Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File:                     e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier:          9AkF0Q9t3zpBh4iKnMjc6cwDU7KmJdzzhMS+5fDhtZs=
Subject key identifier:   43:F3:57:DE:CF:E6:AA:D9:48:18:1C:88:17:6A:E5:EF:A6:7D:AF:8F
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer:       /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial:       01976EF55403FEC35801E32E046A84C006BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 15:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 15:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 15:01:00 +0000
Files and hashes:         1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=)
                          2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: Yx7EWPvDpOJ8S3GweBX3PCdOWgwUYZnIcfYF1WJ38cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:54:03:fe:c3:58:01:e3:2e:04:6a:84:c0:06:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Validity
            Not Before: Jun 14 15:01:00 2025 GMT
            Not After : Jun 15 15:01:00 2025 GMT
        Subject: CN=43f357decfe6aad948181c88176ae5efa67daf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:d7:a5:71:c2:8b:77:71:b2:9c:bd:3c:bf:
                    28:9e:4e:c4:0d:ec:88:95:ad:72:bd:d9:3f:d3:78:
                    ec:2f:e5:dc:9d:40:79:c7:b3:58:4a:a1:69:1c:d5:
                    f1:21:8e:c5:1b:fb:e1:6b:9a:7c:89:23:74:e6:cf:
                    03:23:46:58:fe:ed:e4:6d:39:be:56:a6:01:42:e1:
                    3c:52:a5:fc:f6:64:8c:ea:ff:ee:33:e5:5a:58:22:
                    11:7f:71:9f:fa:60:5a:36:96:07:34:45:f9:25:30:
                    e7:98:26:fc:6e:b1:15:a8:2f:a3:1b:45:f5:fc:d0:
                    94:0f:c5:19:a7:c7:31:1d:95:85:0a:76:5b:7b:00:
                    07:50:09:6b:f8:65:54:77:f3:4f:07:6d:29:83:ea:
                    fd:d7:07:25:b8:6a:67:26:17:b9:d9:dc:55:c2:17:
                    a1:53:22:e8:62:a4:1e:29:97:4c:f1:64:d5:6f:5d:
                    6f:35:a5:a4:7e:95:6f:44:a2:a7:ac:31:2f:72:bd:
                    17:b5:db:27:42:b1:32:e2:44:b2:e0:19:87:18:1f:
                    85:f1:45:cc:9a:23:09:2b:fa:76:75:23:2e:75:7e:
                    b6:d5:f4:b5:f8:b8:e1:f5:bf:8b:ed:6b:60:40:34:
                    f7:89:e4:12:79:63:4e:b6:0c:58:8d:ee:39:bc:29:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:57:DE:CF:E6:AA:D9:48:18:1C:88:17:6A:E5:EF:A6:7D:AF:8F
            X509v3 Authority Key Identifier:
                keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:f2:19:fe:3d:9e:d5:99:5b:15:57:97:35:8c:1e:0c:90:
         72:73:a8:18:a3:21:5f:82:3f:2e:0a:41:66:2e:f4:de:7c:3e:
         51:29:69:56:ef:8c:c6:88:d0:44:76:8b:28:cc:a0:24:c9:ab:
         92:52:a2:74:05:28:33:9d:9b:bf:56:00:bf:bc:b3:71:ae:fa:
         2b:39:d8:e6:e2:86:1f:af:4f:63:25:38:22:7a:94:11:2f:67:
         24:6a:5a:49:4d:ea:2a:fa:0c:b7:16:97:4c:8f:23:33:da:42:
         06:8b:04:3e:22:92:5c:49:d3:23:48:9d:5d:54:66:c9:ce:82:
         aa:92:dc:b0:3d:82:89:54:7d:10:58:69:34:4f:fa:71:31:a3:
         c4:8f:c6:57:20:7c:21:80:10:96:7b:a8:39:cd:9e:64:82:a8:
         a3:ee:7a:d4:83:8a:99:0e:b8:c0:d0:e5:db:33:e3:70:73:ec:
         66:10:2c:f4:6e:af:77:6f:0b:73:30:72:1f:97:53:d1:d5:e0:
         ab:ff:45:84:9a:60:25:58:76:dd:fd:53:04:e0:58:da:45:20:
         ee:ae:ec:92:7b:aa:5b:8a:f9:bc:0f:3e:de:24:15:01:a1:60:
         ed:ae:a4:a7:e7:bc:36:a6:91:a9:91:ca:ee:be:2d:f0:c6:3c:
         a6:41:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:49 2025 by rpki-client