Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File:                     mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier:          OK/Oq2Zx9ON9GqoSX+L7jJpyku8fVuy56gdXw6kzXJI=
Subject key identifier:   B8:3A:64:D8:6E:CC:76:1B:FA:6C:54:8F:E2:F7:56:69:7D:06:BA:B4
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       019767E0B45DEB7D6B6C9F9013D1C484F824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 06:01:08 +0000
Manifest this update:     Fri 13 Jun 2025 06:01:08 +0000
Manifest next update:     Sat 14 Jun 2025 06:01:08 +0000
Files and hashes:         1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
                          2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
                          3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
                          4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
                          5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
                          6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
                          7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
                          8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: am/vgglzMDzu1Fpkvljp8mw0N6q+NgMHO8sIyO2gHgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:e0:b4:5d:eb:7d:6b:6c:9f:90:13:d1:c4:84:f8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: Jun 13 06:01:08 2025 GMT
            Not After : Jun 14 06:01:08 2025 GMT
        Subject: CN=b83a64d86ecc761bfa6c548fe2f756697d06bab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:4f:78:b0:5c:aa:4f:c2:a8:9a:b4:76:18:
                    fa:ff:3f:eb:b1:df:71:7b:21:cc:19:93:96:c1:ed:
                    f5:24:48:ed:2f:41:d3:13:52:90:9c:b4:d0:2a:ba:
                    5d:ed:66:c7:6a:a1:c9:29:86:e9:da:0e:70:36:94:
                    90:41:ff:50:44:8e:28:29:6a:6e:ba:8a:ec:18:bb:
                    bf:95:96:92:50:3a:3b:86:77:dc:63:e5:38:9c:ae:
                    c2:b2:6a:09:05:c1:e6:db:fa:e7:ba:17:68:d4:06:
                    c9:f6:d5:ab:c8:ac:76:ce:f9:d8:1d:53:ad:8c:35:
                    80:9a:3f:7a:06:ee:80:ca:df:d1:0f:9f:2e:2d:73:
                    71:9f:f3:e5:70:da:71:58:b2:72:a4:69:9d:2f:ba:
                    30:cc:3b:c1:9a:c9:3d:1d:1c:3d:78:46:6f:54:ad:
                    54:81:7b:0d:cd:96:4b:a2:bf:35:66:ea:56:d2:e5:
                    27:ba:d8:f9:e6:70:b9:1a:30:51:32:44:c8:aa:b9:
                    da:6f:0f:f3:93:92:0a:44:07:7d:24:6e:ee:da:fd:
                    0d:44:08:b5:16:32:a5:1c:64:16:7b:40:1b:1a:54:
                    bf:a1:65:0b:8c:85:9a:5a:08:0a:4d:a6:ea:0e:79:
                    a0:45:a2:a6:c5:18:d3:0b:e6:94:dd:1a:94:a7:14:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3A:64:D8:6E:CC:76:1B:FA:6C:54:8F:E2:F7:56:69:7D:06:BA:B4
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:0d:46:26:67:71:0c:4c:8a:2c:41:5d:4d:ae:a2:5a:45:
         55:a0:c5:6e:06:92:11:2c:00:73:f4:66:ab:f8:df:55:b8:41:
         71:f0:5a:2d:74:d9:78:55:78:76:de:2d:39:45:56:12:f0:2b:
         b8:41:31:17:17:db:6f:58:d9:54:65:86:ad:11:20:02:67:65:
         a4:68:18:39:49:fd:b8:da:3c:2e:80:82:3e:69:eb:53:d5:e8:
         cf:dd:15:a6:d9:2d:b4:07:60:9a:8a:29:cf:ce:38:73:bb:7b:
         f0:c4:d8:41:6b:d5:03:ca:60:2c:47:04:e7:37:a1:04:c3:02:
         e0:5e:e9:a9:5f:ea:0d:d2:da:fa:36:2b:56:22:a8:a4:35:81:
         a6:2f:13:d1:d6:26:ec:0c:d1:f9:01:7f:c8:19:96:68:96:38:
         8a:93:44:ad:fd:eb:84:8f:8f:40:e0:47:d4:d1:88:9a:05:0c:
         25:7e:80:ca:37:70:fa:ed:79:db:f7:6d:fb:0e:d7:d1:77:c2:
         43:9a:00:5c:d7:a2:b9:5d:b9:c9:16:03:80:cd:c0:67:ab:20:
         d7:01:7f:03:65:18:ab:39:b4:d5:1e:cb:89:05:72:28:b9:64:
         23:f2:36:1c:ba:5b:1f:ae:f0:9f:9f:6e:be:49:54:45:ef:61:
         51:d5:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:44:20 2025 by rpki-client