Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File:                     urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier:          R5geR5Twzfn7+/+CJ8dJpTztSLk/KjgB8eXw1WOPNoI=
Subject key identifier:   6E:F3:D8:24:D8:D1:E0:58:5C:71:12:26:2E:1E:0A:E9:3C:02:DE:D6
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer:       /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial:       01976C6255CBF36D84C2832899EDF8B151BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 03:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:13 +0000
Files and hashes:         1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
                          2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
                          3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: dgubcJGC8swBfcI9yKV4Me8q9AAd1MYH1v1zPib7Tgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:55:cb:f3:6d:84:c2:83:28:99:ed:f8:b1:51:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
        Validity
            Not Before: Jun 14 03:01:13 2025 GMT
            Not After : Jun 15 03:01:13 2025 GMT
        Subject: CN=6ef3d824d8d1e0585c7112262e1e0ae93c02ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:ca:8c:85:47:25:86:21:25:dd:63:f8:17:
                    9f:95:0d:f3:f8:76:09:6b:cf:98:ef:8c:8f:be:e5:
                    12:64:22:1f:9c:3f:bb:b2:76:01:73:fb:2e:65:9a:
                    2e:e2:c9:9c:78:8b:e2:10:fd:fa:dd:88:a5:16:8f:
                    ee:d4:05:e8:70:f2:fb:2a:e1:36:d3:60:57:b0:6f:
                    96:72:84:38:34:07:a5:99:b8:b5:9d:96:0c:e1:e0:
                    22:23:3e:45:1e:f2:03:4d:7f:ac:41:6b:8f:e0:6e:
                    c9:1b:62:90:83:64:8e:ad:45:1b:a5:52:63:7f:6d:
                    2e:07:a0:9c:c8:03:53:86:00:f3:5a:69:d7:7b:38:
                    b9:76:55:1c:d2:80:aa:71:a2:b8:4d:c0:1e:15:74:
                    9f:49:52:b6:de:36:11:65:0e:36:65:32:eb:6d:1a:
                    ef:c7:90:99:e7:fc:de:18:12:49:d2:69:a0:3f:9b:
                    b7:ef:d3:3d:9a:da:64:16:2e:c1:32:77:ce:1a:02:
                    eb:fc:81:cd:42:e2:19:30:d2:4d:f3:cd:69:32:13:
                    ee:7d:64:97:63:05:be:0b:1c:7d:e1:74:90:2a:81:
                    1d:4b:cd:73:10:0e:1a:3f:81:8f:7f:47:a3:a4:8f:
                    75:66:87:5a:3c:3e:ab:0a:35:50:78:e2:2b:29:52:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F3:D8:24:D8:D1:E0:58:5C:71:12:26:2E:1E:0A:E9:3C:02:DE:D6
            X509v3 Authority Key Identifier:
                keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:35:58:a7:7e:b3:ba:7b:f9:41:d3:11:ce:51:55:30:3b:49:
         08:f0:8d:f6:da:2d:8f:7d:0d:5c:2f:c6:6d:cf:12:26:24:37:
         4f:eb:a7:cd:28:6d:78:39:bc:c1:8b:e2:5b:4b:39:99:a0:f5:
         5e:96:a3:a9:11:cf:0d:fb:5f:3c:dd:ae:ff:0e:4a:b6:07:e4:
         5a:87:09:09:d4:ab:14:3e:c9:9b:c5:6a:c5:ff:73:bc:55:8d:
         27:7c:06:ed:c8:87:5d:18:b3:1b:71:0a:82:de:07:e5:ac:07:
         d9:ad:5e:84:2e:f2:fa:85:18:a2:38:80:03:ac:4f:6d:7d:ea:
         e7:de:bc:70:2d:df:94:14:13:e4:89:59:53:69:c0:5d:8c:bf:
         e8:aa:9a:61:e6:27:64:62:97:0b:87:52:68:a0:e4:76:5a:3b:
         32:da:cb:e2:6c:1c:77:20:05:7d:a0:94:e5:9a:b7:b3:86:f6:
         3f:35:c7:61:73:56:aa:7e:15:aa:17:5c:0d:52:76:26:f8:c7:
         d2:20:f4:a6:cc:ec:fb:fa:c4:d7:8a:18:be:e0:1b:df:e6:d5:
         b9:63:82:95:8a:88:21:0b:f4:2c:71:11:2e:99:ca:8b:a5:07:
         6d:5b:2c:c5:e7:79:3a:e3:5c:31:64:71:b9:7d:13:b0:1b:6d:
         c8:4c:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:33 2025 by rpki-client