Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          jDBe65RNWocZJ1+TaL2nVpVtK34MzJzzbfP9KICMoYQ=
Subject key identifier:   BA:1B:0E:16:B7:16:C0:5B:14:86:24:11:C3:AF:6E:51:A6:C1:E5:01
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       01974F335576A3F0A71F1D5790967A120F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          1597
Signing time:             Sun 08 Jun 2025 11:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:53 +0000
Files and hashes:         1: 64p5o-0qnUcfwWS02nv_DkPvL3I.roa (hash: niXYitJiZ8IxUWpDspPEEvq6acqCjMtSycTMiACHf58=)
                          2: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
                          3: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
                          4: JtK5RD-DTIOQNW_JXWGlPrgL9tE.roa (hash: /+XnmRP4/kZj+79ZCDvZV6TsrFKYsjV9u/awORCe7Sg=)
                          5: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: 5PoXXGOfvC8yN8jPXxpdfb31/rgLnawF/NH0Au149x0=)
                          6: nBPAeD-HkUuE_ZRaR-1XRv4f_rk.roa (hash: WOmEN3c5juTBj6y1v+aIT3UT7fjHi7/bTZXku3aNpFw=)
                          7: wN38KIesuTmj0VhTYnf66R7aRGs.roa (hash: BHWGJU1hslSu+73+D1D8OPXTiUn1TCww0Wy3SxJIu2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:55:76:a3:f0:a7:1f:1d:57:90:96:7a:12:0f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Jun  8 11:00:53 2025 GMT
            Not After : Jun  9 11:00:53 2025 GMT
        Subject: CN=ba1b0e16b716c05b14862411c3af6e51a6c1e501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:4b:4a:42:68:56:59:88:a4:df:90:8d:b8:
                    6b:c1:53:2d:8a:a3:5a:b9:e9:0a:7d:c0:76:70:7e:
                    ec:20:e0:09:d1:d5:62:d5:b2:80:3d:8d:ca:24:78:
                    7e:3d:18:e3:33:0c:32:a8:79:45:1d:d8:e6:d5:96:
                    5c:9d:f6:d6:79:1c:fb:fe:eb:71:91:04:6f:a2:26:
                    d3:06:42:7a:4a:0b:c2:73:fe:e6:fa:be:db:b9:af:
                    62:8c:b8:b4:fa:57:a4:f1:c0:75:ac:1f:d0:10:c3:
                    64:fb:df:64:a8:2f:a7:4d:dc:6e:ee:e1:ac:0d:b5:
                    fb:8e:e3:ff:dc:0b:db:50:32:13:b7:cd:08:7c:98:
                    ec:f9:71:9e:11:94:dc:e8:34:74:c0:31:fa:56:71:
                    ba:bb:ea:65:c3:d8:0f:23:ec:63:a7:e1:f0:23:29:
                    ea:22:9a:82:bc:c5:7e:1c:d4:32:da:71:c0:83:db:
                    eb:cc:27:4d:d8:cc:c7:fd:e0:f7:00:f5:a0:73:17:
                    c9:6b:c3:09:9d:c4:51:7a:b3:22:6e:fd:cc:fb:ba:
                    e4:9f:80:d6:56:a0:bb:39:71:fd:24:9f:c2:c7:9b:
                    70:18:d0:f9:5a:66:14:e6:b9:d2:d1:c9:1f:ee:a5:
                    1f:2b:9f:d6:51:4a:e6:da:ed:4f:f7:cd:1f:1e:99:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:0E:16:B7:16:C0:5B:14:86:24:11:C3:AF:6E:51:A6:C1:E5:01
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:b4:56:71:ae:c7:eb:58:c4:76:21:15:9c:0b:7d:b5:01:
         1e:18:63:94:72:25:95:72:b1:0e:2d:cd:83:f4:43:96:62:cf:
         51:9c:bf:fe:a9:55:e6:58:b6:b7:1a:64:4c:3d:34:64:15:0c:
         ee:f8:be:fa:ca:33:c9:ad:2a:d0:96:b3:a9:62:01:10:47:5b:
         b6:97:9b:44:8d:ef:1f:c4:2c:d0:6a:19:7a:ec:fa:5a:5b:8f:
         d6:df:26:c9:2c:b6:d5:6e:6e:38:14:7e:47:c9:d0:50:e0:e8:
         ca:06:6b:2a:0b:1b:e1:9b:02:df:8d:1d:87:fd:0e:1d:f0:1d:
         43:22:70:0f:e4:84:4f:f4:0e:04:30:0f:2b:97:c5:89:df:17:
         cf:25:17:29:1c:07:7d:0e:c7:22:30:dd:96:77:f2:13:7e:bb:
         74:1d:55:35:e2:81:32:7f:14:0a:b8:07:05:40:19:08:11:39:
         93:da:c1:12:a3:5c:ab:ee:fb:c9:38:e4:15:33:08:b0:93:ff:
         16:81:8a:cd:e3:1d:fd:69:6c:89:44:13:88:be:0f:84:9f:ed:
         a5:80:f1:7c:42:d9:2f:c9:b6:2b:31:61:99:0c:18:fd:c3:cd:
         6a:55:a0:53:10:6e:bd:73:c2:cc:39:ab:41:1b:79:0a:89:b5:
         db:41:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:28:56 2025 by rpki-client