Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          t60SW1k3KUVWEsr6NwM7S+HWKPI6b57AKaV2OIwKO1U=
Subject key identifier:   53:A0:FE:2D:39:AF:B2:0D:44:AF:4F:A2:5B:F6:E9:A4:8D:7F:A7:74
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       019770AC8C7FB626554091D87B39218A9387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 23:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:45 +0000
Files and hashes:         1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: QJ339Q7MnyA50tVC7j0MVWusF35u7evA27VACIyk2Zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:8c:7f:b6:26:55:40:91:d8:7b:39:21:8a:93:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Jun 14 23:00:45 2025 GMT
            Not After : Jun 15 23:00:45 2025 GMT
        Subject: CN=53a0fe2d39afb20d44af4fa25bf6e9a48d7fa774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:36:9c:d8:f4:79:21:85:dc:7a:28:4e:1d:
                    70:0b:92:6b:04:9b:23:89:ac:d1:ca:ff:9d:6b:c5:
                    71:4f:81:a4:10:d7:28:42:59:fc:ae:4d:47:f8:b8:
                    6d:b7:4c:70:5d:78:8b:59:1f:9e:b0:6d:9b:a5:6d:
                    87:6c:2f:6d:0e:30:9b:06:e6:ef:05:c7:1b:cc:33:
                    b8:47:d7:b9:f2:a0:21:64:52:06:75:2c:6a:c5:5a:
                    a2:f9:19:54:f5:f1:8c:ed:c9:e8:67:88:fc:a2:d5:
                    c2:92:ca:b4:78:36:af:8e:a1:a0:1c:b7:d8:a8:ab:
                    dc:c2:6a:78:d4:b1:9c:ac:71:3b:88:b1:d3:83:cc:
                    87:7a:fc:9f:7d:2e:e0:70:83:68:ac:37:be:23:33:
                    07:fa:ae:15:7f:fd:a9:2b:a7:47:98:8c:53:10:7e:
                    f2:32:7d:3b:23:53:3d:85:b1:6f:af:6a:f3:68:0f:
                    44:2c:9d:dd:19:5d:1a:e4:22:f8:a8:bb:05:c4:03:
                    bf:c1:98:28:26:1a:2b:51:41:8b:3f:57:a1:d4:85:
                    1c:61:98:0e:d0:42:a9:a7:d2:4c:43:82:a9:4e:81:
                    a4:19:4b:a1:3d:4a:88:98:0c:fa:bc:72:a4:93:36:
                    bb:38:5e:12:19:36:2a:32:57:e9:73:0e:a5:0d:a8:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:FE:2D:39:AF:B2:0D:44:AF:4F:A2:5B:F6:E9:A4:8D:7F:A7:74
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:58:bc:40:92:4d:69:3b:84:29:fd:3b:0f:4f:94:ec:16:
         c0:7e:6f:61:57:5f:aa:eb:77:b4:30:28:6c:a8:71:8b:0a:57:
         71:53:89:49:05:9e:49:9e:70:c8:e9:93:1c:4c:c3:39:fa:d8:
         17:d6:35:fa:d3:cd:60:2c:90:5b:9b:f0:24:4c:b6:f7:2d:0a:
         0f:09:b2:a6:85:5f:1b:97:3e:7b:be:96:70:0f:06:14:e3:b0:
         5d:1e:11:7a:93:42:7c:46:28:47:78:96:32:23:a3:2b:9d:70:
         b2:4e:12:43:7d:9f:e2:85:3b:31:50:f9:05:ab:85:1a:e8:3c:
         a9:78:d0:a5:37:32:4f:f5:e0:ee:18:92:e4:50:73:cf:b0:9a:
         00:34:06:ff:ea:65:84:83:e8:6f:33:4e:1b:c5:47:1d:a8:88:
         c8:d9:82:d3:d1:02:65:10:ee:e3:02:4a:a8:b1:67:df:0f:24:
         20:cd:6a:d7:b6:2e:d0:c1:a7:26:99:9f:3f:d8:85:e1:e4:74:
         b0:88:3d:db:30:21:0c:3e:32:79:e3:fc:e9:71:fa:5d:9f:52:
         26:74:6a:d5:4a:71:e6:29:16:00:36:e3:7e:83:9a:e7:53:1b:
         25:f3:cd:28:6b:d3:39:67:3a:61:d7:ec:52:88:06:fb:60:89:
         f6:4f:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:29 2025 by rpki-client