Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File:                     dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier:          WYu6luKoinOwc4mpFNHhSKZKr9VUEuw6IubGxNArGhs=
Subject key identifier:   7B:5D:82:3F:F4:3F:70:DF:81:7A:E4:89:0F:EF:CF:EF:BD:9D:8C:50
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer:       /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial:       01976C61D938B839F2A7E86EBC07C3D45F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 03:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:41 +0000
Files and hashes:         1: 1-1fD9INC6tdul0-Zxx4kw5UQaSA.roa (hash: xArWY+ZJbdFaL3BIojqGwzrX81Sbjb4pJCyT9h2MU5E=)
                          2: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: 6FO4Tnxt93K+0pVnbn5dgtW6cKVsDUBdI/z48leJquw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:d9:38:b8:39:f2:a7:e8:6e:bc:07:c3:d4:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Jun 14 03:00:41 2025 GMT
            Not After : Jun 15 03:00:41 2025 GMT
        Subject: CN=7b5d823ff43f70df817ae4890fefcfefbd9d8c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:55:a4:00:43:7a:cd:0a:bd:5b:95:e6:17:
                    a8:20:69:ad:5a:f1:4d:67:91:94:4f:3a:a0:05:fa:
                    3b:48:69:9d:79:2f:dc:e4:b7:c3:9a:92:46:35:a3:
                    d9:d9:17:b5:c8:ca:83:e1:35:ad:e0:af:b2:68:38:
                    65:67:0d:cb:e8:5b:0e:72:bb:a6:1b:2f:d2:e8:73:
                    d3:4f:18:7f:11:f4:5c:73:38:0d:c3:77:9a:c6:ab:
                    5b:4c:c3:69:66:91:93:f1:6c:c5:a9:c0:5a:20:3b:
                    84:54:8a:34:f7:bd:dc:a0:4e:0d:2b:63:61:01:37:
                    51:06:c2:cd:ac:38:a2:c6:2d:76:e6:93:28:87:6f:
                    00:8a:7c:89:65:a0:1b:02:a0:00:24:fe:0e:19:9c:
                    db:92:47:30:92:ce:30:13:93:ca:a9:92:53:7c:d5:
                    2e:ac:8e:60:3e:71:d3:bc:70:36:13:61:68:84:a6:
                    de:38:74:08:a6:c9:bd:d0:47:18:79:68:20:1a:d8:
                    eb:fe:6e:01:7b:09:da:35:29:f6:09:16:e6:a7:fd:
                    0e:19:92:ca:57:0c:f2:45:b5:4a:61:88:7b:60:21:
                    29:a1:02:14:49:33:f3:3a:47:35:dc:21:94:ee:9d:
                    e5:60:36:c9:52:8a:85:65:35:f0:79:3f:ce:17:35:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:82:3F:F4:3F:70:DF:81:7A:E4:89:0F:EF:CF:EF:BD:9D:8C:50
            X509v3 Authority Key Identifier:
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:09:af:25:6b:fb:da:60:35:1c:d5:b1:bc:3c:18:0d:1d:
         5f:4b:93:20:47:a3:44:21:20:45:f1:ef:b8:54:2f:a2:2a:4b:
         b9:fe:d3:23:df:32:b4:32:05:75:38:75:4e:6c:4c:be:d5:74:
         3c:8b:e0:ef:5c:9d:84:9f:69:60:d0:48:91:0b:c0:a5:c4:56:
         84:13:19:3e:15:af:89:e7:24:d6:5b:29:42:cf:d7:be:76:a5:
         02:b3:6d:c0:23:b2:5a:a9:e7:0e:45:ab:9c:8b:bc:e3:7f:94:
         a9:43:6e:1a:3a:eb:22:56:20:07:b0:54:ee:95:57:99:de:a4:
         8e:c0:22:7e:97:ba:ac:0f:10:c0:20:a0:d0:90:d9:27:6f:44:
         1a:c7:26:7b:68:47:34:94:d1:79:8b:f3:e6:78:47:23:24:08:
         08:f1:ef:d5:d9:47:4c:12:73:2f:40:8c:3a:68:39:af:29:de:
         b6:43:a7:11:4b:ce:26:1a:d2:76:7a:f2:1b:fb:33:e5:eb:13:
         0a:87:1f:28:9c:bc:b6:0f:2e:31:52:8d:36:80:59:30:e6:19:
         6b:5b:f9:61:eb:d2:49:e2:de:f7:3c:72:08:64:3b:2b:a5:39:
         bc:0b:01:8f:9c:a4:88:68:4a:d7:62:f5:ef:2d:ef:de:75:ab:
         03:b0:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:44 2025 by rpki-client