Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File:                     tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier:          alidFsBKnwCtR82wDaTdvIdBC9aFHi386CkfZfzQZt8=
Subject key identifier:   09:A6:30:31:26:10:8F:16:76:B2:68:1E:84:FA:DF:9A:7A:40:EA:E5
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer:       /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial:       01976D74621992CF86411ABC253ACC12D003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 08:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:33 +0000
Files and hashes:         1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
                          2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
                          3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: TPi6rbaKu+uLy85eSFrYvevIFwsZn3ihGWZx3rj1qx8=)
                          4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:62:19:92:cf:86:41:1a:bc:25:3a:cc:12:d0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
        Validity
            Not Before: Jun 14 08:00:33 2025 GMT
            Not After : Jun 15 08:00:33 2025 GMT
        Subject: CN=09a6303126108f1676b2681e84fadf9a7a40eae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:71:2d:0e:e1:90:f4:5f:8b:c5:6d:ad:98:
                    e3:cb:8e:64:de:d0:fb:7a:27:c9:20:d9:4d:57:25:
                    d0:d4:89:cd:13:d9:46:0e:d3:37:75:c1:d3:57:e9:
                    53:aa:9d:f2:79:b0:34:12:fb:b4:25:9b:53:52:2c:
                    f4:18:37:2f:c9:83:9b:40:d5:bd:57:ce:43:3a:0f:
                    e1:68:a1:a9:50:54:de:0c:8c:19:9e:11:c8:a4:c0:
                    58:38:88:58:af:d9:28:1a:81:8a:80:0d:ff:54:f4:
                    12:45:04:77:b4:a4:2d:61:3a:56:9e:95:60:ee:9c:
                    8a:03:d3:19:4d:59:1a:b5:6f:99:d8:00:ea:2c:57:
                    bc:5d:92:e7:13:a1:a0:e4:26:3b:6a:d4:0b:3f:2c:
                    94:74:87:a5:fe:cf:c3:a5:d6:60:23:00:42:06:95:
                    57:73:6b:6f:a0:03:64:cf:54:64:14:98:df:b9:a4:
                    cd:e6:24:1d:9f:11:5d:6b:d5:03:7b:2a:bb:33:87:
                    fe:64:c0:07:51:61:64:6e:fb:48:5c:5d:1e:37:91:
                    ec:70:57:61:07:b3:36:c1:93:b1:84:89:19:07:4b:
                    af:d2:e3:2c:6d:eb:18:04:c4:fa:24:84:b3:f9:13:
                    7f:89:e3:ef:04:97:ce:80:f0:61:b7:0f:aa:b3:e5:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:30:31:26:10:8F:16:76:B2:68:1E:84:FA:DF:9A:7A:40:EA:E5
            X509v3 Authority Key Identifier:
                keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:b7:ab:34:8f:d6:e9:67:bd:95:09:37:31:8d:0f:02:18:
         aa:71:d4:3c:88:fa:69:af:78:a5:8e:99:00:93:7a:4c:f8:24:
         ac:5d:72:51:ab:66:ed:d8:36:ff:ab:22:89:ea:98:3d:a7:5f:
         09:2e:11:17:8f:f9:e4:79:af:31:4d:fd:95:f6:b8:4e:8a:a8:
         3b:16:95:04:76:fc:69:d7:ba:92:8a:5a:a3:b2:b2:71:66:9f:
         31:9e:46:cf:72:b5:fe:fd:a0:f3:6c:c8:dc:b6:76:e1:b7:35:
         39:2f:96:6d:35:2e:c8:e0:73:70:ae:d2:0e:b2:49:93:d0:f8:
         5f:31:85:69:76:a8:6a:c0:a3:b1:0d:9d:d2:3e:8a:8f:66:0c:
         29:3d:4e:eb:ba:00:a2:a3:82:14:b6:bb:98:3f:38:d4:47:e3:
         a8:ab:7b:06:55:43:ab:b4:ac:37:26:f9:ee:8f:f0:fb:fe:83:
         10:ec:8e:31:61:c1:48:d0:8f:07:6c:ac:f4:37:67:3b:66:a8:
         1f:da:63:e3:19:56:3c:bf:55:9d:b3:b0:b1:fc:63:75:97:2f:
         17:49:77:60:32:41:a7:59:87:0a:54:8f:87:98:ff:59:f0:a2:
         09:5d:f3:4b:4e:f3:a7:87:81:25:00:a3:6e:20:03:2c:59:04:
         c7:53:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:45 2025 by rpki-client