Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          p/OAHcEpkVBrxClQ/9WuebUI6e4Fw1cxuBRgBKR71r4=
Subject key identifier:   3B:BC:23:47:3E:35:8C:F6:33:FC:A0:E3:FB:BF:10:87:79:8F:54:01
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01976C624ED8D4259056192B8D4951195744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 03:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:11 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: QFLgiPiJgT6N/gkHXyQEFStNcgkvEWbLNfyzrSLOWxQ=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:4e:d8:d4:25:90:56:19:2b:8d:49:51:19:57:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Jun 14 03:01:11 2025 GMT
            Not After : Jun 15 03:01:11 2025 GMT
        Subject: CN=3bbc23473e358cf633fca0e3fbbf1087798f5401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:8f:fb:90:e3:8f:ae:18:1d:59:6c:17:d8:
                    68:f2:88:1a:cc:1a:2b:5d:bb:ba:0d:81:9e:3b:97:
                    bd:15:38:ec:04:da:27:99:4b:10:5b:2e:11:e5:66:
                    78:ca:54:24:1e:e6:e5:3c:9a:95:13:a2:2f:c4:23:
                    39:5a:fb:5c:74:24:b5:fe:9d:79:5c:73:57:ec:19:
                    cb:1e:a8:cd:99:39:c0:f0:b2:d7:e1:a3:9d:39:0f:
                    e2:1c:d3:b6:92:1e:fe:8c:73:9d:ba:5b:bd:60:99:
                    36:95:f4:a5:12:20:b6:99:50:d0:83:9d:33:46:91:
                    9c:73:69:9d:2c:a9:f8:2b:3d:c9:90:44:a7:96:8e:
                    ef:41:9b:a7:f4:1f:54:79:7f:0e:16:56:94:f1:61:
                    99:db:78:22:68:a4:68:86:03:88:cf:06:f5:27:c4:
                    cc:54:62:f1:71:fe:ff:b8:04:67:1b:88:cd:4f:51:
                    3c:d1:d4:94:27:be:f1:a2:73:3f:70:d7:7c:b0:3b:
                    34:f2:96:25:42:fe:af:31:09:93:8a:18:db:56:98:
                    6c:9d:69:8f:0b:39:17:8d:55:69:cb:0d:11:a2:f7:
                    a2:6f:7d:b3:b3:e2:61:dc:76:6f:7a:49:27:66:82:
                    03:59:57:25:6e:75:18:13:75:3d:e9:ed:db:3c:7d:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:23:47:3E:35:8C:F6:33:FC:A0:E3:FB:BF:10:87:79:8F:54:01
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:e0:c2:11:9e:cc:54:53:1b:55:97:6b:59:b0:b8:3d:2b:
         61:08:c6:34:84:ad:fe:8c:fc:5b:c6:d5:12:0c:09:2d:d8:a9:
         89:c5:49:7e:fe:a3:c4:e1:0d:89:10:49:19:8d:63:6f:6a:40:
         d8:5e:b5:08:64:89:e0:f9:69:04:23:79:0f:18:b7:d0:fd:8a:
         ee:8d:61:4a:16:62:f8:74:57:ad:c3:f0:9c:28:5a:a5:29:89:
         26:86:7e:cf:81:a1:74:50:c4:89:61:c3:eb:20:d4:ef:b8:f2:
         35:ad:9c:f5:9e:15:6b:f4:54:84:54:78:20:fc:3a:78:28:9c:
         f3:3f:e2:e9:51:3f:a6:f4:2c:37:a4:32:21:76:2a:5f:cf:5b:
         f7:fd:21:9e:40:2a:b7:61:da:9a:18:a4:84:37:32:0a:eb:bd:
         80:c4:95:b0:12:39:44:48:9f:10:10:95:ac:4a:0d:5b:26:0b:
         00:a3:a6:de:57:3a:bd:35:6a:5d:df:3c:06:38:58:74:37:0c:
         60:4d:55:cd:3d:98:78:24:12:a0:26:37:99:6f:1d:f2:5b:bb:
         8f:9d:ad:2c:f2:44:06:66:62:69:08:8f:52:c1:92:a8:04:84:
         b2:31:1b:94:62:0a:9e:9f:60:54:54:54:11:9b:67:15:bf:06:
         2d:86:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:16 2025 by rpki-client