Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          yUbP4ddWwbrs2ryzLIfVBK7q5MzeZCN8SOUJtdTdlYw=
Subject key identifier:   A4:A6:8A:BC:AC:7B:44:6E:A2:12:FA:23:01:F0:F6:6D:E0:12:C1:80
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       01976D748D139E8C6CA50B6E25C4FA517CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 08:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:44 +0000
Files and hashes:         1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: JmidF9QpbAHUlxAbj/lX7KmG1qDC2iwnB/bQQucizIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:8d:13:9e:8c:6c:a5:0b:6e:25:c4:fa:51:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Jun 14 08:00:44 2025 GMT
            Not After : Jun 15 08:00:44 2025 GMT
        Subject: CN=a4a68abcac7b446ea212fa2301f0f66de012c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:c5:99:b8:b5:d1:27:d3:9a:59:54:33:9d:
                    27:72:d8:fc:74:0c:83:95:d9:6b:41:50:7e:1f:68:
                    c2:0e:3f:e3:a2:f0:6b:c5:a8:4f:35:ac:7b:4e:da:
                    9e:85:57:72:b2:51:7f:df:2d:b9:3a:38:de:6c:f7:
                    19:08:9a:aa:c8:d6:26:75:78:85:ab:55:5a:3e:6c:
                    2d:01:6c:a9:12:f4:99:e5:87:7b:9d:0f:45:a9:e8:
                    5a:77:f7:36:cb:18:ee:0c:43:3a:d7:ad:36:47:0d:
                    4d:41:a4:5e:f7:58:0b:de:0b:82:7e:81:2e:89:dd:
                    a3:15:e7:5a:2f:f5:e8:9e:21:26:24:c5:e2:2b:d7:
                    57:bf:1c:ef:d0:8d:f2:b6:d8:da:10:93:59:73:94:
                    c1:39:59:f5:ec:7f:3a:20:39:58:81:fd:17:70:90:
                    6c:16:0d:bc:5a:ae:45:cf:3a:f9:8c:ec:d2:d4:d2:
                    19:59:02:db:79:e8:8a:b5:0a:ad:d6:f1:cd:d2:da:
                    66:d2:4a:cc:98:09:b4:8e:01:0d:0f:fa:79:13:a8:
                    c2:42:53:e3:8b:ac:5b:25:ce:c0:57:55:80:0f:39:
                    b4:3d:be:d7:5d:02:a3:b4:a4:b3:c5:dc:4d:5c:d6:
                    ca:af:80:9a:ce:c4:2a:da:59:ea:a5:89:2e:9f:1c:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:8A:BC:AC:7B:44:6E:A2:12:FA:23:01:F0:F6:6D:E0:12:C1:80
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:96:9b:8c:ee:0e:87:e0:44:03:db:18:09:40:5f:4a:37:
         91:ee:b4:fc:70:1b:73:ec:67:bc:70:6f:bd:e4:48:fa:47:ca:
         1c:3c:8c:90:83:e4:ce:0b:39:51:2c:0a:86:0f:f5:29:ad:64:
         65:b3:8a:4f:4e:4c:bd:d1:a8:67:9b:c9:14:e0:a4:31:80:a6:
         6c:19:06:41:f0:8f:a3:9b:f1:ca:6b:12:9a:73:a9:16:08:e8:
         59:97:d0:66:4a:04:ac:9e:1f:2f:8a:f2:5f:b1:35:a9:dd:37:
         5b:89:11:ec:ed:8b:73:a6:31:7b:04:c1:11:c6:ec:f4:12:62:
         f6:ed:dc:82:82:93:4d:f8:13:68:03:b8:1f:12:8f:a9:d0:b0:
         73:15:2e:de:40:20:42:82:54:3c:dc:11:25:5e:d0:fc:ab:a4:
         35:04:4a:d0:a9:d8:d3:0d:2b:f8:09:be:a7:ec:c4:92:7c:af:
         0f:1f:69:d8:33:e4:0f:00:53:c1:9f:44:f1:f5:89:e1:73:3c:
         08:2d:dc:ff:fe:03:a5:2b:e5:f4:c0:e4:03:ab:1c:46:96:f2:
         c1:e7:0f:3a:3d:7d:3e:54:fd:16:ba:4d:a9:1c:bf:d5:cc:3b:
         ab:fb:ab:f1:31:9a:e5:78:71:17:dd:5b:51:d4:c7:fb:6a:f7:
         59:4b:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:04 2025 by rpki-client