Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File:                     MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier:          h0c9P3WkhHRrbqJj4umOnb8QIOcWCl5pLfD0Yiu1CRc=
Subject key identifier:   1D:DB:85:D4:E6:46:CA:59:E6:BA:60:0E:4E:1C:F9:B2:77:29:D6:0A
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer:       /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial:       01976EBDD5FCE8832114D42BCBAB010E4FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 14:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:24 +0000
Files and hashes:         1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
                          2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: b7o/faZBo2ElspabMy3MP5zm9NhC0NqQLp9+YqClC1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:bd:d5:fc:e8:83:21:14:d4:2b:cb:ab:01:0e:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
        Validity
            Not Before: Jun 14 14:00:24 2025 GMT
            Not After : Jun 15 14:00:24 2025 GMT
        Subject: CN=1ddb85d4e646ca59e6ba600e4e1cf9b27729d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:d6:62:a6:36:ff:1f:cf:32:6b:6f:ce:cd:
                    2d:3d:ee:62:f4:e8:bd:d9:eb:1f:28:0b:71:1b:9c:
                    bb:88:25:db:91:e8:54:7b:e7:dc:3f:ba:f7:11:58:
                    f8:bf:e6:a2:90:4a:31:28:de:c8:d9:66:0d:32:95:
                    e1:0c:98:84:fa:11:e7:27:4c:93:a6:6b:1d:8f:50:
                    da:c4:2e:58:c3:65:6b:c6:a0:17:c7:33:d7:51:8f:
                    a6:fa:86:55:8c:46:e4:e3:54:de:0f:ab:ee:70:13:
                    f6:5a:bf:65:27:d9:06:7a:7c:6b:8b:c6:35:16:5d:
                    53:0a:54:f4:59:c3:7b:56:2b:23:8f:e4:c7:79:96:
                    fb:96:cf:e4:7a:4e:35:95:2c:56:a3:f6:a7:8d:e5:
                    f8:89:ce:12:33:f4:54:0e:8f:72:e8:23:b4:b4:f2:
                    15:c6:ce:df:67:fa:76:79:c1:cc:c8:00:50:c8:ef:
                    e0:57:16:2a:ea:79:14:5f:98:a0:b3:c6:b0:38:8c:
                    e6:99:8c:de:86:27:b7:86:03:6e:bb:b3:cc:69:9a:
                    15:4b:5c:fd:85:72:13:ca:4b:3c:68:c6:3e:3f:27:
                    f3:5e:1d:33:5c:4e:ed:57:71:dd:5e:fd:4f:21:de:
                    c5:f9:d3:49:f5:47:25:f8:46:67:58:84:35:2e:57:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:85:D4:E6:46:CA:59:E6:BA:60:0E:4E:1C:F9:B2:77:29:D6:0A
            X509v3 Authority Key Identifier:
                keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:cb:c4:76:5b:79:cc:c2:52:ec:23:53:de:a9:5b:5e:e2:
         e6:ba:65:46:82:5c:a4:af:3f:f2:d2:e2:f1:96:53:76:a1:ac:
         a1:4d:7a:b2:e3:40:dc:0c:6b:20:0b:19:9f:96:12:d6:72:66:
         5b:35:2b:7a:ea:17:ac:df:cc:23:94:17:02:3b:98:71:dc:8d:
         53:53:fe:f9:11:33:41:a6:a4:f3:04:fa:51:22:b2:c4:c4:11:
         fe:34:75:87:e0:ea:1c:fd:72:ed:9c:b8:7f:7d:3f:58:00:e4:
         f3:ef:a6:e2:e5:22:78:01:a9:a1:82:39:eb:02:81:27:a7:2d:
         57:8a:78:35:ee:e6:ed:3b:fd:cc:3d:eb:e0:5a:f6:51:b6:3c:
         dd:ae:5a:1e:3d:bf:f6:42:4f:6c:3b:49:8b:53:85:fb:9e:fc:
         c8:72:95:0b:38:08:4f:3f:41:44:d0:e8:a8:9c:20:b3:c5:6a:
         28:80:20:08:2b:71:51:d6:a1:16:b1:25:b3:5d:4f:4f:38:f7:
         08:4f:d5:b1:56:65:b2:79:8d:e8:21:5b:07:66:ea:bc:b4:92:
         28:a9:2b:1f:d4:e5:6b:c7:d6:cb:aa:fa:4f:38:99:d1:db:b8:
         b9:08:0f:37:44:4d:21:a1:dc:fa:e6:97:94:e8:c5:68:ac:74:
         9f:91:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:57 2025 by rpki-client