Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          R9kKrY0EAxHCzSv6vAOONBjaX8Qq7eZ8fw08dNbMl9M=
Subject key identifier:   9F:D2:8A:1F:C6:2E:3B:F9:30:5B:09:BD:16:52:CE:35:42:18:F6:7B
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       01974BFB46C5E20F56562FDC1B42A523010B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          1059
Signing time:             Sat 07 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:48 +0000
Files and hashes:         1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
                          2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
                          3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
                          4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: XRHbze0+D8IIi9v0obvyeSIJi/YsyxwPQqmXSmc9wd4=)
                          6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:46:c5:e2:0f:56:56:2f:dc:1b:42:a5:23:01:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Jun  7 20:00:48 2025 GMT
            Not After : Jun  8 20:00:48 2025 GMT
        Subject: CN=9fd28a1fc62e3bf9305b09bd1652ce354218f67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:e6:cd:42:18:ae:25:b0:a4:f5:8c:f0:32:
                    c1:4d:49:69:2f:7a:b4:69:2c:f2:ac:98:59:18:89:
                    b5:d5:a5:48:02:68:a2:05:67:c4:3d:49:d7:ad:f8:
                    da:02:26:3f:92:55:ec:84:61:79:8b:37:fd:74:fe:
                    db:43:7b:68:3b:f7:25:2b:6c:51:61:e2:09:75:ef:
                    50:72:70:ca:9d:ec:e9:02:05:26:19:6b:80:19:ff:
                    b0:e3:66:0c:26:e2:57:b0:96:3a:1e:3f:b1:34:a0:
                    92:01:1b:64:18:18:5b:f2:58:b1:4a:dc:af:f6:d5:
                    af:b7:22:99:58:5f:2e:1e:fd:44:16:bf:9f:be:33:
                    f1:c3:ad:01:32:2e:ae:81:51:2a:d7:21:1f:f8:d2:
                    7e:89:73:de:d8:70:2a:b3:7c:c3:6e:6b:18:c9:70:
                    5c:75:3f:2e:08:a1:ea:3d:25:b2:a7:36:dd:b1:35:
                    de:bc:a9:4e:08:94:59:6a:0d:6d:95:66:ea:fb:b1:
                    42:4f:cd:9d:4b:35:9b:62:b0:c8:d0:32:74:bb:0d:
                    18:24:16:9a:03:64:50:28:a2:ff:4c:0a:2c:ee:d5:
                    4c:eb:4f:80:cf:17:e7:98:14:2f:59:c2:cf:85:4c:
                    bc:66:d5:29:1c:ed:af:f3:5d:aa:86:8b:4a:a7:87:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D2:8A:1F:C6:2E:3B:F9:30:5B:09:BD:16:52:CE:35:42:18:F6:7B
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:83:9f:7d:f4:d4:ff:18:69:dd:8e:1b:b5:c6:b6:49:89:7e:
         ff:91:61:2c:a2:4c:8c:68:78:b3:3e:36:54:ca:49:8c:24:a3:
         48:44:4b:77:cf:cf:76:7e:61:85:37:ff:93:ee:ea:8c:10:15:
         59:5b:fe:6f:c8:a9:5d:c1:ad:51:6a:18:cb:f3:7e:c4:0b:49:
         02:47:f9:04:4a:49:96:ca:55:16:79:95:a3:15:6c:a0:17:e0:
         1f:3c:42:36:d4:56:7a:db:7b:d8:e4:81:bf:df:44:71:5d:69:
         28:b0:de:68:d0:35:c9:51:c8:f0:9a:86:04:9f:74:46:86:be:
         60:f2:2e:73:80:f1:a7:cb:28:5a:fa:87:e2:94:e7:69:e7:ec:
         36:8a:d9:a4:58:1d:83:eb:1f:3d:42:73:de:47:eb:7f:ec:cd:
         bb:cc:88:a7:de:65:15:23:49:b6:42:ea:af:d9:da:01:e3:4f:
         e6:c5:10:7e:0b:cd:f3:bc:af:4d:2b:14:40:d3:0a:f8:18:6b:
         d2:ed:23:f3:cc:61:35:ba:4f:97:e0:a2:29:80:26:52:b1:a4:
         d6:7b:95:cf:42:3b:98:4f:2b:7a:d8:1d:43:20:2d:e7:eb:2b:
         fe:27:21:67:50:d3:0b:6d:4b:23:93:15:f2:dd:fc:0b:eb:ed:
         f7:78:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:18 2025 by rpki-client