Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          jfAq+71ljqps6LQPgtUYb18mtEdRg83HrzCp8wVsnWo=
Subject key identifier:   D6:FE:D9:AC:C6:C4:FE:F0:BA:3D:39:26:4F:72:48:D3:5B:71:E7:55
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       0197586D0412053CF4BF6A2768EFBED07E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 06:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:28 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:28 +0000
Files and hashes:         1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
                          2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: O0kjRntty8q+zSG3stKNh/DUpT4oiDLB3xkQEGq1RSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:04:12:05:3c:f4:bf:6a:27:68:ef:be:d0:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Jun 10 06:00:28 2025 GMT
            Not After : Jun 11 06:00:28 2025 GMT
        Subject: CN=d6fed9acc6c4fef0ba3d39264f7248d35b71e755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:65:96:9f:0b:c1:21:02:8a:29:f2:c1:17:
                    95:e3:5a:3e:b3:b2:40:13:98:76:72:a7:29:7f:db:
                    ae:90:d2:47:2d:84:dd:64:68:d6:39:22:f5:34:25:
                    dc:4b:cc:6d:ff:3a:0e:ea:1f:75:00:d7:06:b7:3c:
                    9e:79:53:ce:b4:4e:c6:6e:5c:27:b1:b7:38:e3:8a:
                    4e:75:db:8e:cf:f4:6b:07:a0:43:fc:92:0e:3b:5e:
                    70:25:1c:c8:10:23:f0:04:49:e2:9d:18:f3:2b:a1:
                    3f:f3:9b:1a:6e:d2:93:54:38:a9:3d:8a:d5:f5:b0:
                    04:07:87:65:66:f3:b0:e4:33:31:d5:be:17:80:10:
                    e7:f1:36:50:b6:69:a8:7d:92:3b:cd:6c:e8:83:81:
                    ea:50:29:8f:f9:8e:8a:5c:4f:5a:00:e1:be:8d:12:
                    0a:3d:05:e6:c8:e7:24:97:24:54:a1:a0:ce:46:8b:
                    22:a8:4e:5d:18:25:d1:a2:10:f8:fe:a0:ad:58:c3:
                    1d:1a:92:31:9a:c4:3e:1d:06:d1:bc:04:fd:d2:c8:
                    f0:e2:04:8f:47:c1:5b:bf:99:2c:53:5b:40:a9:00:
                    55:d7:ed:e0:93:0a:8d:ec:98:1d:66:81:03:42:74:
                    88:37:d2:3e:41:70:90:fe:59:86:a5:b4:d0:de:c3:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FE:D9:AC:C6:C4:FE:F0:BA:3D:39:26:4F:72:48:D3:5B:71:E7:55
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:8c:cb:88:d8:e6:be:ef:64:d9:3c:6e:42:22:fc:dc:93:
         ea:13:5a:b7:93:8c:3a:7d:8b:7b:fa:9e:44:e8:13:9d:dd:28:
         bd:98:1f:67:2d:c6:80:9d:ea:11:e6:9b:38:7c:d2:db:10:66:
         da:b2:a9:b6:f0:3b:ee:d0:0d:bc:8a:41:99:30:66:7d:09:ce:
         55:22:25:19:48:54:7d:8c:65:56:d4:a6:a5:17:0e:08:49:76:
         8b:02:19:26:cd:7a:f6:0c:47:7b:97:2f:52:f2:b0:20:2a:70:
         52:fa:f7:39:4f:bc:fa:d3:0a:7d:d7:33:dd:a4:6f:f1:8b:d8:
         5b:84:d6:4a:16:69:f7:09:60:f6:dc:20:40:fb:25:5b:7b:51:
         59:d0:34:dc:9f:b5:35:19:59:f1:ba:d4:35:de:a8:ad:c5:3b:
         b2:77:46:e0:ec:a0:23:55:8b:66:27:0f:99:ae:32:0b:40:ef:
         ef:5e:96:db:bb:67:f0:32:19:2e:51:44:e9:52:d2:70:ba:62:
         f0:e6:4d:f3:63:ca:0c:35:1c:2d:ed:e4:a3:ca:14:7e:fc:16:
         cc:6e:c2:a0:cd:80:7a:57:da:ff:7d:05:48:e3:68:f5:ad:9f:
         db:eb:f9:1e:af:00:aa:33:8f:9c:ce:32:aa:84:3a:68:b1:d5:
         f9:ab:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:53:21 2025 by rpki-client