Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File:                     k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier:          Tt3UrYVd3va8GgPxFYVzDlBB538WPEN49vab1AmuxBM=
Subject key identifier:   56:55:11:B6:1B:C7:5E:3D:7B:7B:89:4A:D5:1B:C0:9A:0E:A6:F4:B8
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer:       /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial:       019752A1D564F58F6E842BD72B82F620ACD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number:          1582
Signing time:             Mon 09 Jun 2025 03:00:26 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:26 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:26 +0000
Files and hashes:         1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
                          2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
                          3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: SghCA9uNN/vlNXtCcCXP7z1ph4H/O43pU5la8wpSyS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a1:d5:64:f5:8f:6e:84:2b:d7:2b:82:f6:20:ac:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
        Validity
            Not Before: Jun  9 03:00:26 2025 GMT
            Not After : Jun 10 03:00:26 2025 GMT
        Subject: CN=565511b61bc75e3d7b7b894ad51bc09a0ea6f4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:8d:69:4b:66:c2:ad:ae:ab:07:15:7d:6e:
                    e4:24:55:da:84:0f:ea:61:2e:e8:b8:c2:cb:1b:fa:
                    5e:84:64:d6:ba:19:d2:f2:e6:e4:60:24:b7:61:d6:
                    2f:17:da:76:62:f7:40:30:64:bc:d4:3f:38:f1:34:
                    0a:e8:01:08:7e:1f:47:14:49:da:c1:e5:08:94:3d:
                    6e:e0:41:57:31:0c:ea:74:36:ed:cf:41:1b:a7:f7:
                    b1:9c:69:15:6d:99:fe:45:00:ba:08:00:cb:3a:7f:
                    76:20:cc:80:e1:22:c6:66:b6:84:b4:16:4b:94:a0:
                    39:8c:0c:0e:e2:51:ea:bd:7f:da:4d:62:9d:eb:a0:
                    ea:c4:eb:bf:9c:6a:63:71:a9:06:d8:61:48:9c:9a:
                    9b:0e:d1:0e:44:85:11:ca:bf:6e:1f:f1:98:92:aa:
                    c5:5d:12:30:1f:88:42:69:1a:a7:50:07:85:8b:7f:
                    b3:be:83:b1:4b:94:de:52:bc:f7:c9:9a:06:2b:0f:
                    52:cd:38:44:9a:ca:46:db:83:eb:69:6e:89:f0:ca:
                    68:80:88:e1:ef:b6:2e:1f:c5:a2:f3:45:53:eb:1d:
                    a3:da:a5:38:93:82:e4:ca:3b:ad:43:1f:21:f7:e0:
                    31:3b:f4:84:12:9b:7e:6b:00:c6:9e:69:2a:b0:7c:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:11:B6:1B:C7:5E:3D:7B:7B:89:4A:D5:1B:C0:9A:0E:A6:F4:B8
            X509v3 Authority Key Identifier:
                keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:7a:cb:a8:04:74:39:50:51:96:fb:d3:64:c6:06:85:66:
         54:5f:36:6e:1b:62:9f:e9:56:67:9c:3e:74:da:a9:0a:ff:04:
         ce:54:99:e0:de:17:d4:68:71:22:5d:bf:6e:ea:59:3b:8a:4b:
         64:7b:34:6e:e9:c7:e7:79:bc:58:f1:e1:1b:09:10:46:e1:d6:
         f1:c8:19:25:32:30:fa:1f:2e:83:fc:c3:85:cc:d8:76:63:e4:
         a6:95:c3:1a:b4:b3:c1:36:c2:b5:92:13:68:e0:f8:73:0d:f3:
         f3:7b:fd:6f:59:70:6c:79:94:0f:ce:f3:6f:1e:d7:44:88:94:
         59:63:d9:18:46:44:4f:43:9d:6c:ae:26:72:38:3c:2b:79:8e:
         c8:f3:b7:1a:00:53:61:76:e5:b6:69:75:ae:da:c2:b2:0c:42:
         83:d9:fa:7b:19:28:7d:96:54:41:c9:cc:a0:64:be:4e:ea:26:
         c0:7a:50:17:3d:a8:bc:4c:d4:8c:23:cf:c7:4a:79:28:6c:7d:
         a0:02:cf:43:8d:f3:07:87:c7:49:d9:bc:1a:b8:ef:be:b8:d8:
         90:fa:d6:92:d7:3f:c5:b8:e5:1a:d2:07:c2:11:cd:4b:55:37:
         01:6d:38:8c:d4:75:67:00:2b:26:69:72:f0:51:3c:60:eb:fb:
         65:89:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:40:43 2025 by rpki-client