Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File:                     BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier:          Emjj76bbGMyEKTJYXul6GYks3qZiPFVArk0p/4TmcPg=
Subject key identifier:   5D:DA:45:C4:BB:03:A1:9F:B9:7E:7D:FE:B9:BE:D4:5E:35:67:60:CE
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer:       /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial:       01976C2B277375A74C9BF972CA6E4433C1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 02:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:56 +0000
Files and hashes:         1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: SKWKkRF3HNUlGqy/ynBuNkbqjiv9lecMKbUTt/p4b1o=)
                          2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:27:73:75:a7:4c:9b:f9:72:ca:6e:44:33:c1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
        Validity
            Not Before: Jun 14 02:00:56 2025 GMT
            Not After : Jun 15 02:00:56 2025 GMT
        Subject: CN=5dda45c4bb03a19fb97e7dfeb9bed45e356760ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:88:c0:7a:97:84:1f:a0:80:44:a4:0d:ed:
                    fe:33:70:cf:e2:0a:22:1f:51:20:eb:55:8e:1f:02:
                    b6:9a:f0:6d:92:d4:fe:ca:64:3e:a0:74:b5:41:4e:
                    96:0f:45:96:07:4f:f5:4f:c4:cf:1a:38:65:3a:08:
                    7f:a5:4c:c9:09:b1:a9:4f:29:a4:c4:4c:ef:82:10:
                    e0:83:12:79:b2:4a:ce:fd:e6:99:4e:c5:ba:fc:10:
                    b3:9e:ff:e0:da:ad:01:00:a2:f3:ee:fe:2c:d7:be:
                    5f:51:ad:fd:1c:26:e2:9f:61:82:4f:9d:fd:c7:8d:
                    b8:0e:02:4d:6f:78:f5:27:eb:86:74:2f:e9:6a:73:
                    74:2f:8c:46:f3:b7:b4:99:75:58:9e:13:e5:d8:41:
                    88:00:76:88:1f:a4:43:03:8f:f9:87:b7:4a:50:37:
                    34:ab:67:62:33:aa:f7:ff:5a:a2:2c:b6:6a:ab:66:
                    f8:dc:83:f5:fb:19:55:eb:23:e5:ed:09:cd:68:d0:
                    b7:f4:3f:8d:ca:ed:83:8f:e7:4d:0a:95:dd:5d:6e:
                    88:ea:f6:b3:73:a2:f3:e0:ee:b9:db:8e:04:ea:64:
                    8b:a0:7e:55:de:f1:3c:22:25:c0:90:41:4f:94:c7:
                    b8:48:5e:fa:e2:9e:c9:4c:db:9a:80:b3:d7:8e:c3:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:45:C4:BB:03:A1:9F:B9:7E:7D:FE:B9:BE:D4:5E:35:67:60:CE
            X509v3 Authority Key Identifier:
                keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:32:d6:48:54:67:f3:90:28:60:4a:3f:4c:49:a8:39:53:
         66:f4:f1:5a:15:a2:cd:b8:a7:ff:d9:d0:6b:b3:f0:ed:e8:f2:
         7b:d8:2e:45:b2:a8:55:77:e5:d9:a0:29:ea:fa:95:c5:9c:c7:
         e5:ac:d9:56:5e:ae:fc:9c:0f:d4:02:58:e5:28:fc:b1:9e:3f:
         4e:62:0e:52:1c:30:1b:43:6c:ba:c9:57:b7:c9:57:c0:a4:f2:
         f4:07:1f:7f:3a:cd:fb:31:87:d1:14:f2:db:aa:22:15:ff:08:
         21:5f:b3:e2:d5:61:cc:e4:2a:38:fb:69:6d:63:23:bd:94:10:
         0a:38:a5:2a:82:8e:1a:6d:31:1a:de:14:c8:99:a5:6e:3a:59:
         03:26:30:9b:78:c0:92:f8:3b:2d:1b:2a:b6:29:ae:ad:1c:fe:
         b2:86:7e:33:17:11:85:c7:96:b9:7b:f0:f8:3a:46:92:5c:5a:
         37:76:af:b0:48:27:f9:bd:72:4f:fd:28:99:41:dd:3d:51:72:
         fc:13:2c:ec:88:52:95:1c:cb:a3:41:59:9a:e5:ec:36:97:74:
         a5:ed:3b:25:c4:80:51:6f:f6:ae:14:b3:b5:e2:a3:66:5f:83:
         97:a4:c7:55:9f:9f:a3:7c:ba:c6:b3:d3:19:04:92:0c:15:9d:
         4e:98:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:01 2025 by rpki-client