Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          7kTO4XdxqoBR63D4Eq0NbNfBT2h/0YrJhKldSvVXVjA=
Subject key identifier:   B5:88:8D:05:47:3B:D8:DF:97:55:3A:CA:8E:3F:D6:F8:54:46:33:9A
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       01976C2AAB06FDDC3B78395E3CFA1E6F5674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          0589
Signing time:             Sat 14 Jun 2025 02:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:24 +0000
Files and hashes:         1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
                          2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
                          3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
                          4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: 4/CVdkdtLRZ4HVkgj2Bawlg4AneBQHbVFzsuklG2Qqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:ab:06:fd:dc:3b:78:39:5e:3c:fa:1e:6f:56:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: Jun 14 02:00:24 2025 GMT
            Not After : Jun 15 02:00:24 2025 GMT
        Subject: CN=b5888d05473bd8df97553aca8e3fd6f85446339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:2c:e8:61:5f:0f:81:d4:52:e3:3c:67:52:
                    db:e4:58:08:e7:3a:08:7a:75:b4:e5:22:45:f8:d2:
                    3d:4e:83:59:65:08:3f:7c:75:4c:76:ae:b9:30:4f:
                    ec:6c:a2:19:d9:1c:a6:80:e4:31:9a:d1:00:74:1b:
                    df:81:60:c3:ec:e1:8f:e8:a1:5f:3f:aa:6d:91:d2:
                    03:2f:5b:4e:07:58:1b:7a:6d:a1:98:96:bc:8e:15:
                    ab:ce:f1:a6:78:eb:55:88:77:54:b3:75:cf:96:fe:
                    77:95:e4:29:3f:77:d6:02:a4:7a:a9:ef:f4:d7:b1:
                    ac:fc:22:60:05:69:94:c9:9a:a4:46:95:61:09:75:
                    15:11:99:d1:02:54:7a:60:e1:c4:8f:79:0a:e6:1d:
                    8e:37:ed:2a:41:f6:dd:79:88:61:07:ad:21:95:bd:
                    2b:5b:5c:46:df:f3:0c:92:ef:5c:ad:0b:79:df:0e:
                    ef:ca:81:35:d5:6d:3d:72:2f:2e:6a:b7:d9:55:0d:
                    a7:00:bd:0c:73:11:96:ed:1f:83:1b:ac:c7:96:62:
                    d3:ca:e1:36:6c:f1:ee:a7:cf:d0:d8:29:8e:56:dd:
                    8f:82:96:ca:4b:ce:89:01:87:8e:17:3b:e6:2a:49:
                    b9:2d:cb:77:18:d2:e2:a9:87:f0:e4:4e:d8:03:27:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:8D:05:47:3B:D8:DF:97:55:3A:CA:8E:3F:D6:F8:54:46:33:9A
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c3:5c:c5:2d:5d:8e:e5:7c:04:1e:0d:a9:aa:ea:9b:7f:74:
         49:0c:f3:48:51:0e:d7:df:58:98:22:2f:61:d8:6a:9b:33:30:
         9f:45:21:20:e0:f2:92:44:40:3d:de:6a:5c:07:63:d8:45:62:
         85:82:e0:7c:e1:38:46:38:f7:0f:f8:28:cd:76:81:ee:a7:33:
         26:52:6c:84:91:b8:31:f2:96:bb:71:24:7e:36:2b:20:95:6b:
         5a:e0:71:be:98:f8:3d:01:b1:12:7a:9d:81:fc:c8:79:e3:0b:
         85:41:70:75:3d:6f:ec:77:17:84:fd:8d:7b:6b:2d:17:69:ff:
         81:2f:ca:2b:65:f1:4a:97:23:0b:79:46:bc:f6:cc:14:3d:61:
         a5:1b:12:a8:af:a8:27:57:88:b0:12:e3:9d:75:2e:30:df:76:
         0d:0f:bb:e2:0f:2d:5a:18:1c:a5:a7:81:cd:25:b3:5e:6d:f5:
         fc:4a:99:86:4f:a6:2a:b9:1a:e5:b2:2f:ae:50:d3:28:c7:45:
         4f:bb:88:99:34:c2:7b:8a:1f:21:f4:33:63:0e:c4:34:fa:4d:
         b8:49:26:71:16:ce:52:3f:7f:b8:6c:49:17:76:9a:37:5e:b3:
         50:52:18:46:ea:ae:17:57:ce:5b:af:2e:4d:db:ce:51:e9:c3:
         fe:a4:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:11 2025 by rpki-client