Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File:                     dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier:          3dQR4pHMrNH/+v/k2aw1HPyzZFCAGzvzGXJXumNTbhY=
Subject key identifier:   BE:23:85:E8:B9:73:68:17:08:D4:20:15:1C:2D:12:9A:94:42:08:23
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer:       /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial:       0197703F210BE10CB7DB391C3744B56D5440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 21:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:14 +0000
Files and hashes:         1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
                          2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: cDnPWb2prBSvXqh1j+LrdKq48gx+8jcgivFm6S1oBa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3f:21:0b:e1:0c:b7:db:39:1c:37:44:b5:6d:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
        Validity
            Not Before: Jun 14 21:01:14 2025 GMT
            Not After : Jun 15 21:01:14 2025 GMT
        Subject: CN=be2385e8b973681708d420151c2d129a94420823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:00:8d:20:c9:34:47:e9:ac:ea:2c:b7:eb:
                    7a:23:4d:cc:19:e4:8c:d2:32:c1:ef:ef:6b:90:d1:
                    39:7e:66:c0:65:c6:a3:8f:f3:5b:e1:64:93:69:5c:
                    d0:62:7c:5e:f0:4e:29:54:a0:0f:b6:ca:4c:67:16:
                    14:76:92:11:9b:7b:aa:fd:fc:4c:8a:ce:a6:9f:74:
                    11:a4:00:4d:ab:91:69:05:b6:92:1d:e9:49:a4:5b:
                    e0:4f:61:9d:8b:53:e0:f9:e7:60:11:a8:d2:b1:0d:
                    69:5d:a4:84:88:df:61:8d:42:4f:7e:41:19:93:4c:
                    e4:68:08:cd:97:68:d1:6a:af:65:cf:aa:27:ed:61:
                    94:7e:fd:a0:53:5e:57:ad:d2:2f:29:fd:09:5d:7c:
                    e0:f8:9a:df:85:7d:b3:f7:e1:8a:a1:a8:32:e3:cb:
                    44:ce:79:a6:a0:0a:ca:5c:8b:61:23:ee:99:6e:6e:
                    b8:6e:48:23:b8:43:56:d1:62:a8:ad:52:09:6b:a0:
                    7c:73:9a:66:6e:1d:ad:05:03:35:43:26:58:f4:b9:
                    0e:cb:8b:5a:e4:d7:13:64:27:bf:fb:df:a0:fe:fe:
                    50:51:f6:fb:24:4f:e7:f1:8f:d9:dd:aa:66:b2:f8:
                    05:eb:f6:ab:d6:14:7e:c7:40:28:ce:5e:0f:cf:4e:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:23:85:E8:B9:73:68:17:08:D4:20:15:1C:2D:12:9A:94:42:08:23
            X509v3 Authority Key Identifier:
                keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:39:53:0a:1b:34:65:c5:90:81:03:65:e6:cb:cc:03:30:
         16:98:a1:ff:71:0b:24:25:96:09:14:9e:92:ca:03:e3:7e:83:
         03:14:96:5a:2b:74:2d:8d:55:36:03:38:f3:5e:b9:4f:49:d2:
         46:bf:cd:8c:39:1c:f8:dd:69:c3:7c:83:bc:19:f0:9b:6b:16:
         f1:71:9c:84:b3:0e:d3:74:7c:ac:4c:6c:b4:43:a5:73:3e:94:
         ba:d5:3f:35:44:ef:9d:f9:f1:c4:27:a2:5f:60:d6:ea:51:e4:
         ec:65:95:bc:f8:e3:20:92:6f:d2:52:7d:2f:a1:fb:8a:37:cf:
         1c:23:74:22:81:91:43:e0:ea:68:25:44:d5:af:f9:02:a6:db:
         5e:6e:98:b2:6c:e7:31:00:b8:7d:c0:94:04:a9:73:01:43:30:
         22:dc:b7:9c:9d:ac:11:8f:51:c3:9c:c2:0e:8f:e4:0d:b3:1d:
         b0:d8:b3:fa:59:6e:ab:29:f8:4c:ba:22:fc:5c:c1:bf:6a:95:
         ef:ba:57:4b:c3:e6:a3:95:f3:ec:e0:28:5f:cb:54:e8:88:b3:
         2a:2d:3c:12:17:4a:ef:55:dc:08:d9:1a:92:8a:4d:49:88:11:
         b4:33:5b:9c:b9:95:7e:d4:51:c0:8a:d9:5c:7a:a4:da:e5:9b:
         88:20:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:13:40 2025 by rpki-client