Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          3RQOY6zBYN+vzCA5c6KtSb9UpAQx+w/Hx7CZtPcze3Q=
Subject key identifier:   61:5D:29:6D:C7:F9:71:6A:5A:66:7A:33:50:3C:77:2C:B6:23:DA:66
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       01976F62FB9EF1C2956F812462F3D2A6E297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 17:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:47 +0000
Files and hashes:         1: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: baLGaQ/9HVdbfO0sNP5/GqGsYAhA4FQFAqcjGE80QXM=)
                          2: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=)
                          3: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=)
                          4: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=)
                          5: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=)
                          6: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:fb:9e:f1:c2:95:6f:81:24:62:f3:d2:a6:e2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Jun 14 17:00:47 2025 GMT
            Not After : Jun 15 17:00:47 2025 GMT
        Subject: CN=615d296dc7f9716a5a667a33503c772cb623da66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:5e:07:e0:dc:9c:db:97:ef:5d:12:1c:a8:
                    24:de:54:92:45:23:7d:ec:72:81:e5:de:00:42:0b:
                    75:d9:f7:39:30:94:2e:76:6c:a9:13:a6:63:04:4b:
                    99:ea:99:7e:f8:96:71:91:16:1e:7c:ec:f4:8c:74:
                    a7:8b:ba:61:8a:73:c9:4f:8e:94:e9:2f:d0:15:c3:
                    5f:15:23:31:f1:ec:d7:27:0b:53:94:ca:82:87:c1:
                    c3:bc:73:b3:20:be:90:c7:d5:55:de:78:7a:59:b3:
                    af:35:26:06:02:50:57:d0:50:38:4e:ec:d0:31:ef:
                    6f:d6:0f:a3:94:2d:24:5c:1f:e5:d3:c8:3d:69:82:
                    7e:1c:95:24:c4:5f:ba:37:86:42:dd:5e:0a:55:09:
                    8b:23:ee:93:26:70:5b:75:f7:93:8d:ed:17:d9:3b:
                    92:2e:37:e8:e4:7c:b5:df:7c:1b:5f:62:14:72:8e:
                    1b:ce:cf:c6:f5:a0:f5:5e:c2:9e:ba:96:26:b5:1f:
                    3d:56:b6:6d:62:c8:0b:ad:17:35:9a:ca:97:a4:cc:
                    a3:0b:7b:31:17:ce:a5:43:36:37:a1:4e:7e:61:6b:
                    93:c9:01:a7:5a:b4:08:39:3d:9d:6b:26:5e:59:32:
                    d9:c6:56:ca:0b:90:6a:18:f7:ee:2e:49:9d:b2:fb:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:29:6D:C7:F9:71:6A:5A:66:7A:33:50:3C:77:2C:B6:23:DA:66
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:79:f7:ac:cb:55:f7:77:08:e2:d3:fc:0f:33:bf:16:b2:
         3e:d2:d3:35:1b:bf:c4:5b:07:fb:3f:87:b8:04:98:06:33:00:
         f1:25:7f:fc:b7:f8:b4:ab:b5:6b:87:b8:f5:8f:da:87:7f:05:
         3f:51:18:8b:ea:66:c8:b0:6d:39:68:ca:ad:21:32:10:74:bc:
         0a:61:fc:3f:79:04:e2:7f:19:f4:be:65:18:1f:d1:2d:b8:7e:
         9c:f5:7f:f0:75:d9:62:9a:6e:bc:a6:b3:66:0f:92:7c:72:f0:
         b9:a3:f0:20:34:a0:e8:fc:6b:df:7b:aa:08:2a:ce:4d:79:72:
         6d:5b:92:48:77:19:89:21:18:95:71:11:45:99:55:7c:b6:4b:
         68:01:06:28:b8:80:e0:e7:d7:ee:b2:3e:f9:ad:7e:6d:6c:58:
         87:a3:a9:59:0c:98:5e:01:73:c3:ef:18:e5:95:48:d9:f5:cb:
         8e:77:75:12:01:a6:b2:f8:bb:c4:eb:fe:67:ef:17:4e:a2:00:
         20:75:f3:5d:6b:cf:c3:49:4a:3e:f7:81:74:e1:96:64:ab:b8:
         27:35:fd:d8:cb:1d:27:88:ce:a3:1b:47:15:5f:45:8f:ca:c6:
         28:f8:10:6b:3f:77:db:6c:83:91:2f:d4:14:ef:b6:b8:a1:78:
         b1:0b:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:24 2025 by rpki-client