Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File:                     Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier:          mu8WE7XX4+wxNPPgvgfqCONVZQUuGvW7oyCDCFHk27s=
Subject key identifier:   66:53:B1:B4:32:B4:8C:CC:C8:A2:60:E1:ED:64:5B:6E:14:F6:4C:64
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       01976FD12C8D78C9C1C4A3D69C64A513DEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 19:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:08 +0000
Files and hashes:         1: DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa (hash: KjjcUzYlaXAgYY3xR+AgJhW+w3tZ/CR+0bNP9/27Jqc=)
                          2: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=)
                          3: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=)
                          4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: B3deFdjEEuOljlv4XzofQxkINyFkmIipoxZukWc0LeM=)
                          5: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=)
                          6: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:2c:8d:78:c9:c1:c4:a3:d6:9c:64:a5:13:de:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Jun 14 19:01:08 2025 GMT
            Not After : Jun 15 19:01:08 2025 GMT
        Subject: CN=6653b1b432b48cccc8a260e1ed645b6e14f64c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:99:89:b9:d9:8e:71:cd:ad:4e:c4:0a:ec:
                    22:dc:e5:d4:7a:8c:5f:e0:62:72:f3:63:ee:fe:5e:
                    3a:3e:1a:7e:88:7e:6b:96:f4:a2:fe:62:e0:3f:f0:
                    f5:49:13:f7:7b:c3:91:a7:68:a6:70:0f:11:f6:d6:
                    c2:e7:20:0e:94:e5:23:3b:20:cc:55:ca:95:19:7b:
                    d3:d2:78:f9:21:c0:3d:43:c4:e5:63:79:eb:4f:c8:
                    4b:10:00:a0:f3:91:f3:80:fb:14:f5:4b:5c:ec:97:
                    b4:11:b2:f6:4b:16:69:91:8e:39:9b:56:3a:7a:0e:
                    34:6e:c4:e2:63:e7:f1:1b:a5:41:a5:85:d5:08:22:
                    95:87:a3:a6:50:9a:0c:c7:b2:18:c4:4a:5f:c6:37:
                    e2:a0:03:c0:56:ec:5a:32:31:1c:c5:c8:52:a7:fe:
                    59:81:b8:d7:62:e5:86:6f:6a:95:dd:7b:db:ad:7e:
                    ec:a4:7b:ab:4d:77:61:0c:d6:d7:80:53:3c:27:18:
                    a5:bd:ba:0f:a1:cc:07:67:02:fd:1a:8d:a9:2a:68:
                    ba:e3:ec:8c:fa:12:10:14:e5:52:88:22:26:6e:1e:
                    61:f7:40:ca:71:07:52:c5:ad:ea:bc:4a:47:75:62:
                    07:c5:9e:4d:e2:b6:b2:2e:a1:19:06:ab:ca:fb:b8:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:53:B1:B4:32:B4:8C:CC:C8:A2:60:E1:ED:64:5B:6E:14:F6:4C:64
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:80:d6:b2:82:ef:ff:d5:c7:4b:f4:0e:34:ac:99:34:56:
         2d:fe:d9:74:ea:57:b4:6d:90:61:12:e3:ee:0d:28:79:5d:11:
         7e:0a:a8:18:d9:eb:7e:74:c7:37:0c:36:5c:06:29:0c:db:5a:
         f9:4b:80:b9:e8:2e:9e:00:5c:f1:d0:ac:de:fa:75:e4:d2:f1:
         76:8d:0d:f0:ea:af:6f:00:ba:41:ba:17:03:da:1d:6d:26:ce:
         2b:c2:63:a7:93:60:96:70:4b:3c:a4:96:49:52:69:a1:c6:60:
         dc:22:bf:40:59:c9:0f:69:a5:44:c3:4b:a7:13:b5:a7:a5:5e:
         c8:4b:c8:35:ab:8f:f0:ae:bc:74:a5:d9:47:06:d4:20:5a:45:
         30:f5:c9:d9:a9:fe:0d:77:06:f2:50:5e:11:e7:a0:b6:04:a8:
         b1:ea:1b:86:0c:0e:18:de:4c:cb:55:52:ad:dd:0d:5d:a8:bb:
         1c:e5:dc:ff:da:59:aa:83:96:77:70:eb:0e:5f:a8:44:44:e5:
         68:2e:99:39:2f:09:56:e4:84:3b:13:59:e1:89:85:41:6c:01:
         01:57:11:b4:f4:60:13:0a:de:f0:85:d1:82:08:f5:c9:b2:b4:
         d0:d3:ba:3e:20:27:c1:69:bb:ef:43:03:d0:34:1f:d6:3b:24:
         3f:7d:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:13:31 2025 by rpki-client