Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          NHUxnlbfNWhQA/SxXb4JxwhxnQ8WNk0nVI8tyxB5vLs=
Subject key identifier:   17:00:DD:95:FF:DD:98:B6:FB:39:F5:3F:6D:D8:4A:0F:01:D0:4A:CB
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       019777C194BC4A093AF26781E1E7F2C698D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 08:01:04 +0000
Manifest this update:     Mon 16 Jun 2025 08:01:04 +0000
Manifest next update:     Tue 17 Jun 2025 08:01:04 +0000
Files and hashes:         1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: uuOb/mAYAXnh04TFjeHSW13vNLoka0e8nbkLqqMYrSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:94:bc:4a:09:3a:f2:67:81:e1:e7:f2:c6:98:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Jun 16 08:01:04 2025 GMT
            Not After : Jun 17 08:01:04 2025 GMT
        Subject: CN=1700dd95ffdd98b6fb39f53f6dd84a0f01d04acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:0e:49:72:e8:85:1d:bd:5b:3e:3d:0f:2e:
                    90:92:9f:4e:51:dc:d1:68:80:3b:70:88:75:f4:19:
                    ac:a5:6e:e2:70:83:ae:10:fe:a8:34:c7:3d:5b:8f:
                    8b:37:a0:fc:06:0d:02:af:bd:53:16:f1:ff:52:02:
                    b8:81:0c:15:bd:f0:79:65:84:03:dd:96:ca:9b:fa:
                    93:bb:a3:9f:84:da:73:da:d6:ff:e7:bf:a1:2f:95:
                    0c:ef:90:28:ba:94:aa:e5:35:ad:1d:f0:69:74:fa:
                    17:79:35:e0:26:3b:99:1a:d7:1b:0f:19:0a:06:d1:
                    92:20:cd:4e:69:60:30:32:01:7f:76:e2:a3:66:1f:
                    27:e9:59:6c:8d:2f:93:55:94:8f:81:0f:86:35:38:
                    6d:3b:a7:59:5b:0c:27:18:55:60:d9:14:69:0c:03:
                    a4:02:0f:e2:9b:1e:71:3d:05:8e:74:88:f6:aa:39:
                    c6:f6:58:06:6d:a8:8f:f0:ba:23:4e:0d:ab:eb:58:
                    c9:5c:60:94:c0:b5:03:b3:1f:91:40:cc:91:5d:7e:
                    09:2e:35:9c:63:b0:f1:78:e7:d7:73:2c:4b:53:bf:
                    ca:94:6d:4b:ff:5e:52:ef:9a:64:c6:9a:f1:b5:d5:
                    c8:7c:6a:91:81:6b:93:46:93:fa:a6:36:ad:97:24:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:DD:95:FF:DD:98:B6:FB:39:F5:3F:6D:D8:4A:0F:01:D0:4A:CB
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:73:b0:1b:ed:7c:41:06:52:bf:ad:5a:9f:a7:95:97:16:2b:
         1d:3a:88:76:27:48:ee:9d:8d:42:68:f3:2c:27:64:84:e0:53:
         54:12:72:60:27:be:f3:c1:6c:27:b3:70:a1:17:e6:71:51:fe:
         bd:4f:b7:ed:43:69:af:8f:90:ac:03:b5:a1:b2:be:e4:37:92:
         01:eb:0c:ba:dd:44:4f:bb:a6:6d:46:7c:f1:53:96:da:f1:63:
         ea:57:b1:5a:d9:55:6a:30:d3:20:f8:85:af:d7:75:3d:0d:36:
         ef:c9:96:09:a3:4f:fa:4a:99:bf:4a:c3:71:62:b2:92:c3:2d:
         8f:2a:ae:58:9b:8d:67:c5:ab:62:ee:39:fa:19:c8:2d:76:86:
         68:43:8d:a6:e4:50:14:f6:55:86:b4:e8:4f:4b:e1:8f:dc:85:
         2e:bb:d6:c4:4c:40:b5:eb:69:c8:93:63:09:4e:03:91:20:6c:
         44:f2:cb:7e:e7:8c:2a:13:46:da:25:26:f8:fc:c0:12:e0:2f:
         ec:21:0b:ee:68:47:f0:48:66:05:eb:5b:b4:be:1b:35:65:1d:
         4c:ec:fc:c9:9b:85:4a:fb:b9:5a:39:8b:c9:58:e3:0c:49:c1:
         36:5e:47:06:1d:9e:24:8a:22:1e:f6:86:ca:ae:9a:2c:fa:5c:
         64:b1:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:13:12 2025 by rpki-client