Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File:                     ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier:          5KO1uGWFZWb8MJZNFoLlhdd/Y215/e2MtdKrNRpwsoA=
Subject key identifier:   3D:AB:43:6D:4D:2E:86:32:B0:B1:55:D3:F8:C6:3F:6D:C4:5A:A3:1E
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer:       /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial:       019751218C5265AFCFD5FF0284F4C6FB1519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number:          1512
Signing time:             Sun 08 Jun 2025 20:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:42 +0000
Files and hashes:         1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
                          2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: vmUysALIOYeXafGnO5W7raAg6ItFRfeyz08YXwKqLHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:8c:52:65:af:cf:d5:ff:02:84:f4:c6:fb:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
        Validity
            Not Before: Jun  8 20:00:42 2025 GMT
            Not After : Jun  9 20:00:42 2025 GMT
        Subject: CN=3dab436d4d2e8632b0b155d3f8c63f6dc45aa31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:45:04:30:1b:d2:b9:1b:0b:e4:d1:a1:b4:
                    78:1a:81:2b:df:c6:09:3b:d4:54:29:e1:a5:03:d5:
                    57:bc:69:9d:d4:56:3f:ff:7f:53:37:3d:82:8f:2e:
                    e9:90:56:69:10:81:55:38:7d:fd:52:55:02:e1:fc:
                    0e:2c:56:a9:3b:84:de:59:af:f6:15:6c:dd:fb:55:
                    f0:bd:37:a7:ed:d4:c0:15:79:9f:7c:54:77:bd:e6:
                    46:7b:71:bd:83:0c:71:d0:2e:e0:11:52:2a:49:8c:
                    1d:88:33:76:34:52:bf:2c:a3:22:75:3f:d3:d0:d3:
                    5c:57:4e:b9:d9:58:04:84:58:b5:54:21:14:d5:91:
                    be:4a:44:a6:c6:63:83:a5:76:0c:b5:ae:e3:c0:0f:
                    f5:5a:56:f5:1f:af:b7:ed:03:61:c6:b4:3b:cb:eb:
                    54:64:5f:8f:3c:26:35:33:eb:50:bb:c2:9d:59:72:
                    dd:f2:ac:a7:17:f2:47:2a:71:35:bb:e6:5b:46:b9:
                    28:75:fe:5a:ff:b9:d7:32:91:f6:80:94:4c:af:3f:
                    a5:cd:fa:6e:91:d2:e1:f7:7d:74:55:65:2e:1b:f2:
                    a8:d5:97:ce:a0:b0:0d:78:0d:19:06:da:4e:39:68:
                    c0:19:d8:5d:db:fd:9e:f5:b4:ce:c9:54:49:14:00:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:43:6D:4D:2E:86:32:B0:B1:55:D3:F8:C6:3F:6D:C4:5A:A3:1E
            X509v3 Authority Key Identifier:
                keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:86:c7:07:2d:1b:08:fc:c8:5c:d9:01:64:5c:eb:75:30:a5:
         33:00:6e:7a:20:3e:2d:6c:06:29:76:76:32:6a:c0:e1:70:81:
         05:93:81:bd:42:46:7f:33:e0:71:aa:31:5c:ce:d8:ff:a2:bf:
         8b:a5:cc:e1:20:e6:0a:91:c7:52:75:06:dc:b3:b0:64:77:d4:
         41:70:9c:62:5b:38:e2:9e:8e:31:43:8a:89:7c:8e:59:cc:98:
         07:c7:45:ec:c3:b8:89:6d:b5:d4:07:49:da:7f:b4:ee:69:e9:
         b1:64:c5:a9:01:d1:7c:36:30:b2:e5:f4:bd:a7:95:14:8b:11:
         62:ce:85:43:c8:ed:e8:fc:ff:bb:77:6a:d9:3e:d1:d5:4d:4d:
         eb:3f:c7:e9:25:66:de:cf:88:7b:12:dd:63:2a:8b:0f:2c:d1:
         1d:ed:a5:9e:cb:57:f4:0c:56:f5:d5:37:ad:0c:95:f3:72:fe:
         6d:fa:76:c4:1b:79:f6:5d:ca:60:cf:32:a0:3b:0f:78:80:38:
         31:4f:00:a3:f3:69:8d:fb:7c:00:5e:d2:41:a9:55:39:b2:0b:
         49:1d:1f:39:9e:dc:fc:86:33:5c:7e:bc:35:d1:0e:99:4e:9b:
         43:22:02:c1:cd:dd:11:36:9f:16:8b:d8:8a:72:75:60:09:9b:
         ad:70:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:53:55 2025 by rpki-client