Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File:                     G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier:          NFY0ixF5WnlBpfYv34OE04nkauhHCS/aXuGtnCSXnTQ=
Subject key identifier:   97:C3:DB:92:51:8D:58:3C:2C:CE:C7:C1:7F:E7:E9:FF:E2:86:A1:54
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer:       /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial:       01976F2BF2B2BBF23211D5BECBC9B1E422A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 16:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:40 +0000
Files and hashes:         1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: miaB5GmNJdpkWaZT7Bt0Kux0G9mawwqQPhfdMrKxDo0=)
                          2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:f2:b2:bb:f2:32:11:d5:be:cb:c9:b1:e4:22:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
        Validity
            Not Before: Jun 14 16:00:40 2025 GMT
            Not After : Jun 15 16:00:40 2025 GMT
        Subject: CN=97c3db92518d583c2ccec7c17fe7e9ffe286a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:71:aa:db:4b:92:40:7f:56:3d:0e:bf:66:
                    6c:80:27:8e:65:8b:93:7b:d6:76:9b:4f:1d:05:5e:
                    04:79:7d:3d:f2:9b:6b:92:0c:a1:af:0b:b6:66:49:
                    6a:96:c2:a5:f1:d5:8e:7c:ca:77:50:46:a5:3a:1e:
                    14:14:df:15:69:ac:e3:59:01:5d:14:b1:00:2d:d2:
                    dc:6f:6f:8e:07:9f:a7:cd:16:ea:2a:5a:bd:5f:4b:
                    6e:cf:c4:01:33:c8:3d:04:77:80:bd:88:2c:0a:64:
                    eb:ed:c4:6e:8f:47:f2:44:28:fe:80:82:19:46:b8:
                    f3:9b:34:88:95:4d:fc:7c:9b:6f:18:4e:04:43:4a:
                    eb:33:41:56:76:af:64:5c:0e:8f:2f:36:6e:c1:ab:
                    eb:ed:20:22:41:5d:c6:5a:86:6d:91:d2:26:17:52:
                    d6:d9:6b:5a:b8:43:62:c2:16:df:e3:c8:f3:c5:66:
                    77:4e:45:a8:db:4a:9f:3d:bb:ba:6f:80:43:4b:74:
                    b5:5f:71:ff:52:5d:78:ef:90:c5:79:34:ed:d4:b4:
                    d3:0c:0d:c6:c0:30:26:6a:1c:71:38:16:2f:28:93:
                    c4:26:67:4c:e0:f7:2f:ed:99:6a:0d:d1:81:c1:0a:
                    b6:3e:97:bd:de:29:b1:06:e8:d3:82:d5:89:74:75:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:DB:92:51:8D:58:3C:2C:CE:C7:C1:7F:E7:E9:FF:E2:86:A1:54
            X509v3 Authority Key Identifier:
                keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:90:fb:67:e0:41:73:d0:f7:8f:b5:0a:cc:6e:71:b3:d4:
         12:9e:0c:99:70:14:39:f7:fc:08:b5:82:ca:94:ed:48:da:8e:
         33:b3:0a:ce:6f:9b:92:b0:cc:3b:fd:96:7f:29:32:6f:93:96:
         41:a7:e3:ff:97:1f:6b:0c:b9:5b:2c:ce:8f:0a:59:f5:3e:42:
         d2:c7:d0:69:3e:bc:60:02:60:11:6f:69:60:b7:07:23:fb:aa:
         a6:28:6c:7b:e7:da:f5:70:40:a8:09:5d:80:2a:3b:5a:df:8b:
         2d:0a:3b:a2:09:52:32:68:c3:fb:42:d3:71:dd:41:94:95:98:
         12:fc:a1:a1:23:27:73:5c:7c:ba:2b:5a:de:8c:ad:37:59:e8:
         55:be:0f:b8:bd:df:9e:81:71:7b:5f:2f:0b:1d:32:69:20:c5:
         79:ff:86:3f:e2:ac:a0:b7:f9:43:f2:0a:56:1c:ae:bd:a9:0b:
         0b:a2:51:f5:b6:d2:33:09:46:83:23:0c:e3:11:17:d2:b7:8e:
         42:35:ca:fc:3b:ec:b0:b8:58:26:20:53:61:54:7f:60:9c:da:
         5e:16:eb:b5:32:83:46:69:f8:b7:2b:2b:89:00:10:e5:ab:04:
         d6:f5:12:12:8f:e4:00:30:78:86:bb:45:28:96:a4:1c:ee:c8:
         71:f6:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:07:48 2025 by rpki-client