Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File:                     tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier:          fGEqnNBqqiL1qQuH8/WASe6/qaCSbsQeC+8D3w+vdtc=
Subject key identifier:   DF:53:D1:2C:E1:FB:29:8B:8F:6E:0B:85:43:7C:73:76:97:FE:73:35
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer:       /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial:       01976EBE386661B637E7174503313F82B831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 14:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:49 +0000
Files and hashes:         1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
                          2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
                          3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
                          4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: qBJ+fZKQe5+JC6GvcSLnx1Pe0lFSatoRnZ5BK2gdhAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:38:66:61:b6:37:e7:17:45:03:31:3f:82:b8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
        Validity
            Not Before: Jun 14 14:00:49 2025 GMT
            Not After : Jun 15 14:00:49 2025 GMT
        Subject: CN=df53d12ce1fb298b8f6e0b85437c737697fe7335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:32:d7:ce:88:c5:27:8d:94:6c:20:f6:fc:
                    de:4b:3f:af:8c:c2:bd:9d:fc:7c:05:16:d1:c2:cd:
                    1e:14:98:d7:17:85:93:b5:bf:ff:f9:db:1a:48:ca:
                    8d:59:de:56:8b:c2:1f:e6:94:65:00:87:fc:80:67:
                    34:52:e9:c0:70:c1:e3:1f:f3:3e:7c:bb:be:32:2c:
                    ff:00:58:69:70:a9:fd:8c:71:0d:ad:a6:74:71:78:
                    b9:ab:a3:b8:4a:5a:99:f7:e4:ff:7d:88:9f:bb:cd:
                    af:e7:0a:69:39:09:8d:b5:c6:94:e3:38:12:65:85:
                    5b:57:27:da:09:8e:04:cd:4c:f3:7b:49:cf:52:07:
                    1b:ec:6d:89:ac:52:ba:d7:c8:10:96:4b:89:7c:9d:
                    4f:41:11:a2:0a:b9:a0:ec:40:12:55:7b:28:4e:74:
                    d8:b7:d4:37:14:81:d8:b8:51:f8:99:6d:4e:2e:d2:
                    23:b9:86:9f:53:96:de:06:54:67:44:e0:eb:17:a1:
                    d7:26:c9:62:e0:55:b0:16:9a:aa:cd:84:b7:4f:63:
                    f6:32:8f:5c:e0:3a:5b:6c:1c:96:7d:fa:5d:71:bd:
                    53:33:53:57:39:28:9d:06:07:a7:c0:39:0b:1c:35:
                    f4:2c:8e:de:c1:2a:70:69:0e:28:05:56:4f:0b:6e:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:D1:2C:E1:FB:29:8B:8F:6E:0B:85:43:7C:73:76:97:FE:73:35
            X509v3 Authority Key Identifier:
                keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:46:19:0d:ac:1c:48:b7:c8:43:b2:33:e0:a8:37:1b:67:
         5d:34:8f:80:19:57:a2:79:93:ba:f4:49:94:97:29:71:77:4d:
         4f:94:89:80:48:02:1b:e6:8e:20:e7:09:c4:b4:73:1a:49:91:
         16:da:ec:c2:2f:cc:9a:91:95:51:df:ae:37:19:19:0c:22:70:
         13:16:60:98:3a:41:a7:28:1e:4e:ff:13:74:be:d9:f7:2e:27:
         5b:8d:ee:8b:a5:9c:e3:66:d9:08:94:dd:09:3f:b2:0a:3d:69:
         c8:83:1d:e7:f1:86:ff:5f:be:a9:79:00:03:cb:da:23:1a:10:
         c9:ef:52:86:31:45:6d:05:21:b2:e3:61:5e:46:ea:36:21:7a:
         d2:4b:7f:fc:63:2d:49:bb:7e:a6:36:b8:bf:da:e4:87:03:9b:
         22:48:8e:e8:12:04:66:16:fb:f5:f2:ae:00:58:75:65:87:65:
         e5:fb:94:5d:9d:ba:b1:65:a7:6b:d5:79:9f:25:46:c3:61:12:
         10:12:99:91:86:a0:f9:5b:56:b1:6e:58:86:20:32:bc:20:26:
         9b:05:ab:ab:ff:f3:08:1e:ee:77:a1:62:27:8e:30:d5:a6:00:
         86:da:8c:ca:36:eb:e5:de:ae:c8:62:59:87:cc:1a:29:f0:48:
         ba:30:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:52 2025 by rpki-client