Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          RiM0jKeandvjUiEZ2WgC4S3JqGbHUnMgIUnmiDQPw6w=
Subject key identifier:   76:D3:F3:A5:D1:AF:AE:CF:51:0C:1A:F7:61:EE:65:EA:DB:A5:BF:40
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       01976E194CACDC7853E1D22D94168FF73830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 11:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:41 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: 42roKtcLM/u71j9FNn0/FF1pRv1tL8SS8A+/9K2vRdo=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:4c:ac:dc:78:53:e1:d2:2d:94:16:8f:f7:38:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jun 14 11:00:41 2025 GMT
            Not After : Jun 15 11:00:41 2025 GMT
        Subject: CN=76d3f3a5d1afaecf510c1af761ee65eadba5bf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:2a:63:ab:ad:31:9f:40:e7:62:fc:a0:28:
                    77:53:c2:61:ed:cd:77:cf:cd:35:de:1a:1a:7c:19:
                    12:fd:5d:14:8f:cf:fa:ba:b0:cc:1d:ad:88:68:8f:
                    75:6c:63:84:8b:90:48:c9:39:81:89:da:c4:b2:9c:
                    57:50:b2:fe:1d:c3:48:23:dd:c0:5b:f9:2e:ad:15:
                    91:1d:84:92:8f:9b:c2:93:bd:d0:c1:85:35:ad:0b:
                    86:bb:d1:85:7a:57:97:66:78:f4:09:66:59:90:b3:
                    87:93:2b:62:d4:bd:9f:bd:a1:4f:d8:8c:0b:32:0b:
                    55:19:07:60:24:b1:94:eb:5e:08:cc:35:6b:6b:ae:
                    6f:e1:2a:e8:39:e2:33:e9:6b:fd:56:54:75:f5:e8:
                    de:b7:d7:72:3e:5f:15:aa:87:12:b1:85:5f:8a:f7:
                    51:e2:32:47:73:0f:7b:cd:08:ab:e0:2d:3d:2c:fc:
                    25:c8:04:7f:35:9b:a6:c5:9f:aa:dc:84:cb:41:4a:
                    73:22:2d:47:9e:0a:7f:93:f5:73:b2:cd:3a:a6:a4:
                    93:31:c4:26:e6:cb:9a:e1:5f:c9:19:35:72:65:18:
                    bd:3d:43:05:04:b6:d8:27:8a:f5:4b:3a:eb:e0:f9:
                    ef:db:4b:47:1d:ea:55:f4:08:66:82:91:59:a5:16:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:F3:A5:D1:AF:AE:CF:51:0C:1A:F7:61:EE:65:EA:DB:A5:BF:40
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:38:05:a9:ba:57:9a:7f:0b:5c:c7:4b:ff:db:57:f7:b3:
         e0:6d:9d:e6:90:a2:96:aa:9f:99:ed:f3:64:00:04:b9:9d:02:
         f8:d4:c1:b1:9a:93:43:45:9c:4a:75:83:7d:9d:76:6c:68:54:
         f6:42:d4:5a:88:0d:df:00:e5:f7:34:66:ed:2b:ff:1a:c0:91:
         0e:dc:07:56:31:c9:c9:5d:4a:53:d9:b7:3a:49:42:20:0e:7c:
         26:0c:12:65:59:c4:da:d9:09:79:75:19:54:92:89:c1:11:54:
         10:3e:7a:8a:3c:a3:d6:df:db:d8:12:bb:b5:46:ae:01:33:1f:
         aa:9b:9c:92:52:e8:a7:a6:3e:26:39:75:3d:2f:e8:78:c6:c6:
         06:fc:1b:77:5e:9a:86:b1:8b:e3:b2:34:de:fb:65:ef:54:01:
         cd:8f:69:66:e6:16:69:c3:82:31:50:b2:c7:1e:b7:90:1c:fe:
         6c:06:3c:d9:52:72:20:9e:87:fc:13:cf:06:89:f6:ae:6d:ce:
         a4:d9:b9:3d:db:da:80:7f:69:b7:f6:d9:68:29:c6:b4:d4:7b:
         ff:bd:9b:43:f5:21:96:b3:07:7a:ae:10:8d:95:7f:5e:49:9c:
         88:27:26:33:df:8e:9f:74:26:4d:e7:a4:fd:9f:94:6f:45:5e:
         28:9a:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:21:10 2025 by rpki-client