Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          OR1gS7punprYGp3kxFKzJ1xKDIkngd2HGPtcaSwEZn4=
Subject key identifier:   A5:92:45:2D:BD:3F:B0:72:77:D8:1A:9C:9B:5F:96:D0:6F:A5:65:46
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       0197470BD20F81C8D3436B9627D47884340B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          1585
Signing time:             Fri 06 Jun 2025 21:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:46 +0000
Files and hashes:         1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
                          2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: CmT92BPW3HlxgVhr7X0P7dNiORC52n7jbJEZlVUxqO4=)
                          3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
                          4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
                          5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
                          6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
                          7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:d2:0f:81:c8:d3:43:6b:96:27:d4:78:84:34:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Jun  6 21:00:46 2025 GMT
            Not After : Jun  7 21:00:46 2025 GMT
        Subject: CN=a592452dbd3fb07277d81a9c9b5f96d06fa56546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:c4:ba:31:0d:a1:c7:31:b4:0d:98:b0:d9:
                    73:aa:5b:34:0c:1f:71:06:95:54:3b:fa:01:76:0e:
                    5e:11:eb:0b:74:2e:24:85:46:1d:c4:e4:ee:eb:0e:
                    9f:7d:da:c3:ce:f7:2a:ad:0b:2c:ed:e0:58:9a:1e:
                    d3:ef:54:0f:ea:38:f3:04:9c:43:ef:4b:6d:70:ff:
                    72:4b:72:a4:dd:b9:c5:74:c6:70:e8:84:e9:e5:c2:
                    23:3f:61:8c:e3:9b:e2:2c:6d:1a:e9:76:bf:29:62:
                    31:e6:19:68:ad:32:94:c7:1a:bf:da:e7:52:44:52:
                    00:28:fe:f0:d4:5b:04:b9:62:83:4e:ae:7b:4d:2f:
                    db:5d:48:4a:2d:f0:b8:10:ea:b9:6e:5f:17:c0:db:
                    9c:bd:a8:74:6d:14:0a:73:a5:22:89:b8:ef:9e:e1:
                    30:27:9e:40:ba:a7:df:71:8c:43:37:df:29:c6:e7:
                    77:b5:ab:72:2f:d4:47:30:a2:46:a0:b3:02:f4:26:
                    89:7c:30:df:9a:c6:b2:e8:13:ff:df:03:89:dc:b8:
                    bd:bb:ad:9f:a5:ea:f0:60:d9:62:0d:74:d9:4b:e4:
                    f5:ff:10:93:ef:70:8d:e5:9c:6d:69:f2:e1:8a:df:
                    d9:ae:27:5d:43:2d:eb:e2:4e:9c:76:c7:8c:2d:38:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:45:2D:BD:3F:B0:72:77:D8:1A:9C:9B:5F:96:D0:6F:A5:65:46
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:df:23:16:d8:6c:bf:34:9f:7f:5d:cf:4b:c4:a5:ab:84:7d:
         55:fc:0d:09:09:94:64:8b:9a:68:f9:f9:f8:10:52:40:aa:f2:
         08:d1:51:33:f8:16:31:30:67:0d:20:c6:fa:34:cc:e5:c2:4e:
         ef:47:c7:63:d8:ac:69:be:c1:09:65:d9:c4:6c:a8:04:f3:63:
         76:98:a5:20:d7:1c:0b:c5:5c:1c:ad:c4:65:de:24:c1:2c:90:
         ab:08:4e:8e:7b:fb:04:89:90:e3:ef:02:ff:52:3e:e9:aa:f4:
         23:d0:33:21:9e:7b:a7:16:ca:32:fa:6f:73:4f:68:27:d6:ec:
         60:85:58:7d:ae:8a:4c:42:52:80:a3:38:6d:14:18:2f:4f:b3:
         1b:dc:57:24:2d:22:c9:a7:29:e2:dc:13:d7:6b:9b:8a:37:ff:
         19:67:e5:54:cb:e6:58:1d:38:80:f0:6c:99:64:61:e4:96:1c:
         12:f0:10:1a:92:72:6e:5e:02:5f:42:d2:7a:e7:73:72:07:e2:
         f3:39:87:61:1e:0a:9e:fc:15:d1:50:07:05:c0:5a:fc:6f:fe:
         fe:57:aa:de:c2:8d:f8:e8:57:32:64:6c:d6:a8:2d:32:c3:98:
         56:fb:b5:62:b6:28:cc:ed:99:56:84:a3:c9:ea:ea:9c:1d:26:
         c8:8f:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:12 2025 by rpki-client