Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          g8h1kO4Pg+t6G3xK1QXCDtcDBwhDyM9e1M0TP9r1A4k=
Subject key identifier:   84:2B:6E:19:70:50:3B:01:3A:56:8D:49:99:91:44:40:4A:CD:C6:6E
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       01974CA028E447DF529377565E089505CE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 23:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:54 +0000
Files and hashes:         1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
                          2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
                          3: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
                          4: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
                          5: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: DYLNDnPOfsm4sgrckUyGh7LM8h3sySBYdykaGlVSVbo=)
                          6: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:28:e4:47:df:52:93:77:56:5e:08:95:05:ce:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Jun  7 23:00:54 2025 GMT
            Not After : Jun  8 23:00:54 2025 GMT
        Subject: CN=842b6e1970503b013a568d49999144404acdc66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:33:8b:e1:ed:36:9f:59:f2:55:6e:2b:a4:
                    70:bf:d0:c0:c5:ce:f1:6f:bb:67:b3:55:6b:d6:04:
                    2c:a3:d6:16:ae:0b:4d:49:18:75:f8:15:ef:eb:b4:
                    b9:c9:79:97:27:3e:49:4e:b4:4c:9d:8b:ab:51:6b:
                    df:0d:3c:db:dd:7f:cc:71:8b:2c:00:20:f6:80:91:
                    dc:d6:b8:6c:e9:a6:11:5a:fa:d8:d9:08:0b:b0:e1:
                    6f:4b:f5:22:d4:5f:13:29:5f:c8:87:14:be:50:6b:
                    42:b3:2b:cf:ff:80:16:39:e4:40:c4:3e:fc:fb:d4:
                    37:93:2b:87:d5:a6:e0:11:36:f3:cc:fd:50:ea:ad:
                    3c:f5:ef:71:a7:ff:66:7c:d4:8c:d1:df:52:19:22:
                    6d:e4:4d:3a:42:69:ff:f9:1b:0b:ac:0a:c7:98:eb:
                    bd:4f:db:d9:1f:3b:be:2e:d0:90:1d:07:6b:7a:e4:
                    1d:af:17:b6:2c:dc:27:f2:49:91:67:2c:30:c6:79:
                    8f:2f:97:9c:45:2d:b5:03:fe:e6:43:3b:50:41:db:
                    ae:6d:d0:4b:ab:6d:82:14:94:f5:c3:fa:b5:69:93:
                    8a:ab:01:0d:b8:3b:15:cb:63:8f:9f:1b:29:9b:ed:
                    c4:05:9c:20:c3:71:cd:5b:4b:a3:61:1c:43:ae:e5:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:6E:19:70:50:3B:01:3A:56:8D:49:99:91:44:40:4A:CD:C6:6E
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:27:95:86:b7:84:e1:f6:30:74:fc:d2:ad:52:a1:10:5d:
         a0:2b:db:8d:cd:fc:a9:08:6e:c1:d9:b0:8b:90:95:ad:9e:fe:
         be:b0:cb:35:9e:1f:bd:20:a6:ed:c5:0c:4c:4f:ab:b2:86:67:
         c6:3c:d5:1f:f2:08:58:cc:5f:00:35:1c:a5:88:3c:50:b6:0b:
         0b:34:90:55:1f:da:69:fc:5b:38:c4:15:0e:a7:ff:8a:60:e1:
         9f:49:e1:ad:3e:a5:b1:22:58:1a:c1:51:c6:4b:91:5d:1e:6d:
         00:ec:42:e1:49:16:21:e6:7a:6a:0e:dd:a0:01:eb:a7:d2:1b:
         06:a3:06:30:b4:9b:d8:0e:32:15:5c:36:30:4c:e2:8e:2f:8f:
         0a:da:4c:96:e0:70:aa:6b:b9:bb:f9:cd:9a:d5:33:36:c5:67:
         3c:83:91:df:e9:d3:dc:7a:52:eb:2a:7d:72:7e:e5:7f:03:aa:
         8d:7a:44:ba:8c:da:f8:bd:11:bc:97:62:55:64:93:53:8a:f3:
         67:8e:12:98:04:ae:73:1a:f9:92:34:aa:20:9f:35:2b:56:99:
         4d:93:53:47:5f:95:93:91:19:5f:ba:cf:78:1a:71:a3:65:38:
         54:c6:60:8d:94:8c:f1:b0:8c:ee:ca:88:b0:70:06:a3:0a:db:
         96:ba:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:38 2025 by rpki-client