Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          IG+0nX5GEZenc8J7NJsjcKrWO+dq9XXh3ilfSxXE6bA=
Subject key identifier:   F2:01:DD:D5:41:DD:DD:64:33:0B:93:67:E7:44:13:C6:30:07:13:01
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       01977075D663AC365FEFAF22FD5C38BF92D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 22:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 22:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 22:01:00 +0000
Files and hashes:         1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
                          2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: gmwYQVBre3QDfqkJ3QG6U1VyI0eT+aV/n0ajJ8+RJvA=)
                          3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:d6:63:ac:36:5f:ef:af:22:fd:5c:38:bf:92:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Jun 14 22:01:00 2025 GMT
            Not After : Jun 15 22:01:00 2025 GMT
        Subject: CN=f201ddd541dddd64330b9367e74413c630071301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:b9:2b:82:f4:52:08:c1:32:80:a9:28:d2:
                    57:a1:d2:d6:2d:7c:c8:11:a6:20:31:6d:a0:62:56:
                    48:c1:0b:0c:fb:52:2e:08:54:8c:15:37:d0:3f:d9:
                    30:47:2b:c6:c2:c5:9f:f3:c3:97:b7:8a:ee:3d:94:
                    c8:44:c1:86:4a:fc:98:0f:57:ee:7d:9f:c2:92:b1:
                    6b:42:6f:c7:5e:f1:78:8c:8b:af:c6:d7:34:72:08:
                    bd:6f:1a:92:5c:45:d2:43:8e:aa:52:ff:a6:34:77:
                    7e:f2:59:03:01:63:de:08:a0:8e:9a:3f:64:cf:b6:
                    19:70:d6:57:57:93:8a:eb:10:6b:a9:b4:fc:f4:57:
                    38:9d:66:ab:04:d4:28:b0:00:e3:e1:a1:08:48:8a:
                    44:af:be:d3:3a:7c:c4:30:20:ba:b9:47:88:b8:21:
                    45:de:1f:66:2a:62:8b:74:af:d1:18:9b:2f:91:58:
                    42:83:7d:b7:82:8c:2b:71:83:1d:64:13:69:52:99:
                    2e:53:6f:d9:86:dd:91:13:43:1e:ec:72:5b:a3:60:
                    4f:8a:bc:80:24:14:c7:3f:70:d5:6b:3a:98:92:a5:
                    24:f3:ae:77:29:37:ce:e5:fa:55:9f:e0:25:69:72:
                    16:da:4d:7a:bb:8e:2a:47:b0:0c:66:b6:c6:2a:07:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:DD:D5:41:DD:DD:64:33:0B:93:67:E7:44:13:C6:30:07:13:01
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:00:0b:5e:a7:35:61:80:0a:8f:9b:64:28:50:c2:ca:80:ee:
         dd:8c:28:53:11:30:a5:d2:83:4d:d7:18:a8:28:ab:18:c9:45:
         3c:5e:7e:53:dd:a8:f3:08:73:e7:7b:40:29:56:13:3f:67:95:
         5a:a3:05:f1:18:cd:32:3a:98:59:0c:51:ad:26:f7:fa:9f:db:
         a7:2d:9b:5d:38:1a:e5:2c:fe:f8:f6:0f:da:b8:8e:58:d1:47:
         05:6d:0e:7c:63:49:99:4d:89:77:96:98:ba:a9:cd:1f:89:05:
         38:f7:6b:cb:6e:6f:fd:6d:0e:b1:da:b6:02:9d:03:1d:34:94:
         49:78:76:3a:ff:79:35:c3:b1:15:9c:dc:44:39:6b:74:ce:9a:
         5a:4e:84:17:70:28:70:a8:9b:56:55:ad:58:2f:e5:53:63:ba:
         7e:e0:61:d6:84:aa:3f:0f:b1:47:13:74:61:de:42:6f:86:18:
         a7:47:3a:24:60:81:ce:bc:63:35:2a:f7:91:fc:18:84:a4:42:
         e2:42:8a:62:a6:aa:bb:63:79:cf:94:16:80:70:17:85:22:ae:
         b8:eb:22:d5:60:21:99:f8:24:b5:47:50:d5:02:2a:14:92:1f:
         d5:82:91:3f:79:0d:2f:ec:e3:80:4a:c2:a9:8b:34:8b:9b:e2:
         af:b7:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:29 2025 by rpki-client