Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier:          Ida2CruwJiUb5x+jQdsa+OVmH5BMjc9DU7VT0gNHB7s=
Subject key identifier:   E5:53:C8:0C:E9:53:9E:E1:55:3F:04:BA:CB:C2:72:CF:11:52:4A:B8
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       0197718836E8DC25127DDCA2828CA11971BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 03:00:41 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:41 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:41 +0000
Files and hashes:         1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
                          2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: +jt2RIfhgtyv9vHAgrljo5g07AUx6GkXBpxo0PIasho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:36:e8:dc:25:12:7d:dc:a2:82:8c:a1:19:71:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: Jun 15 03:00:41 2025 GMT
            Not After : Jun 16 03:00:41 2025 GMT
        Subject: CN=e553c80ce9539ee1553f04bacbc272cf11524ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:f3:a0:ca:7d:8e:ea:69:4b:6c:10:12:86:
                    22:9b:73:68:6a:6d:b5:24:32:3c:ac:36:fe:af:d7:
                    b9:f6:68:46:c7:d7:72:48:4f:37:06:4f:ba:3e:16:
                    7c:df:08:64:f9:9b:66:42:87:09:d3:e4:c0:e1:cf:
                    8b:4a:de:5c:c2:40:36:38:5b:e2:d2:7c:2e:39:b1:
                    00:f0:cf:8a:75:1f:fe:34:df:a6:3c:67:ca:1e:fc:
                    7b:59:da:7d:7c:08:5c:db:73:79:22:54:ce:12:3f:
                    b9:fa:8f:20:ea:bb:b6:64:99:47:d2:bd:c8:b3:ca:
                    6c:95:79:22:e5:7c:e9:d9:f9:cf:0f:04:27:5f:49:
                    6c:30:6b:96:16:68:94:50:c1:c6:40:e8:9d:2b:bb:
                    95:d5:ad:7b:9f:ec:ba:14:77:e5:4c:c2:d1:57:b3:
                    98:3d:a2:fa:49:ae:66:76:ab:23:0c:ca:f7:f4:07:
                    f3:e6:87:74:0c:f3:56:87:ca:3e:b6:1e:af:ca:01:
                    2d:9f:43:36:98:ff:6a:2b:6a:91:9f:5f:3b:ed:eb:
                    03:0b:e6:67:3e:87:4d:f9:12:5d:22:9d:6b:3c:27:
                    2b:93:66:2c:9c:86:12:c8:b1:71:86:bc:25:f8:30:
                    6d:ba:52:3c:8d:d0:12:5c:a5:39:8d:54:6a:73:69:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:C8:0C:E9:53:9E:E1:55:3F:04:BA:CB:C2:72:CF:11:52:4A:B8
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:af:9c:42:66:a9:6d:8f:2e:33:ea:4f:f3:d2:41:12:03:
         5c:53:82:df:8c:69:ca:a8:f8:0a:56:ab:85:b4:78:66:d1:20:
         07:e6:95:0f:2f:d4:b8:97:51:af:2f:e7:3e:64:5d:04:bb:9f:
         4d:c1:b7:af:7c:17:cd:53:f9:a2:46:2b:48:c1:45:f1:b4:fc:
         38:47:24:7c:c1:fd:be:40:b3:f6:a5:85:07:77:2c:06:34:4a:
         d2:25:29:d8:36:21:c0:0b:1a:47:36:b6:47:75:8d:1c:72:c0:
         1f:f7:50:4e:df:90:7f:0f:fc:95:5e:92:dc:12:d3:0d:90:f5:
         4e:63:24:a7:98:c7:78:1c:25:1f:a2:3f:10:43:30:85:c8:f5:
         97:c1:47:e1:54:2b:58:76:ce:68:c4:3e:fa:30:a2:a0:bb:fb:
         3d:7a:1e:e6:92:af:99:8d:82:d3:76:75:5e:a6:b6:5f:a9:c3:
         69:75:97:8e:c4:f1:ad:6c:44:07:a0:e5:ab:7b:75:78:b4:31:
         dc:bb:27:3d:55:7a:7a:65:96:70:e1:82:7f:35:f8:a7:e3:c3:
         42:61:20:24:21:09:13:d0:8b:9d:77:6e:a4:43:ef:f7:b2:7e:
         df:c0:35:0c:1b:ba:a7:30:69:9d:8d:fe:d1:7c:35:b3:3a:9d:
         28:fa:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:38 2025 by rpki-client