Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File:                     vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier:          QHccuV0+erMm6KyuJELqSpVv4YKI3iI7mjRS7KLBgAI=
Subject key identifier:   6F:58:98:1D:4F:E7:62:74:8D:8D:19:4B:26:83:3F:3B:CF:AC:AA:17
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       01976EF50B9A2FAE09D95D9794A546E9BA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 15:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:42 +0000
Files and hashes:         1: 3alv3XwEbOFu7iiK8LFbOce6T6M.roa (hash: 0D37DkikXSNhNHk7nw4gpplDRFgdjXDIi3MfBRU1TWY=)
                          2: QfCE84C5mXjE3pc-vv8Z3PN8Ftc.roa (hash: fWz5/zlEwc/FfIJ7uTaCeiVlT5ulVNUEAcYZgSkvI+4=)
                          3: XuYgpmXug2q0Cu_sdJBe-1XGD2I.roa (hash: joQ8DCTmx5DI+ZzMDXT+0TtQtcaVPpX4LENPUyxWUVI=)
                          4: dYt1KKj4tCGLif9Uw-PUq5XSPt0.roa (hash: VRn5rOavF3Z1TUQt1A8oCfFVCQrXkGJKkkqLjlnItNg=)
                          5: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: s0eDyGHoJNeN3z/B1b8ZPq2LpMltyuBFXRahzvbeZD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:0b:9a:2f:ae:09:d9:5d:97:94:a5:46:e9:ba:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: Jun 14 15:00:42 2025 GMT
            Not After : Jun 15 15:00:42 2025 GMT
        Subject: CN=6f58981d4fe762748d8d194b26833f3bcfacaa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:31:8a:cf:ab:8d:36:ec:79:61:0c:18:0c:
                    13:8b:c6:5c:e3:79:2f:b3:50:f2:61:c4:c2:64:24:
                    e2:a5:61:9b:b6:d6:e2:2e:e2:dc:b0:31:76:59:e6:
                    ea:73:e6:2b:84:4e:c3:ab:dd:f8:95:54:3b:ae:63:
                    a6:ad:5a:9c:30:42:65:23:ce:f4:38:74:f9:1f:1e:
                    7f:e6:80:f0:d9:50:fa:d1:4d:af:66:70:ad:9f:04:
                    b0:4b:95:94:dd:77:aa:45:4f:d1:ad:f8:83:b1:26:
                    15:5f:41:38:5b:c7:72:c0:98:6a:8a:4b:43:86:c3:
                    98:92:08:40:ed:ca:49:8a:45:a3:a7:04:8e:ac:f3:
                    8f:b2:29:ff:ed:1d:cb:cb:bf:31:68:19:f3:9f:5a:
                    51:74:f6:a9:a1:61:80:74:a7:66:aa:19:08:0b:f8:
                    f3:52:49:cd:e7:a5:96:43:cc:65:07:15:73:95:a9:
                    36:29:59:f8:46:a0:b9:07:d8:64:86:a4:93:da:64:
                    94:3d:63:e9:4c:2d:4a:a4:6d:6f:da:f6:2d:3b:fa:
                    45:94:c2:45:0b:5b:a6:aa:46:70:53:13:75:c6:77:
                    c6:18:c6:6d:4e:20:ad:60:6c:0d:c7:da:b3:4f:d1:
                    ab:02:0c:16:b2:1d:69:e7:53:a1:a5:5f:76:0d:af:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:98:1D:4F:E7:62:74:8D:8D:19:4B:26:83:3F:3B:CF:AC:AA:17
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:29:b5:f4:c3:7b:34:38:94:bc:eb:21:91:35:d0:55:47:
         2e:b3:33:23:d5:3a:d9:a7:d5:29:b2:25:8c:e5:69:af:0b:37:
         40:99:3e:a2:e9:d4:35:f3:66:2d:c4:47:ce:33:15:30:d2:2c:
         c1:8d:cb:b9:d2:be:5a:7d:27:3c:27:f4:b6:16:3d:6f:36:91:
         40:d1:6f:0f:7b:2b:16:eb:ef:43:c6:7c:21:98:43:51:31:60:
         63:02:9d:53:32:96:21:2e:1d:e9:91:60:02:3a:f4:eb:52:d6:
         8a:2d:7d:71:b1:eb:d7:be:db:44:91:19:19:f6:28:b2:f7:61:
         93:5e:48:70:d1:f4:8c:46:1f:77:04:ea:a8:3d:15:17:a6:8f:
         7c:64:77:19:db:fb:69:eb:82:fa:45:f7:f3:26:27:a1:32:88:
         38:29:e0:fa:50:f0:09:47:48:17:24:fc:74:81:e5:52:55:54:
         b2:04:51:2e:33:e9:1f:22:a8:8e:8a:01:d9:db:b1:97:0a:a1:
         5a:63:8e:95:32:bb:14:02:da:76:9c:f1:92:4a:4c:2f:c6:c8:
         be:46:26:b4:0b:95:54:38:4c:04:75:d1:2e:c8:cd:12:b8:ff:
         43:8e:be:60:a0:90:b6:9a:76:78:09:e3:24:54:3c:d1:e1:8f:
         d6:e3:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:00 2025 by rpki-client