Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File:                     hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier:          95a5xb9UyCMJ3p7Ki9I+tPdp4bS3aVUsrPcxtWMr4LU=
Subject key identifier:   48:1C:19:17:E5:42:81:F1:F5:E0:14:79:81:7A:44:E2:85:F6:7C:16
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer:       /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial:       01976EBE47756FDD4766FC5B1078CAB0E0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 14:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:53 +0000
Files and hashes:         1: RIDaaDvlCW6kZ_Qmkvg7iHhvkxs.roa (hash: TtEPT7gUdS6PVf0+fJoFxhyGOnl72shQIlFVnXWjJd4=)
                          2: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: YvPAiILiJDWn5RQUd/mFjGFmN0WS7BD6gFr9U774LPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:47:75:6f:dd:47:66:fc:5b:10:78:ca:b0:e0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
        Validity
            Not Before: Jun 14 14:00:53 2025 GMT
            Not After : Jun 15 14:00:53 2025 GMT
        Subject: CN=481c1917e54281f1f5e01479817a44e285f67c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:26:9a:d3:98:bb:b9:95:b8:68:1d:2d:ed:
                    a6:a5:1b:95:2f:f1:2d:49:e5:06:e1:b2:f1:97:b8:
                    d9:96:e3:78:49:2d:8a:eb:1f:0c:1c:50:3e:32:23:
                    63:65:e7:93:6a:5e:59:c7:8d:2e:ce:f2:85:f5:b6:
                    b6:68:f9:4c:d0:58:59:c7:12:67:85:50:11:98:3d:
                    11:35:f8:fa:fd:59:46:ca:e6:a6:00:86:bb:b0:57:
                    4c:78:12:96:cd:53:82:e9:0a:46:c9:69:eb:b5:84:
                    dd:e9:e8:94:50:20:e6:39:7a:11:98:e8:f3:ee:12:
                    4f:1d:94:8e:90:db:59:f2:e1:52:d7:6e:0c:0c:5a:
                    95:d9:b5:50:3e:3f:a6:18:1f:bd:e0:31:43:f3:a9:
                    f5:92:3d:fc:ff:b4:73:ad:d1:67:21:c1:8e:fa:29:
                    d4:68:fc:08:80:62:24:88:f8:2e:c4:af:ae:19:cd:
                    d4:f5:8e:7a:9e:82:59:ba:f4:a0:a6:31:d9:25:9a:
                    4e:e8:a6:44:26:64:b2:f5:4e:b6:a3:12:56:e8:cf:
                    12:55:c1:8c:bd:59:9b:4a:31:4c:08:3a:d6:f3:4e:
                    e9:ba:4e:cc:45:bd:69:60:30:74:8c:40:8d:8a:b8:
                    9a:4e:55:2c:60:67:3d:f6:31:d0:bc:48:c4:2b:19:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:19:17:E5:42:81:F1:F5:E0:14:79:81:7A:44:E2:85:F6:7C:16
            X509v3 Authority Key Identifier:
                keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:5a:5b:28:61:3d:63:20:39:c9:fd:05:b7:ec:79:ef:31:
         8e:75:00:77:14:72:6b:f1:9a:dc:8f:d3:04:d0:7a:9a:16:09:
         14:72:5f:a5:73:ec:15:6c:f9:7c:70:b1:b3:41:ed:6e:bf:b5:
         07:2b:dc:83:cc:b4:fe:4b:9c:dd:37:85:b2:a3:00:d6:64:0a:
         43:fd:bc:0b:88:a4:d9:a0:85:8d:83:4d:fc:37:e5:f1:ff:92:
         79:03:5c:74:f0:53:44:e5:83:d7:d2:c1:c9:9d:4a:8a:73:27:
         3b:b0:49:8d:a1:58:86:b4:c0:1f:8f:bb:23:a1:41:ec:7c:24:
         4b:e0:b8:47:82:6e:0d:df:47:78:bc:05:a5:08:ff:fd:27:8f:
         4f:d9:ab:16:13:07:d1:90:0a:cf:b0:98:32:99:99:01:c5:1d:
         83:ec:15:09:69:17:73:50:2a:31:f3:6e:44:b7:9e:80:e4:3f:
         25:d2:6c:c7:10:8b:53:aa:b6:69:d8:aa:03:98:a8:c4:3a:36:
         eb:5b:0d:9c:33:15:13:90:5a:68:6d:06:27:23:97:9c:55:e6:
         48:63:ee:87:f6:56:e8:14:13:04:85:20:42:5b:e6:fd:e3:ad:
         58:bb:99:38:4a:00:c9:e8:fa:87:64:7c:a4:e3:7c:db:0a:81:
         8b:0a:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:36 2025 by rpki-client