Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          XOqvuRht1xcUUU2NnccqMckvQJOEqIZWnNvxjxS5T5k=
Subject key identifier:   5D:A9:FD:D5:4E:1E:F3:04:96:47:5C:2B:48:84:D9:C0:51:FE:FD:ED
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       0198481BADFE7F587AC33EC7D3C03C066F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1588
Signing time:             Sat 26 Jul 2025 19:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:30 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=)
                          3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: tGMIeXmmQzhyDStN21K0gJ9afeBRzLGXHe4MvnhYvOw=)
                          4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:ad:fe:7f:58:7a:c3:3e:c7:d3:c0:3c:06:6f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Jul 26 19:00:30 2025 GMT
            Not After : Jul 27 19:00:30 2025 GMT
        Subject: CN=5da9fdd54e1ef30496475c2b4884d9c051fefded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:22:d3:54:58:fc:7e:ac:4b:b6:90:3b:d2:
                    84:e5:5c:07:f4:cd:88:6e:10:7f:6f:8b:a6:33:2f:
                    ed:12:83:d7:2c:98:98:9c:de:c8:ae:7a:d1:69:9a:
                    37:e6:6e:3a:ad:0c:f6:0e:ea:17:ac:68:d3:87:7c:
                    07:5e:a2:bb:97:ba:10:fc:55:77:c1:97:44:e5:23:
                    b4:17:dc:a5:ff:24:40:79:75:2c:92:b9:1c:e7:0e:
                    50:a3:e0:3e:9d:86:f5:67:b1:4e:79:8b:18:8f:e5:
                    b4:84:aa:0d:dc:20:eb:71:ce:70:4e:16:e5:76:e2:
                    03:20:26:31:a4:c3:3a:68:5f:73:36:06:2e:65:2f:
                    fd:64:d0:02:e5:45:bd:58:64:98:8f:1d:e0:d6:4b:
                    d3:d7:52:6b:cf:91:4b:d8:c3:90:21:8a:e2:09:a9:
                    20:fa:a0:21:31:f4:60:26:29:25:24:3b:5e:b9:e4:
                    b5:17:4e:08:95:27:af:d4:db:63:e3:a2:f4:aa:65:
                    79:b8:be:19:26:d7:2c:e4:fa:b3:6b:1f:f6:9a:65:
                    03:8a:13:25:f8:66:69:7b:15:4b:3f:7b:3d:08:ad:
                    e2:04:e2:9f:fb:28:74:3b:7f:f1:6d:90:42:8a:46:
                    97:20:84:9a:4c:9c:62:04:01:28:9b:ae:aa:0d:f5:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A9:FD:D5:4E:1E:F3:04:96:47:5C:2B:48:84:D9:C0:51:FE:FD:ED
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:56:cd:91:cd:f9:c2:41:44:77:12:5e:97:a7:47:02:07:
         a7:ad:9b:b5:fb:1c:92:ff:66:f9:fc:6b:0e:5e:8d:e7:74:13:
         98:0f:92:b6:ab:c1:43:aa:fe:42:13:0f:67:34:4e:06:3d:6c:
         9d:e2:ef:d6:c6:0d:2c:40:fc:a3:66:47:74:aa:04:20:20:ea:
         df:87:29:bc:07:3c:f5:01:d3:c2:ce:a8:bf:9c:f6:25:5a:ec:
         f5:b9:49:6e:e5:b0:7f:cd:9a:9f:16:5f:25:02:07:d9:95:b2:
         d9:0f:5c:ab:f7:bb:f5:87:8f:7a:55:6b:ea:14:cd:bd:a5:42:
         eb:bc:bc:a9:df:13:b6:cc:84:2a:cb:16:4b:e9:78:58:5a:a2:
         ed:6f:8c:7d:81:51:ca:41:81:53:26:52:8e:d8:97:48:bc:87:
         69:67:cf:9c:d7:67:e2:b5:82:bb:dd:94:2b:2e:d8:7c:b4:b7:
         6c:98:7c:f8:43:e1:5a:c2:49:c6:44:ab:5e:47:a9:87:c2:09:
         63:6a:6d:16:dd:f0:ca:bf:47:61:f9:54:37:a5:db:88:2f:5c:
         2c:57:71:c5:62:ba:0e:7e:8e:c6:94:24:0a:79:5b:6b:72:85:
         bd:97:b9:c2:85:eb:02:49:9e:79:0b:c9:fd:4f:3d:dc:fa:ad:
         82:ec:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:25 2025 by rpki-client