Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File:                     S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier:          W/FViJKftP/4PlUj7ajt2tE9CVTt2iYEaIZvBsH9+Jk=
Subject key identifier:   2D:8C:45:68:F3:16:D3:4F:40:23:1D:8E:5D:08:C7:DD:43:C5:C0:83
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       0197624BB9C871867DD118B3A96FBF644CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number:          1590
Signing time:             Thu 12 Jun 2025 04:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 04:00:19 +0000
Manifest next update:     Fri 13 Jun 2025 04:00:19 +0000
Files and hashes:         1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=)
                          2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=)
                          3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=)
                          4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=)
                          5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=)
                          6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=)
                          7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=)
                          8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: hXyOey5IDh+94+8R0sMR4Il4SfmrSUGAhVZL6HVtRzA=)
                          9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=)
                          10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:4b:b9:c8:71:86:7d:d1:18:b3:a9:6f:bf:64:4c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Jun 12 04:00:19 2025 GMT
            Not After : Jun 13 04:00:19 2025 GMT
        Subject: CN=2d8c4568f316d34f40231d8e5d08c7dd43c5c083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:dd:f1:9b:c6:35:a4:28:c4:8b:02:fd:fe:
                    c9:32:be:16:e1:4a:43:37:ef:5e:16:92:3e:e2:28:
                    bb:98:21:55:0f:9b:51:b4:61:bc:34:23:34:27:91:
                    99:93:51:64:1f:59:d9:0d:ba:6b:e6:e0:70:bd:fa:
                    a6:98:03:84:97:a7:34:70:6b:3d:3a:27:b0:5f:ee:
                    ab:84:45:97:9d:f7:f4:31:f6:e2:10:b4:42:34:f3:
                    40:36:a0:49:e1:2f:46:20:c8:4d:6e:af:a2:18:fa:
                    ce:9d:9f:ba:12:48:27:52:ac:65:8f:e1:a3:30:31:
                    fd:ec:e1:28:39:eb:f0:24:5f:cf:9e:6f:48:09:0b:
                    60:2f:60:30:7f:67:e7:95:1f:31:a8:74:d8:e5:77:
                    4d:79:72:fa:06:8a:bd:54:f7:04:f7:53:50:d1:96:
                    da:3c:cf:24:0c:6f:5a:ef:7f:f7:d4:4d:18:d5:1a:
                    bb:70:d8:f4:56:33:01:8e:fc:26:29:ea:8f:97:1a:
                    47:ae:0b:9a:32:ad:f0:11:b3:e6:ed:6f:91:ed:6a:
                    09:ad:07:ef:7e:47:2a:74:26:99:16:86:2a:71:a1:
                    75:47:ec:e7:1c:41:62:8e:1d:6f:93:1e:15:80:fc:
                    33:cb:5b:c3:2c:83:d9:6e:e3:68:b8:76:ce:0f:4a:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:45:68:F3:16:D3:4F:40:23:1D:8E:5D:08:C7:DD:43:C5:C0:83
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:5e:2e:b0:93:75:db:66:d4:3d:c2:93:1b:70:c3:8a:06:
         3b:19:da:cb:03:04:06:17:b5:6c:71:d0:ff:41:bf:63:38:a4:
         a7:ab:95:5b:54:c9:73:83:21:04:c1:f9:08:d3:a0:34:f7:50:
         00:25:93:ec:01:7a:13:ea:b0:bb:63:f3:1e:a0:c0:6a:c3:d6:
         40:7e:37:98:2f:b9:49:f0:07:e6:d4:e7:3c:c1:69:b8:3d:8e:
         77:1b:3c:71:7b:f0:32:6c:aa:b0:44:e3:cd:3f:58:42:84:fa:
         9c:b3:ca:eb:49:b8:22:1c:23:4a:8b:12:47:5b:ee:18:ee:8f:
         bb:72:27:2c:dd:e8:24:c5:7f:c3:97:e2:e2:8e:2a:dc:fe:3e:
         d4:ee:b3:1d:c5:5f:6b:29:4e:13:49:de:e8:a6:73:a5:93:f0:
         76:8b:c0:c4:85:11:13:2a:5f:ff:3b:45:45:bf:8e:cb:72:ec:
         70:98:90:99:d9:28:d4:2c:5a:20:47:a0:2c:0d:ed:ca:8e:5b:
         5a:d1:09:97:80:7a:89:ec:0d:dd:11:72:36:b1:53:06:be:bb:
         79:f6:3d:0e:e0:07:f0:51:2d:ff:98:49:99:f2:ff:22:b7:3f:
         23:25:b0:fb:41:31:a8:24:5e:94:bc:8b:99:ff:a5:e8:45:71:
         fd:ff:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:46:18 2025 by rpki-client