Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File:                     tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier:          Uzf2UN/Pu6Wv8Qk/4Zy5CrGt4jzfHCFfy8DmcBwfQ/A=
Subject key identifier:   66:88:BB:03:16:BA:A7:45:7A:DD:5D:27:7F:C3:B6:3C:5C:40:F3:BC
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer:       /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial:       01976E87612306DFF6C81621ED696101D458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 13:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:55 +0000
Files and hashes:         1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
                          2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
                          3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: CMMQ/wNzqnk6S1ivt7RPFKQm0n6b4khFUCbhjC1QI64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:61:23:06:df:f6:c8:16:21:ed:69:61:01:d4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
        Validity
            Not Before: Jun 14 13:00:55 2025 GMT
            Not After : Jun 15 13:00:55 2025 GMT
        Subject: CN=6688bb0316baa7457add5d277fc3b63c5c40f3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:96:f9:1b:80:9e:e9:91:51:a6:f8:4d:0e:
                    a6:a3:cb:90:85:f8:1d:5d:9e:65:76:6c:b2:f5:35:
                    41:f7:5b:e3:4a:92:3c:bc:70:3f:51:de:ad:80:72:
                    3d:60:c8:f4:82:ed:dd:b1:c0:0c:54:63:92:7c:50:
                    37:71:7e:d4:b5:29:06:03:10:85:02:6c:e9:cf:9e:
                    df:62:38:88:85:ea:48:a4:cb:ab:a0:30:31:f0:58:
                    de:05:cb:56:8c:2f:50:54:0e:31:e4:58:8c:54:87:
                    cb:ac:01:23:7b:cf:c0:3b:63:47:b8:59:df:f9:23:
                    0d:29:16:af:73:24:44:7c:b0:ff:4a:14:0c:eb:38:
                    ed:22:4c:cd:ea:4d:f3:87:cd:0c:a8:df:ec:41:c3:
                    cd:ec:fc:a6:c4:ce:97:55:90:8e:5f:4a:f8:6e:c0:
                    4d:f9:8b:c7:fd:83:d2:3d:0b:50:75:35:fc:9e:db:
                    8b:f6:61:b4:21:ce:26:22:79:d6:70:85:c6:45:0b:
                    c8:75:c0:cb:61:20:0c:e7:72:65:c6:ac:5d:12:96:
                    8d:a5:e7:88:cf:b4:bf:3b:e1:18:fc:3e:80:26:81:
                    ed:60:cb:22:e3:67:41:cc:ba:20:7d:53:73:c5:0a:
                    38:05:08:ba:67:71:9a:91:3c:ff:c0:f4:9e:33:f3:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:88:BB:03:16:BA:A7:45:7A:DD:5D:27:7F:C3:B6:3C:5C:40:F3:BC
            X509v3 Authority Key Identifier:
                keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:71:e0:08:77:df:66:9d:32:28:7d:b8:df:c2:21:35:5e:
         c3:7d:33:1c:6b:26:51:ae:9b:e1:de:bd:78:ae:c8:dc:f8:c1:
         08:5f:56:fa:b7:81:1e:44:3a:4b:52:82:ea:d2:17:7b:3e:8d:
         94:5e:ec:14:ee:87:0b:45:d0:f1:0d:cb:1b:22:fa:50:d9:9c:
         eb:60:a1:e5:36:4d:99:02:fc:a9:46:84:84:55:2e:c4:2d:c5:
         08:a5:75:05:1b:8d:59:59:f8:83:89:1a:23:ad:ff:70:5d:d8:
         d1:af:5b:14:6d:f4:7e:16:3c:7b:de:2b:83:5d:fe:00:c5:11:
         db:3c:aa:e7:5d:9b:6d:43:53:cc:f3:d0:25:2e:7f:f9:16:76:
         15:58:ea:4c:d6:b7:87:c8:cf:04:39:89:c9:14:ea:b6:76:8e:
         87:ae:30:37:9f:e4:f9:2f:ac:70:1a:0f:0e:3b:6d:9a:ad:9d:
         c6:1a:ff:86:b9:2b:0c:63:73:10:5d:5a:ed:cd:7f:87:41:3d:
         13:5c:6e:0e:c4:bc:d3:af:b6:b1:d6:66:4b:ac:ac:06:7e:d3:
         28:cf:60:c1:23:75:79:4a:4f:db:5e:1f:63:93:71:86:04:37:
         0c:c1:82:fd:83:72:a1:62:17:52:a2:2c:14:6a:7a:4f:b8:31:
         a2:fe:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:51 2025 by rpki-client