Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          Q5cCbPq4b1pG5MFFxaEg8KaT46vnLRP7ACnSFpiYi1Y=
Subject key identifier:   14:40:36:37:9E:DD:CA:19:BC:CD:25:FD:3C:ED:F4:FD:90:AC:38:22
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       01976F2CD1435E0A09FC3D54FBF43B426CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          1598
Signing time:             Sat 14 Jun 2025 16:01:37 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:37 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:37 +0000
Files and hashes:         1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
                          2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
                          3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: 4f/OW7aAhrqB7U+U4SDReVuMgRgKRdyIEuZwO9v9aMg=)
                          4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:d1:43:5e:0a:09:fc:3d:54:fb:f4:3b:42:6c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Jun 14 16:01:37 2025 GMT
            Not After : Jun 15 16:01:37 2025 GMT
        Subject: CN=144036379eddca19bccd25fd3cedf4fd90ac3822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:e1:f1:eb:ad:fb:0e:c7:d6:5d:a0:89:6e:
                    a1:7c:85:c2:1a:6c:5d:e8:29:17:c5:52:9d:6f:4d:
                    11:d4:79:1b:d4:92:c7:d2:3b:ea:4e:e2:12:ca:35:
                    2e:05:2e:e7:cb:7c:b8:0a:fe:2a:64:90:9c:fe:11:
                    9a:07:45:76:57:9c:e8:91:c4:d2:a2:a6:83:b9:0b:
                    f6:4a:3e:3a:31:f9:f5:9b:c9:80:fd:42:59:32:57:
                    5c:19:e6:7d:dc:39:35:bb:11:68:78:92:a4:d2:15:
                    f4:5e:0a:1a:59:d8:c4:9e:85:e7:ba:ac:8e:be:cb:
                    4e:cc:c3:a2:4f:49:a3:dc:ce:bc:2b:ed:ec:7e:7a:
                    d4:c2:46:72:f1:32:90:0b:fc:49:96:2e:cf:7c:0d:
                    1b:9e:5e:14:6f:c3:48:d1:b0:d1:ad:96:ab:cd:13:
                    26:74:2d:a3:49:18:95:0c:4c:ff:3c:67:cf:73:0a:
                    22:22:48:ce:5e:fe:b0:1c:55:03:38:52:99:88:31:
                    13:df:64:b7:78:ad:3a:e5:53:78:24:2a:a0:5f:7b:
                    aa:de:08:7c:cb:5b:b1:20:4c:a4:6e:24:12:32:74:
                    db:fc:d6:d4:e5:00:17:4b:70:fa:b5:e7:28:89:e8:
                    74:e0:b0:f6:ad:f9:02:96:4f:e1:08:dc:5c:92:1c:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:36:37:9E:DD:CA:19:BC:CD:25:FD:3C:ED:F4:FD:90:AC:38:22
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:d4:0f:41:67:41:f7:7e:50:1c:3a:dd:4a:cf:5e:21:7a:
         16:b8:d3:b5:e8:37:65:03:bd:f4:8d:9d:76:70:34:e5:af:75:
         41:8b:c5:eb:d5:4a:c8:2f:f7:67:f8:2b:2d:39:ae:17:0d:86:
         bd:6b:ce:62:be:ae:3f:5d:28:3f:cd:ba:cc:7e:b2:67:23:6d:
         cb:a8:dd:fe:cf:be:fc:27:86:c2:7a:24:55:fc:a7:0e:df:97:
         76:3c:c4:08:76:37:c2:3f:6d:76:1e:f2:78:50:7b:29:64:c4:
         46:ff:84:48:bd:7c:f5:0d:59:73:43:54:0c:b4:68:00:31:2d:
         b1:4c:c1:79:f8:9d:10:5e:82:66:c4:86:03:ac:9e:dd:e2:b9:
         4f:b3:f5:9e:85:97:d9:45:8c:38:1d:75:9b:f7:14:9c:cc:55:
         ba:20:6d:0d:c3:00:24:d7:6b:fa:b6:c8:af:39:19:c0:da:4e:
         92:d8:6b:7e:c9:da:66:cf:ee:09:60:22:99:3a:74:3f:f8:09:
         58:1c:06:a8:51:f7:4f:23:80:5a:6a:32:d6:f8:6c:0d:2b:24:
         04:fe:13:b8:e4:95:3c:3f:f8:c6:5d:bb:25:d6:a7:4f:e5:f9:
         5a:a2:a0:e5:1e:7d:50:32:46:21:36:86:c8:66:d6:cc:1d:3b:
         bb:30:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:14 2025 by rpki-client