Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          eWGpOw+2Tg+RIPs2J3WiLnOnmA7RgSOF2QKldw3Ep64=
Subject key identifier:   EC:16:92:67:4D:F4:91:8D:E1:25:D0:BE:1C:56:5A:A0:22:20:9F:C8
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       01976C990BBCB1BAB7CEA9459F8D659993EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 04:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:58 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 3PEp257XksOO0VvIon+VqtGXoatCdFZ9YESvaI7q7Jc=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:0b:bc:b1:ba:b7:ce:a9:45:9f:8d:65:99:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Jun 14 04:00:58 2025 GMT
            Not After : Jun 15 04:00:58 2025 GMT
        Subject: CN=ec1692674df4918de125d0be1c565aa022209fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:5b:5c:c7:eb:c0:91:a0:f4:e0:0b:89:44:
                    95:2d:4a:8d:f0:ee:ef:24:0f:f1:5a:e3:b9:57:bc:
                    5a:16:1d:f5:ba:4c:ab:b6:97:e3:2e:34:11:f5:1b:
                    a0:44:d8:00:c5:34:c0:7c:58:7e:f7:6f:23:6e:60:
                    a4:6e:80:41:f6:c2:e5:b4:b3:e3:60:73:dc:ac:b2:
                    87:c9:5f:ef:11:af:aa:af:3b:9a:a5:47:b6:30:c4:
                    60:c1:53:18:57:49:9d:09:a8:b4:99:ed:ac:2f:73:
                    d1:ab:5e:a5:81:f3:f6:a4:d8:bf:33:34:7d:5d:c8:
                    84:1a:f2:14:ec:b3:5b:71:9c:17:00:1e:58:cb:d6:
                    1a:fc:09:42:61:66:93:e5:9a:de:2c:57:f7:ea:46:
                    64:de:c8:52:50:32:d1:89:d1:ef:72:88:b9:e3:99:
                    72:87:0f:30:a6:a3:9e:a5:48:45:6c:b7:63:77:ca:
                    d7:08:87:03:a3:40:46:6c:47:a4:c3:ff:b5:a5:62:
                    f3:49:8c:c6:cf:3c:54:ba:c4:33:02:a2:00:32:c5:
                    3e:12:c1:fe:7c:2c:6b:bc:3e:b9:ce:7c:66:94:84:
                    42:6a:0b:9f:61:be:e5:63:7b:78:eb:70:bb:06:87:
                    ae:c0:ff:9c:0a:d1:46:d4:fe:5c:da:88:db:ef:ac:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:92:67:4D:F4:91:8D:E1:25:D0:BE:1C:56:5A:A0:22:20:9F:C8
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:0a:69:a3:48:b9:65:d6:54:20:a2:e1:6e:90:ac:d8:8e:
         4a:7d:c9:59:f5:d3:f7:aa:47:0b:40:fc:e0:87:58:5c:69:c6:
         c7:84:95:02:d5:d0:e4:0a:06:94:d1:cc:c7:10:69:47:e5:36:
         ac:60:ef:38:aa:4e:b9:d9:5a:5a:66:fe:2f:40:89:98:32:bc:
         0f:0c:4d:85:f9:c2:33:51:a9:db:f4:1f:29:63:71:84:0c:71:
         79:68:7b:77:7a:12:2a:99:6b:b2:16:f8:63:1a:eb:25:b4:dc:
         1a:ff:92:34:15:a2:7e:fe:c6:03:cd:fc:fa:91:b7:24:a3:51:
         19:4b:54:c1:1c:a0:10:af:69:05:ae:21:73:1b:76:e0:eb:e5:
         0a:57:79:2f:e2:58:ff:bc:a8:34:96:7e:aa:99:2c:46:5c:82:
         95:4c:f7:c7:0e:84:f5:d5:9e:83:04:91:7b:fa:cc:ba:13:38:
         77:ed:fb:f5:fd:1d:f5:76:cf:07:d9:e2:2b:5c:76:64:f8:e2:
         ff:21:67:ad:4d:28:c0:f7:24:a2:5b:8b:ec:81:e4:71:d0:a7:
         d6:72:bf:bc:45:7d:b1:87:9e:df:a1:34:64:6c:79:2b:58:9b:
         b5:47:6c:a1:2a:d4:7c:41:52:9e:56:7f:b4:22:16:0a:11:09:
         d9:05:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:22:35 2025 by rpki-client