:e7:f3:a7:4c:b6:3e:43:f2:d5:2e:f4:d9:
         19:26:2d:29:34:5a:3c:63:ee:ce:2a:94:f6:58:01:68:0d:ee:
         f1:4f:4b:48:63:0e:08:65:38:ac:46:20:47:61:1d:00:8e:ef:
         e7:50:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:17 2025 by rpki-client