Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File:                     opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier:          DX0H/LmjvbQQp/fqprcOeddgFGx9DJV6u5x1Kd6PHLo=
Subject key identifier:   06:74:A2:82:AF:90:5A:0B:39:C1:D0:6E:BF:94:CB:8F:7D:36:31:73
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer:       /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial:       01976961081A8707FADC60531757718E56B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 13:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:56 +0000
Files and hashes:         1: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=)
                          2: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=)
                          3: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=)
                          4: EFQvVvsmK2CnxaFWECLQzIRuaoA.roa (hash: z5MySgQN1+YGDxUko6xG8KGFZh9NwMFl3FNcAcreE/w=)
                          5: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=)
                          6: aQrQOxkAHRHWvV6SAv8MhUo2FEk.roa (hash: A+zK69O6Xa28jcWgz6jSMTN0CwLXk1uRy8YJFifVFB8=)
                          7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=)
                          8: jtloUH3GHj6agPnwXpuohh661-Y.roa (hash: KrxUqRlvQiFZKDH37ecvZbfFbOWCQq6UJlz8kh7LUL8=)
                          9: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=)
                          10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: BKHkJg5JWtbuM7AemRmKo0VMwfUhfEzD31xMFdAYyKc=)
                          11: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=)
                          12: v40G9p22ghWMe8UKdX_wMiyNMek.roa (hash: jreCJmIVZHIjE2eJf4y2q1RHo2Hv3JjWpFOiAElZPd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:08:1a:87:07:fa:dc:60:53:17:57:71:8e:56:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
        Validity
            Not Before: Jun 13 13:00:56 2025 GMT
            Not After : Jun 14 13:00:56 2025 GMT
        Subject: CN=0674a282af905a0b39c1d06ebf94cb8f7d363173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:2f:d4:b7:31:db:61:4c:38:9c:d7:e8:de:
                    88:ac:db:2d:b8:74:37:34:0d:57:9e:0a:27:09:ef:
                    d7:dc:eb:cd:98:79:88:0c:22:32:4d:5d:85:58:87:
                    eb:0f:cf:7b:0d:73:02:f8:ca:42:b1:1c:d0:d1:8d:
                    b3:d6:c8:1a:15:92:58:92:d8:87:0a:50:4b:9c:f5:
                    1c:87:08:0c:a1:b1:92:aa:41:ea:88:2a:fd:73:70:
                    1f:29:40:77:f1:6f:f5:8c:54:18:d9:60:e2:12:51:
                    23:0d:ae:e6:88:c6:80:f3:f8:f8:d6:34:a1:01:06:
                    93:d7:57:ce:3b:5f:79:2c:3e:6d:1f:d8:9d:50:d5:
                    cd:37:03:90:89:5b:d8:31:68:a4:21:90:35:92:b7:
                    92:63:17:ab:a3:9e:e5:57:8b:0e:9d:86:0a:00:f6:
                    05:97:a9:10:ec:4e:03:a7:f4:02:58:44:32:0a:0b:
                    a9:63:4e:bc:b5:7e:e3:19:79:1a:4c:f4:37:b3:70:
                    8f:f9:c6:d3:4c:fb:46:19:67:c5:4f:6e:95:b6:46:
                    58:b6:73:d8:71:d5:0d:78:18:20:70:00:ba:bf:fa:
                    07:15:91:ef:2c:43:52:31:23:df:86:61:ca:6c:a1:
                    e6:26:5a:13:25:eb:81:6f:0f:b5:e4:06:a0:6f:c4:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:74:A2:82:AF:90:5A:0B:39:C1:D0:6E:BF:94:CB:8F:7D:36:31:73
            X509v3 Authority Key Identifier:
                keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6b:22:15:f7:d7:93:b9:15:43:a3:8b:fd:2b:af:c0:3d:65:
         fb:2d:22:3e:60:e5:de:d9:a0:c5:7a:b0:25:ea:db:cd:e2:e1:
         fb:ee:50:de:b1:bd:de:b9:46:99:48:27:ae:1a:f0:23:13:37:
         50:e2:f7:de:96:65:4a:51:f6:d7:e8:b1:e2:5b:2d:88:5d:36:
         c6:a3:d6:87:eb:6c:89:e2:d7:53:5b:fa:aa:80:9b:25:44:24:
         8c:37:d5:a2:d4:98:2e:25:42:c2:48:ee:bb:c4:0a:d2:b1:8d:
         86:4a:a5:29:11:76:be:56:b4:65:a8:b8:5a:a9:da:fd:ec:e7:
         c4:98:2d:f9:2d:63:d5:21:b8:f0:34:aa:3e:2a:a3:52:9b:41:
         76:ce:86:e8:35:47:50:d0:19:06:97:b8:f1:12:d9:6c:a0:f1:
         9f:9b:07:49:d3:b4:0e:e6:8e:d8:86:0b:c0:45:30:cc:74:fe:
         2c:29:95:dc:9d:32:5c:08:34:a6:7b:db:f7:11:55:ec:3c:2e:
         6e:30:35:9c:64:35:cc:86:8c:d7:4a:0b:eb:fc:70:ee:c9:79:
         88:d7:8d:a3:fb:43:3c:b1:40:67:f3:08:ef:2c:46:9c:51:97:
         3b:f0:71:f4:b3:aa:41:5d:72:af:28:5e:8c:50:c4:25:3a:85:
         5a:df:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:40 2025 by rpki-client