Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File:                     hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier:          5+AtE7LH/mGCYfwXL7HEg6QyklDTwEe0UXXLU9KWoFI=
Subject key identifier:   C0:57:F6:C4:EA:6B:22:52:2F:A1:F7:C0:CD:A2:5E:89:EB:53:B5:2C
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer:       /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial:       01976EBE138756D585B3285ED25152FA0BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 14:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:40 +0000
Files and hashes:         1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=)
                          2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: oVYYSrPT0788Lf3lBGZCpHQQ4ctPowDrUXUrdCCwM3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:13:87:56:d5:85:b3:28:5e:d2:51:52:fa:0b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
        Validity
            Not Before: Jun 14 14:00:40 2025 GMT
            Not After : Jun 15 14:00:40 2025 GMT
        Subject: CN=c057f6c4ea6b22522fa1f7c0cda25e89eb53b52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:43:c1:7b:13:45:e5:3f:42:46:bd:e7:bb:
                    e7:fd:f6:08:a6:0c:02:aa:0b:f9:1d:79:39:c9:25:
                    d5:90:85:a2:bf:2c:07:38:ff:5d:6c:6b:c8:5f:55:
                    05:2d:3d:1b:c8:f5:ff:c7:b5:f3:2c:9c:d3:3d:3e:
                    eb:0e:8e:a1:59:03:b5:b8:10:a0:05:6b:00:bf:d9:
                    65:8a:a8:6e:19:b6:78:fa:d1:cc:f3:69:97:e5:13:
                    f1:a2:38:f0:17:71:cb:fe:8b:51:3d:53:78:1e:d7:
                    60:cf:c0:6c:e1:e5:2a:5c:9a:fd:99:8d:f2:9e:6d:
                    7b:79:31:2a:5e:e0:c2:d7:4c:9c:7f:32:ca:83:48:
                    1e:ba:6d:4c:24:6b:6f:1f:24:a4:b5:76:44:10:cf:
                    42:a6:b9:d2:ab:77:32:72:c5:61:cf:a3:98:c7:c7:
                    6b:ad:7f:f0:4a:4a:82:62:24:44:12:5e:ed:48:01:
                    67:65:a7:6f:32:d1:53:54:1e:d6:27:d7:d5:bd:19:
                    f1:b2:2e:49:eb:7e:02:9b:29:11:88:cd:38:08:74:
                    4e:6e:fe:cb:5c:1c:c0:69:2b:ac:89:7f:92:bd:b6:
                    9a:2e:df:4f:cc:7e:bd:24:aa:8d:aa:82:59:08:58:
                    59:ef:d9:5d:94:7f:49:5e:bf:47:18:9c:47:de:d9:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:F6:C4:EA:6B:22:52:2F:A1:F7:C0:CD:A2:5E:89:EB:53:B5:2C
            X509v3 Authority Key Identifier:
                keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:7c:1c:08:78:a2:04:2e:94:44:27:25:51:6f:fa:0b:31:bd:
         45:a6:00:e5:08:8e:a0:48:25:c2:6e:43:93:47:53:a6:ef:51:
         8d:60:79:fa:7c:f6:41:68:5c:99:3e:d9:e5:a8:16:63:35:5e:
         c3:71:e8:4e:80:d8:bb:25:56:c7:47:d9:a7:b6:1d:03:95:a6:
         36:76:27:fe:ba:36:9f:28:9a:d4:12:d8:fd:78:55:c4:95:b0:
         6f:91:01:0b:a2:88:f7:32:19:e2:a0:db:bb:17:8b:5b:ed:a4:
         25:44:64:8c:a1:e8:1b:5e:5c:27:c1:6b:7c:be:44:dc:4e:30:
         f8:3a:99:69:71:6b:0a:fc:0d:fa:c6:84:9b:69:30:30:d6:13:
         35:a3:5e:ce:37:a0:82:03:10:fe:be:b9:bb:c3:b8:9f:e0:cb:
         ac:80:c3:34:e4:31:7b:8c:42:dd:c4:59:7f:6f:c8:ec:aa:95:
         35:d8:33:e9:98:51:73:64:74:78:c9:6f:c2:84:de:ea:5e:c3:
         06:99:18:ec:84:dd:8c:d9:47:93:4a:da:11:ff:5c:ff:62:a5:
         d2:74:69:c5:a8:90:ed:b5:ac:32:3d:48:54:4c:5a:63:fa:3a:
         13:15:36:74:e9:1f:79:54:f4:f6:4d:2c:d6:64:e8:6c:f2:9a:
         dc:b5:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:50:11 2025 by rpki-client