Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          Vnq0emdCGj6QWFfDzs1OTjIDcr6Zo3Z0OwKhGoTdKHw=
Subject key identifier:   FC:32:6F:22:2E:FF:DA:82:11:C7:1E:2B:41:A4:2B:78:7D:EC:E6:BE
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       01977609B5555BC5DEB339740B144F0061A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 00:00:36 +0000
Manifest this update:     Mon 16 Jun 2025 00:00:36 +0000
Manifest next update:     Tue 17 Jun 2025 00:00:36 +0000
Files and hashes:         1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=)
                          2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: ShlDcEycRi0CflWcFgXbn1wnLhFdMskOjcGeo9g1TPU=)
                          3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=)
                          4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=)
                          5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:09:b5:55:5b:c5:de:b3:39:74:0b:14:4f:00:61:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Jun 16 00:00:36 2025 GMT
            Not After : Jun 17 00:00:36 2025 GMT
        Subject: CN=fc326f222effda8211c71e2b41a42b787dece6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:13:f0:46:7c:5f:21:b6:9d:78:81:83:d0:
                    9f:be:5d:2c:65:16:af:ca:30:9b:fc:9d:73:c1:4c:
                    bd:f9:5f:b1:5c:af:e0:ba:3f:fd:2a:1e:be:91:85:
                    c2:b3:1f:5d:88:27:0b:56:29:32:4e:81:b9:a8:b1:
                    fa:90:f2:ec:1b:ac:c8:56:2a:63:b3:83:a8:0b:dd:
                    d3:34:e9:73:90:23:a2:b9:bc:82:ea:3f:2a:67:c4:
                    22:29:9b:b3:e9:33:5e:79:e7:92:ce:91:ed:31:3c:
                    e7:60:19:51:eb:26:fc:8d:bd:26:03:40:02:4c:29:
                    23:02:49:fa:c8:72:ee:20:57:5d:d9:30:5c:ae:53:
                    65:e9:72:aa:32:96:41:42:04:04:34:ba:dd:a6:89:
                    77:1a:e1:0c:8a:f5:33:52:0e:43:96:67:42:d2:0f:
                    e8:b6:6e:0d:00:31:46:41:b2:1f:21:7b:22:7b:f1:
                    4c:92:43:ad:44:88:02:53:65:dc:dd:d3:8b:11:a9:
                    1f:73:48:d3:6c:cd:94:a0:57:4e:e4:ed:25:63:80:
                    b6:d6:2b:2b:f7:85:17:f7:16:e3:08:86:74:6a:25:
                    e2:d4:ff:95:4d:bd:76:10:e5:ed:46:2d:73:55:ec:
                    8c:2f:12:05:6e:47:33:7c:83:0c:17:0c:6e:bd:ed:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:6F:22:2E:FF:DA:82:11:C7:1E:2B:41:A4:2B:78:7D:EC:E6:BE
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:c4:b4:7c:f3:fa:55:e6:44:cb:62:8a:a8:26:54:95:d0:
         33:a0:2b:76:ce:06:36:35:7e:85:7b:d4:58:19:34:2f:f8:ad:
         3e:ab:41:61:e5:74:a7:b4:03:98:43:27:07:7d:79:11:d3:65:
         be:d6:ed:17:39:d1:3e:65:4e:aa:5d:61:96:04:7c:a0:4b:bb:
         93:93:5d:6b:86:5c:2c:62:e0:57:dc:ba:bb:a9:3f:f5:99:b8:
         b5:47:c0:1c:b8:0a:62:a5:ee:c1:fe:d0:09:c3:b0:fd:f2:a7:
         71:5b:06:2f:c7:f3:49:4a:64:16:bf:03:ea:b6:04:ce:f2:f8:
         05:69:3c:92:55:64:cd:6d:60:25:46:ea:1d:14:ff:1b:99:e4:
         b6:23:e6:40:9f:b2:a7:ae:44:3b:01:b9:b5:08:76:ee:79:1d:
         43:66:18:fc:4c:ed:e1:a4:92:4c:d6:5d:57:d0:fe:25:43:4c:
         e9:d9:60:b1:2c:0a:65:62:d6:e3:2b:f3:f8:2a:ed:a5:ca:40:
         ef:6e:7a:57:8b:01:d1:4e:62:34:8d:96:73:ef:4d:df:dc:4b:
         7a:51:20:cb:13:84:e3:b2:f4:7d:0f:99:91:26:f8:fd:43:90:
         0d:42:ff:fb:0d:0e:51:cc:c3:8d:21:aa:1e:c2:bb:75:67:58:
         58:a1:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:27 2025 by rpki-client