Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          1AATmNImoCb9s4kpfS9OJIx5KmX9yfZwO1X6aOudVIw=
Subject key identifier:   C8:83:AE:37:05:6B:45:4A:0B:B9:47:FD:27:74:60:66:A7:8E:FA:31
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       01976C621F1628314EEF79ECACD717F0017E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 03:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:59 +0000
Files and hashes:         1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
                          2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: slOJ6jBPORgYCr4r8yJnHhY0K6XcbxSr8MdS60Bn8GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:1f:16:28:31:4e:ef:79:ec:ac:d7:17:f0:01:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: Jun 14 03:00:59 2025 GMT
            Not After : Jun 15 03:00:59 2025 GMT
        Subject: CN=c883ae37056b454a0bb947fd27746066a78efa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:d0:b5:13:0b:04:33:9b:ff:fb:cf:2a:9f:
                    29:9b:c5:17:c5:85:94:eb:57:cb:73:55:65:c8:d8:
                    0a:a7:33:c4:5b:6c:e1:3e:3a:71:9a:0c:b9:a2:a4:
                    4b:8b:b2:f9:f8:a7:5a:05:6d:c4:af:4f:0b:d6:7d:
                    b9:05:23:01:59:e7:56:db:dd:93:f4:27:29:e9:0e:
                    68:2e:7a:48:ad:5f:77:e5:20:5a:e4:94:15:21:cf:
                    0b:fb:14:b8:c3:89:f7:13:a3:34:2a:c6:cc:80:ef:
                    36:a9:be:bd:ff:aa:d2:b4:27:18:4a:78:08:9e:93:
                    5d:2a:97:87:4a:6d:13:79:07:d9:7d:58:7f:f9:ca:
                    a9:65:de:b7:f6:6c:c6:60:a1:0d:37:6d:56:15:c8:
                    0e:b1:4e:d4:5d:66:af:69:a3:5f:38:6d:58:28:ce:
                    a6:d5:c4:5b:5e:2d:d8:a0:f0:dd:5b:c0:aa:f2:92:
                    d1:63:42:bd:a6:cc:b9:a9:69:88:54:05:88:10:ea:
                    53:be:cf:ed:0d:15:ff:42:2a:57:3d:00:77:1d:00:
                    42:2c:8b:9e:89:93:5c:ea:f2:40:de:7d:13:69:38:
                    7b:fb:90:96:58:7d:ad:bc:fe:4c:26:8a:2b:e4:b4:
                    1e:ac:d8:19:85:03:87:76:0f:a8:e1:d6:0a:be:97:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:AE:37:05:6B:45:4A:0B:B9:47:FD:27:74:60:66:A7:8E:FA:31
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:a2:37:c6:55:07:84:78:16:bc:8a:0a:61:d6:d4:06:aa:
         a6:42:e0:1d:eb:8b:02:dc:17:7f:8f:28:fb:92:e8:f2:6e:26:
         dd:78:21:97:aa:5d:40:89:14:b8:e1:c5:82:24:d3:2b:1a:d1:
         9b:13:4f:bf:be:cf:09:c7:e4:04:67:91:06:9e:90:05:f3:e0:
         47:cd:26:2c:6d:3d:00:54:59:44:66:69:5e:46:b9:13:3d:39:
         2a:19:c5:a2:47:90:5a:d1:16:a0:4f:06:c4:9e:23:e1:84:23:
         94:95:e8:29:26:b2:f2:39:89:cf:ec:34:7f:e0:d8:87:46:65:
         fc:d2:d6:26:2c:c8:49:b1:1f:18:fb:ef:18:8c:b4:0a:a7:53:
         4a:8f:4f:27:54:07:7f:fa:3f:90:29:dd:aa:d4:fa:68:25:f3:
         f1:0a:d6:17:d7:8f:b9:05:ee:82:3d:0a:eb:8b:7e:b5:50:31:
         a4:fe:50:34:22:4c:73:c3:f7:bd:41:6a:93:13:0c:62:f7:5b:
         8a:2e:1d:71:6f:7f:1f:5b:82:5b:82:9d:d0:4b:5b:3f:fd:d9:
         17:d7:02:81:5b:32:57:82:8b:10:df:37:33:26:4f:3f:52:d8:
         43:5e:29:bd:63:f2:fc:d4:7d:c5:71:ab:5f:91:39:d7:4a:0a:
         89:3e:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:31 2025 by rpki-client