Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File:                     OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier:          iwsOCYq4A2c8CBcsZNNJXEgtsFMfcoAh/38GtA7/fIU=
Subject key identifier:   34:7F:45:D7:92:F4:8A:22:62:4D:58:31:61:C2:BE:68:60:E7:7C:CF
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer:       /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial:       0197703EC3E8C48EF2A62CD9F84B5AB1668A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 21:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:50 +0000
Files and hashes:         1: 0xAthu916pMLSA6LAzNdYgS-VXE.roa (hash: AkpmQS7tFUygGvZU+BjPsGOPcILRyQ+KZnPhCEBla9M=)
                          2: 7jmf9BlNbV-fUUbiGDuTogUiPEo.roa (hash: TRehU0GSo0OYFjBdQZcn/8kKiD62iX7mi6y4Y4CJ6lY=)
                          3: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: JWsCIcDAYzkfX8gn54F4Z6tJpbbLSgi1PbIriHovnus=)
                          4: nF8H_i-63xsIqf6G91Sqghmhrmk.roa (hash: seOXQgoakN6MLHPcruniEufkAIlfgGYPYWwRtHa0PF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:c3:e8:c4:8e:f2:a6:2c:d9:f8:4b:5a:b1:66:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
        Validity
            Not Before: Jun 14 21:00:50 2025 GMT
            Not After : Jun 15 21:00:50 2025 GMT
        Subject: CN=347f45d792f48a22624d583161c2be6860e77ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:89:a3:2d:66:cb:55:16:47:5f:07:ab:f0:
                    b3:72:c4:17:f3:3a:13:88:f9:cf:78:e0:c7:25:a0:
                    6b:b7:5f:cf:59:a2:9a:cf:c5:f4:d1:67:32:34:ce:
                    07:e8:e2:df:1f:a2:c5:37:b5:c9:4b:bf:3f:5b:01:
                    7c:13:1f:23:32:80:5b:15:4e:aa:2d:8c:f9:09:e7:
                    65:b4:78:0b:69:c9:23:12:35:85:b1:b3:94:60:0c:
                    0b:ed:e5:02:78:07:02:6a:1b:31:f5:0f:fa:d9:9b:
                    a2:e8:33:c1:75:b3:ad:4d:8b:f9:9c:01:a0:f6:f0:
                    34:4b:00:cf:fe:cb:1f:96:59:03:be:ba:9a:5a:16:
                    2b:5d:74:29:9e:d3:ac:d6:5c:9f:60:f1:9e:54:5d:
                    4c:fc:0c:2c:ef:01:bc:e5:80:18:00:35:73:15:e7:
                    56:56:7b:b9:db:f7:ac:77:7a:44:dc:cc:21:1b:e1:
                    be:10:3b:6a:fa:9a:c7:71:31:9d:98:cc:fd:97:35:
                    6a:28:c1:78:f3:60:54:a5:00:03:70:c0:f5:cd:e7:
                    b3:be:91:b0:24:9c:a8:17:a1:c8:3a:f6:6c:19:2f:
                    aa:85:16:7b:25:27:ab:fd:67:f5:36:2d:b4:46:4c:
                    f7:46:51:25:aa:ae:68:47:af:cc:30:d1:07:71:6e:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:45:D7:92:F4:8A:22:62:4D:58:31:61:C2:BE:68:60:E7:7C:CF
            X509v3 Authority Key Identifier:
                keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:83:8b:94:76:bd:ba:94:6f:a6:93:15:f9:b6:53:b1:9d:
         38:7c:7e:af:89:a2:b5:ff:d6:25:11:6f:83:d4:b7:46:dc:ef:
         36:f6:5d:d1:b2:cf:be:99:c6:bf:c5:bf:b2:dc:94:0e:c1:5a:
         f5:2b:1e:16:2f:5a:61:8d:fe:d3:42:bd:e9:cb:c8:30:df:5c:
         ba:7e:05:ad:a5:ce:8a:cb:26:b7:b1:72:0b:94:65:0d:43:89:
         b3:8f:8f:79:8d:a0:7f:35:47:c5:ae:f6:19:5c:d6:30:0b:63:
         5a:e2:84:d8:24:13:e6:bd:c5:bd:cc:b6:09:a1:67:ed:a5:62:
         cc:54:ac:bf:f5:01:be:a8:f5:94:68:3b:9a:69:5f:de:fe:1e:
         5d:74:3b:b5:56:9b:14:7c:91:e8:89:ed:22:f2:de:00:7f:d4:
         23:59:f7:40:b1:25:6c:e9:2f:54:62:06:1a:d1:09:60:f9:92:
         01:ab:c2:92:08:f0:c2:05:1c:03:15:b6:01:75:37:fb:4f:a8:
         52:92:79:58:bf:e6:f4:60:1b:c9:89:72:1e:99:fe:e3:3c:84:
         30:04:01:9e:97:fd:05:76:61:70:4f:10:0a:43:ae:a0:77:83:
         d1:61:fc:1e:83:74:86:93:23:e0:24:68:7d:c5:9f:92:24:ce:
         ae:d0:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:23 2025 by rpki-client