Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File:                     tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier:          y9CEjsCdtjJfhqvYH7AKT44I4hFEAI6o2MCW7bDBKwI=
Subject key identifier:   2A:6E:65:1F:82:52:4A:D8:93:80:BF:05:D2:32:9A:7D:E1:5C:BF:60
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer:       /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial:       01976F99B302843FF59FC35854A8EBB61676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 18:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:33 +0000
Files and hashes:         1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=)
                          2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: 9T5ohpJK8FJzfLG+W6dvP3gS7hIcaJaAuHvZQMPxyic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:b3:02:84:3f:f5:9f:c3:58:54:a8:eb:b6:16:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
        Validity
            Not Before: Jun 14 18:00:33 2025 GMT
            Not After : Jun 15 18:00:33 2025 GMT
        Subject: CN=2a6e651f82524ad89380bf05d2329a7de15cbf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:0c:d6:4b:e9:35:c2:c5:60:80:35:04:d3:
                    6f:27:12:a1:64:27:b0:33:80:0f:1c:ff:1d:91:5b:
                    61:4d:3f:bf:db:78:88:93:72:e1:53:0b:26:8c:0e:
                    e8:9f:5d:88:ba:ce:4b:ee:74:50:da:ee:9d:83:fd:
                    13:66:d0:df:11:0f:4a:6c:a8:ae:69:00:07:a3:7b:
                    7d:09:3f:dd:d3:2e:18:d6:1c:08:b3:f3:1e:eb:00:
                    9e:71:ea:bc:9c:9b:c6:9b:ae:29:14:47:f7:1a:97:
                    37:c3:eb:3a:58:08:75:95:ac:ae:7b:a3:d1:d8:6b:
                    5c:ad:67:07:26:f2:50:82:15:24:f7:91:42:0c:39:
                    08:b4:94:b1:0b:69:87:44:94:38:9d:42:a4:e3:81:
                    88:26:fd:1e:97:35:c3:0c:85:17:ad:65:28:6d:90:
                    b1:ec:ab:81:16:77:a3:40:69:ea:a7:d0:68:d6:24:
                    36:c0:d1:fa:c7:7e:72:84:7f:f8:16:d7:4a:a2:cf:
                    80:1c:05:b9:28:81:92:da:8c:34:5c:03:b1:de:bf:
                    41:7c:9c:35:98:bc:e5:38:dd:2e:81:fc:90:9a:51:
                    d7:b4:cb:ac:68:77:35:b4:5d:c2:d7:f2:f8:8d:80:
                    72:9c:ae:6b:84:f7:59:94:0e:f8:0c:b5:e3:0b:c3:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:65:1F:82:52:4A:D8:93:80:BF:05:D2:32:9A:7D:E1:5C:BF:60
            X509v3 Authority Key Identifier:
                keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:8d:38:6b:80:31:2a:43:6f:56:c1:8e:32:88:97:49:b2:
         c8:62:5f:00:e3:89:91:9c:25:54:f7:68:b3:9f:ce:d7:67:89:
         46:ef:26:aa:9c:3a:13:f6:35:c7:b4:81:19:05:ba:b9:ae:58:
         9e:5f:ca:7b:2a:a9:9b:94:02:9e:7a:eb:19:ed:e5:90:84:c1:
         e1:14:85:6d:5f:e0:15:d4:33:d2:93:d9:a5:5f:28:ef:a2:2c:
         8e:21:08:ca:b9:02:fc:02:49:58:be:13:22:f4:60:31:9a:01:
         4b:20:05:91:6c:f8:28:b3:2a:87:66:e6:18:9d:57:c8:2e:53:
         24:c4:41:cf:2b:6b:71:35:a5:a8:2a:d9:c0:ad:5e:02:d7:33:
         43:8f:1f:7f:63:fb:25:93:67:50:52:d2:ce:a9:07:f4:6d:c5:
         92:58:ba:f0:32:35:c6:33:1d:bd:d7:b2:8a:fc:2f:43:3b:6b:
         17:05:6d:8a:92:9a:cd:9a:6a:f0:57:b2:6b:f0:53:7c:f9:79:
         a7:0b:4f:9f:3e:79:53:0e:27:ea:35:76:4e:07:98:72:3b:4d:
         bd:94:95:16:45:25:2b:bb:14:81:58:d5:33:0a:13:f5:a1:40:
         15:6f:18:88:6a:77:ec:8b:91:f2:d7:a0:44:d0:08:8e:dc:e9:
         da:66:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:23 2025 by rpki-client