Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          +3bQwZ5XTuug8urKE24DM3iagSjkIme36D2o019eF5U=
Subject key identifier:   5F:F1:95:3D:9A:87:3E:AF:F1:13:4C:51:7F:04:86:11:73:01:49:40
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       0197688501AE5003E4225CEDB304E9F66B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          1594
Signing time:             Fri 13 Jun 2025 09:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:36 +0000
Files and hashes:         1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
                          2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
                          3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: CPCy3bf3oY04mnIyQIiL+phDKDmv6TAaRxQqg/y5PU8=)
                          4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:01:ae:50:03:e4:22:5c:ed:b3:04:e9:f6:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jun 13 09:00:36 2025 GMT
            Not After : Jun 14 09:00:36 2025 GMT
        Subject: CN=5ff1953d9a873eaff1134c517f04861173014940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:2f:cd:15:16:85:c7:ab:f7:43:0c:8b:27:
                    76:21:95:f5:f2:72:52:e8:15:6f:55:19:72:65:4b:
                    b4:2d:63:0c:31:54:74:e4:6b:4f:a5:84:82:71:d3:
                    82:4e:cb:94:12:26:15:56:0c:5d:65:09:59:9e:af:
                    39:7d:85:2f:13:0d:13:4c:a5:e5:80:6f:06:f7:f2:
                    1d:b3:4c:5f:a8:e8:45:29:03:70:ba:6d:d7:79:7e:
                    43:8c:ab:11:e9:fe:0c:a5:46:8c:5e:e8:b1:8d:15:
                    d4:ba:ef:1e:f4:1e:aa:23:56:2d:78:dc:c5:9d:61:
                    7c:81:98:3e:9d:09:87:84:20:86:88:19:12:21:af:
                    e8:88:b8:68:bc:47:0a:10:cb:b8:d4:c5:5b:84:fd:
                    22:ac:75:a1:ba:ec:62:2d:56:a0:2f:84:0f:e6:ea:
                    03:19:fe:93:5b:f9:be:68:d8:4d:a3:a0:5c:97:c4:
                    b9:b8:dd:f7:dd:a0:c5:d6:4e:ee:41:80:0f:a4:52:
                    40:ee:7c:83:70:9d:df:8f:d7:00:9e:45:41:27:22:
                    8a:68:ba:34:30:21:25:c6:ff:4c:70:32:f4:42:83:
                    f8:a2:aa:d1:ff:25:d1:5c:ab:8c:24:2f:1e:80:75:
                    69:a4:23:fd:3e:d7:79:51:4d:e2:1f:97:7c:c4:25:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F1:95:3D:9A:87:3E:AF:F1:13:4C:51:7F:04:86:11:73:01:49:40
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:42:7e:bc:15:4d:9b:a2:59:c0:41:b7:7c:88:5a:38:8a:42:
         4e:15:5f:6b:7f:2f:eb:70:d5:1b:5e:60:4e:e7:d5:a7:a7:c6:
         50:b0:2d:21:73:5c:fc:91:f3:5b:5b:b2:71:60:08:d6:2d:4c:
         18:bf:13:c5:fd:32:c0:c5:83:87:e0:a7:ef:c3:a2:30:38:10:
         63:e3:eb:4b:98:3a:c8:0c:84:d6:cb:54:4e:85:1a:2c:82:26:
         e7:b8:c5:46:36:92:a7:24:e6:42:5f:90:8c:be:3a:15:2c:ab:
         79:49:fb:43:08:29:02:dd:7c:c1:ea:3c:41:06:a2:94:fa:98:
         72:e2:23:ae:d3:87:8c:06:6f:31:0b:44:46:30:83:d3:3a:4f:
         15:d1:d9:85:dc:5d:ac:e1:e7:6f:18:e8:6e:3d:8a:78:3c:fa:
         61:ab:77:ca:d3:7a:b8:ef:dd:ce:7e:93:b2:63:d0:ec:4c:d8:
         21:1d:5a:6d:a5:11:3b:66:67:21:b5:83:2c:ae:2d:00:86:8c:
         40:b0:83:65:e3:9c:8d:85:fa:fb:10:86:30:7a:05:18:c6:d6:
         0c:e4:0d:09:ca:62:cf:ed:6c:c7:b5:d9:20:41:7e:cc:b2:81:
         14:3e:79:e4:c5:ec:35:0a:15:ba:07:84:d5:38:db:09:b2:17:
         62:20:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:09 2025 by rpki-client