Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          DNfmI2YskG2zhFDW4sw5cQMPVtuND795s2Dzr4gCEf0=
Subject key identifier:   D2:CD:C9:C7:74:6E:ED:E6:53:89:E0:BB:D7:8C:34:A8:66:E0:D4:9D
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       01974AE87285696F174ECF13463F1DBD085C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 15:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:37 +0000
Files and hashes:         1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
                          2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
                          3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
                          4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: 8wAo31RSlRi77R41KyHLj+/hhu40Jtvl0ZGmomT+vlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:72:85:69:6f:17:4e:cf:13:46:3f:1d:bd:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jun  7 15:00:37 2025 GMT
            Not After : Jun  8 15:00:37 2025 GMT
        Subject: CN=d2cdc9c7746eede65389e0bbd78c34a866e0d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:e1:3c:fc:46:24:92:6a:df:a8:1b:2b:c2:
                    f8:7b:dd:de:97:62:ba:e2:2e:a1:61:93:69:f3:2c:
                    fd:e6:14:d4:16:cd:bf:59:e4:b7:fc:79:8a:5b:cf:
                    43:14:87:4c:d4:ed:07:c7:f2:47:3e:af:ad:c7:18:
                    9f:e1:89:99:24:34:a7:fd:9a:c2:17:7d:9d:21:8f:
                    d7:84:fb:11:fc:10:1d:c6:56:52:e3:fa:30:e7:d6:
                    90:59:cd:f8:ed:42:e6:84:89:3a:e3:d4:a5:c5:71:
                    12:d6:a8:51:7d:24:59:9c:55:e4:2c:35:6c:75:45:
                    8f:ee:ba:84:5d:27:1a:e7:91:7b:47:7b:bf:4b:b7:
                    94:36:72:60:12:96:87:83:42:11:b9:07:0b:f5:d5:
                    b0:ff:c7:7f:48:e8:e1:6c:1f:92:45:98:9f:ae:ca:
                    74:5c:f2:71:3f:15:f8:f3:40:e9:30:5a:17:e9:4f:
                    d2:71:c8:bd:ab:cb:7f:4a:7c:14:c0:40:6f:2e:a0:
                    0d:c6:b7:d8:af:22:8f:96:aa:38:b6:f3:04:f6:02:
                    74:48:03:17:48:88:8b:8f:ed:45:52:7f:90:cf:1d:
                    92:84:6e:5b:cc:7f:03:16:fa:a1:e8:c1:64:17:58:
                    a1:33:c2:73:c2:aa:24:cf:3f:bd:d3:14:9a:49:d0:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CD:C9:C7:74:6E:ED:E6:53:89:E0:BB:D7:8C:34:A8:66:E0:D4:9D
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:bc:19:96:4d:57:61:df:54:7d:3e:a4:2e:f9:be:9d:b9:
         0d:94:c3:3e:0e:17:22:a4:80:ab:02:f3:0a:9f:6c:15:6d:0b:
         cd:61:b3:4b:fa:33:e0:20:13:a4:ad:9f:3e:8e:92:fe:4f:0b:
         d8:06:e8:0e:d9:39:bc:0f:5c:b5:97:7c:a2:4c:2f:d7:ff:6e:
         d8:2e:97:8b:51:c1:c7:dc:c7:fd:ee:8a:a5:d5:96:20:ad:b9:
         cf:d9:fa:29:3e:0f:09:47:dc:d6:28:7a:4e:af:13:a2:be:6f:
         cb:8b:80:56:8f:ea:6a:4f:29:dc:fe:d1:ee:c3:35:73:74:09:
         da:88:ad:2d:26:2d:67:a9:1b:a8:21:c6:50:94:1f:c9:de:0d:
         22:8e:08:6a:9e:b0:c6:ba:c3:9c:18:e2:36:b6:a8:a3:84:07:
         2b:a9:cb:2f:bc:58:09:37:f2:91:ee:dc:10:1a:df:52:c2:68:
         cb:e1:a5:86:2b:45:78:61:55:f3:f7:99:9b:13:ba:2d:38:cb:
         8f:a3:54:e6:0d:09:5f:8f:7a:b9:a1:d2:dc:bf:33:d5:3b:0a:
         f0:8c:7b:a5:6b:6a:c5:1d:29:c5:c0:4d:5c:29:d1:08:11:6d:
         41:60:ce:5c:66:fd:07:f3:f7:c3:83:7f:38:b9:f8:a0:e4:e0:
         5e:ed:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:26 2025 by rpki-client