Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File:                     jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier:          QxDZ46W9J0OQXAamuK/xnTbg98ubR9xter9BU/XkdYA=
Subject key identifier:   C4:33:FC:12:39:E9:0B:2A:B6:3B:6D:C8:0A:CF:7A:00:88:DC:1C:93
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer:       /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial:       01975C4A732541E22BD44CD43477C30FD073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number:          1588
Signing time:             Wed 11 Jun 2025 00:01:12 +0000
Manifest this update:     Wed 11 Jun 2025 00:01:12 +0000
Manifest next update:     Thu 12 Jun 2025 00:01:12 +0000
Files and hashes:         1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
                          2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
                          3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: LAmMWfy3zUJ4HVYwDM5GLB+dGztDTmwZTazCp4w2lXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:73:25:41:e2:2b:d4:4c:d4:34:77:c3:0f:d0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
        Validity
            Not Before: Jun 11 00:01:12 2025 GMT
            Not After : Jun 12 00:01:12 2025 GMT
        Subject: CN=c433fc1239e90b2ab63b6dc80acf7a0088dc1c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:f3:d6:10:72:11:d8:ab:a1:e9:8a:80:11:
                    a0:49:81:2d:d2:37:35:f9:3c:8e:4f:02:6a:f9:dc:
                    87:4f:03:86:ab:49:2b:87:36:36:79:23:1d:3b:90:
                    7e:3a:64:f2:4f:cd:e4:49:12:39:e5:93:07:b5:2b:
                    bc:c1:33:44:a2:67:79:cd:dd:68:c5:e5:bd:54:86:
                    7c:9b:2a:6e:8d:2d:72:f7:89:85:e5:35:e1:c1:59:
                    d2:da:cb:9e:48:fb:53:45:a3:23:00:1b:b3:03:a4:
                    1f:89:20:1f:ba:1c:18:c8:42:7b:4e:e3:04:85:71:
                    c0:87:1f:7f:01:12:59:1e:3b:57:76:f1:5e:46:bc:
                    aa:dd:63:c2:13:5d:d7:fc:d4:9d:14:74:d1:c9:16:
                    eb:a3:54:8d:61:d3:05:d7:35:b7:1d:13:c8:3d:0a:
                    f1:d7:1c:eb:f7:f3:47:1b:cb:e8:b9:00:3d:4e:d4:
                    7d:4a:12:44:c6:85:55:29:6e:ca:16:f6:40:e7:a2:
                    0d:71:a8:2e:83:ae:26:c1:1b:ca:73:1d:81:93:25:
                    86:73:08:34:68:de:f1:2d:10:7c:58:f7:d4:c4:81:
                    21:cb:2a:98:d5:63:e3:db:9a:4f:f3:25:bd:a4:4d:
                    2e:62:5c:b0:da:7e:05:36:8d:a2:ae:98:b3:e7:44:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:FC:12:39:E9:0B:2A:B6:3B:6D:C8:0A:CF:7A:00:88:DC:1C:93
            X509v3 Authority Key Identifier:
                keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:04:94:96:b1:20:2f:31:94:69:0d:e6:77:fd:48:e7:b8:85:
         8d:d7:b6:1f:71:82:2a:e4:90:91:dc:58:d7:60:6e:47:7b:72:
         10:79:61:d9:c4:d3:cf:f9:b4:ea:78:79:54:b2:bf:70:e4:11:
         ab:62:b4:f0:c2:6a:13:58:30:d6:a8:b9:97:19:1f:9e:ad:8a:
         55:a6:7b:53:a3:fb:83:78:15:81:d8:b4:a9:01:1a:e5:10:e8:
         93:2e:60:ea:6c:7e:02:41:85:7b:08:55:64:b5:76:3b:fe:52:
         03:d4:45:95:b5:62:35:f5:7b:bf:06:4d:6f:be:41:e6:13:28:
         2d:45:15:08:32:04:cc:08:52:0a:39:5e:70:8e:41:7d:cb:b6:
         11:6d:e8:19:cb:3f:e9:40:45:37:98:61:06:a8:2e:06:d9:54:
         9a:88:83:1c:64:d3:36:fb:58:9f:b8:7a:01:15:e4:a9:70:bb:
         8a:ad:18:0a:11:58:39:b7:9a:01:10:4c:12:2b:38:96:5c:65:
         dc:cf:3b:29:b4:47:13:aa:a4:44:3d:1d:80:a1:4d:78:f0:16:
         89:a0:86:c0:50:1b:16:57:94:ec:ed:ed:35:26:b7:19:ef:52:
         a4:93:ca:54:4f:e0:84:08:6c:7a:07:a0:d7:8c:03:c7:6d:f6:
         fc:af:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:53:08 2025 by rpki-client