Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File:                     xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier:          xDpoyrPr1Ja0cjka7cBA1yiyZGOGcLtKnokjbhGFpgw=
Subject key identifier:   0E:0E:6A:6A:A2:B0:D0:0C:C5:3A:4C:CE:E7:C8:16:0E:B0:A0:0B:7D
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer:       /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial:       019771F63115A6DA12948081E7CF6142A0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number:          1595
Signing time:             Sun 15 Jun 2025 05:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:49 +0000
Files and hashes:         1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
                          2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: K+TiCeGZA64wqoFJNTY4f+izn0b3eBsxMza1Isia7bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:31:15:a6:da:12:94:80:81:e7:cf:61:42:a0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
        Validity
            Not Before: Jun 15 05:00:49 2025 GMT
            Not After : Jun 16 05:00:49 2025 GMT
        Subject: CN=0e0e6a6aa2b0d00cc53a4ccee7c8160eb0a00b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:aa:5c:ba:a7:63:2b:64:d5:51:2b:6f:ac:
                    97:af:9d:65:1d:e0:66:0c:08:cb:a1:86:5c:f5:9d:
                    54:0a:fe:9e:8e:fd:a5:eb:af:d9:da:24:f0:4c:16:
                    73:5a:d7:9a:f8:55:0d:0d:63:d6:ca:ca:24:14:aa:
                    9b:7c:2a:58:f5:9d:fc:68:b2:85:f4:7f:61:2e:87:
                    a5:02:48:a9:93:8f:ee:dc:68:83:d9:9e:a3:45:5d:
                    ff:2d:0e:4d:f1:b1:f9:d0:0f:f5:71:66:28:8c:a0:
                    56:87:5e:9b:17:ab:5d:35:6d:f5:95:db:5c:67:66:
                    60:8f:1a:2c:7b:a9:a0:e5:ba:b0:a0:da:35:0c:80:
                    fb:79:82:20:c3:d3:6c:6c:32:a0:95:31:46:36:cd:
                    29:9e:13:ba:20:39:23:0c:8b:d8:be:b3:db:58:c0:
                    d7:20:91:05:57:56:4c:55:5a:91:eb:5a:ba:2b:e3:
                    85:a4:1d:1c:99:23:97:0c:12:2d:cd:4e:83:e9:86:
                    1a:b0:b3:b1:6b:55:4d:4a:39:e4:eb:ea:e0:b4:b4:
                    87:bc:ae:5f:a6:18:be:3f:df:88:7d:4f:6a:0b:27:
                    fa:d2:e0:8c:06:5c:7e:09:a4:bb:2f:cc:ca:2b:83:
                    20:ed:0c:40:56:1e:ad:40:8b:de:ac:96:a3:a5:a6:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:6A:6A:A2:B0:D0:0C:C5:3A:4C:CE:E7:C8:16:0E:B0:A0:0B:7D
            X509v3 Authority Key Identifier:
                keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:9a:d0:a1:89:b3:6d:68:18:35:9e:f1:f2:de:59:b3:62:
         c0:22:8a:f5:0b:06:89:82:0e:cc:61:d7:6f:6d:34:51:7d:2c:
         0e:58:c6:28:3e:d4:53:04:e4:c8:88:51:47:8f:f1:3c:ea:5f:
         6b:69:cc:5d:9a:f1:b9:e1:00:eb:da:6d:a7:69:cd:8a:8f:f3:
         f4:aa:0d:a0:95:dd:66:30:31:65:60:54:cc:4e:14:ee:7f:24:
         11:27:96:6f:e0:db:85:61:b7:a4:02:bb:0e:98:01:fc:94:8f:
         08:c6:ba:8e:a6:ae:04:2e:8f:8b:f4:6d:c8:15:9c:fe:1d:85:
         fb:e7:8c:f3:3b:22:d2:f4:97:9e:4a:ab:8e:d9:9a:f0:35:c0:
         8c:6f:ce:4e:16:ac:e0:16:ca:71:17:6b:34:23:f6:e4:05:03:
         5d:51:e5:08:77:25:18:f6:e4:7f:a8:07:a9:12:33:4b:96:98:
         ad:36:fc:04:4d:95:fe:de:5f:45:46:9e:56:b3:63:4e:c1:4c:
         a3:81:6b:89:03:09:f6:61:36:65:4e:6b:96:dd:74:b5:a9:fe:
         2e:8e:bf:28:54:5d:59:9c:f3:49:1a:f0:e8:a4:97:80:f7:5a:
         56:7d:b5:1e:60:0b:df:ae:da:31:48:0b:3d:12:55:8f:53:c6:
         e7:c8:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:23 2025 by rpki-client