Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
File:                     cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft (raw, json)
Hash identifier:          h+5h+2m1wmmajryw/kA+O3B2pBYJf17Iz/YG6eySmKQ=
Subject key identifier:   0C:37:B9:A0:E1:66:EE:39:4C:CA:46:DF:20:F6:5B:C7:64:D3:6E:CB
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Certificate issuer:       /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial:       01974B8D4AF807E5DF482EAA74D7EE65B635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
Manifest number:          1588
Signing time:             Sat 07 Jun 2025 18:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:40 +0000
Files and hashes:         1: 0A3eCrBh6zPFdv4NnTG-Oyjc7lI.roa (hash: Hpqtml2zx5yO1KtzPny+alx7D2TcQ3WX0ZxI8Mvqcow=)
                          2: 1-JbKVgC2zlrxckVHgIVlicdCoxQ.roa (hash: 3pR+BLofcLce+i07bAe+gODFuY9E/BGeWToEN758yac=)
                          3: AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa (hash: A+hTsbyaE6tTKJYIPPdu0Kx30wfj2E6e3KM/UOa3qeI=)
                          4: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl (hash: SgFbuozyhn5iESwqp+v9+f4vSjLhLRxFAHoUe9Lr+xA=)
                          5: pYMEzjMmoF7fFNP0-wloJu6W4vc.roa (hash: IL07ig7Bpq656fWNgVYspfIH+B2/5c+7wcjKfg/Ljo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:4a:f8:07:e5:df:48:2e:aa:74:d7:ee:65:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
        Validity
            Not Before: Jun  7 18:00:40 2025 GMT
            Not After : Jun  8 18:00:40 2025 GMT
        Subject: CN=0c37b9a0e166ee394cca46df20f65bc764d36ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:fb:a7:ff:fd:a8:1a:b2:6b:3f:b4:1d:59:
                    3b:9b:40:64:84:42:fc:98:f0:9a:06:43:e3:3b:0f:
                    69:58:36:22:d0:ba:b1:c0:b1:9b:2c:02:a7:0b:fd:
                    cc:f4:b7:31:68:06:04:78:82:f2:36:3d:29:1e:66:
                    11:35:60:f8:6b:8a:ce:c7:67:dd:8c:6b:80:23:ef:
                    42:bc:fa:b1:2a:cc:d9:66:2f:ae:f9:e8:41:3c:3a:
                    ac:ac:1f:77:40:46:cf:2b:d7:d0:71:c7:f6:ea:74:
                    23:ac:14:b3:b3:53:74:a9:76:34:67:c1:32:e6:31:
                    7f:6f:9c:0c:a6:a0:be:51:1e:4f:02:38:47:00:b6:
                    5e:1d:5e:9d:cd:16:be:f3:b3:2e:cf:d8:41:80:28:
                    b3:76:e2:a9:18:9e:47:11:7c:68:00:79:72:ce:b8:
                    2e:ab:82:d1:f2:e7:cb:e8:a4:d3:53:1e:cd:37:ab:
                    d2:77:dd:11:23:13:e1:99:0f:0b:b8:26:3e:3b:4c:
                    b2:0e:23:be:41:5f:33:1a:d8:9a:e2:f1:39:3e:88:
                    e2:46:50:58:37:94:83:9a:69:8e:c4:9a:39:0c:31:
                    09:bf:7a:50:30:8e:a2:a5:57:df:ec:9e:22:50:6f:
                    e4:05:2c:77:7d:fc:9b:9d:ee:31:88:92:9a:f6:d2:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:B9:A0:E1:66:EE:39:4C:CA:46:DF:20:F6:5B:C7:64:D3:6E:CB
            X509v3 Authority Key Identifier:
                keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:b3:c6:a6:34:e8:75:11:bf:06:3d:b4:88:59:2e:bb:cc:
         4d:70:5d:89:f2:31:7a:07:8e:fb:81:a3:aa:85:12:cf:fc:bb:
         43:6f:1e:24:88:ec:03:ff:b9:ab:8e:05:4e:ad:1f:49:a0:85:
         19:83:83:ee:d8:f9:9f:a3:88:4a:07:e8:2d:1e:e3:a6:8e:ce:
         7d:ca:e5:a1:ff:8a:b7:ee:44:8c:8a:02:d9:27:a3:ae:f1:71:
         3f:72:bf:06:fe:d4:1e:0e:af:ca:3d:ca:d7:da:2c:4e:59:56:
         e3:be:2d:fc:f9:a0:1d:b1:d0:7a:1b:8c:fd:06:a1:c1:51:d5:
         0f:e0:aa:96:50:24:b0:79:55:b7:c1:a3:e7:44:15:9e:7f:fb:
         85:dc:5b:18:26:c5:4f:27:ab:09:48:ca:dd:18:73:9c:50:3e:
         c8:71:dd:d3:c4:9d:d0:f8:70:5f:74:d7:63:1f:8d:58:2b:1d:
         99:25:ae:88:af:c2:5e:38:aa:97:0b:92:94:16:39:90:fc:b1:
         8a:eb:cc:0c:18:57:93:55:5f:71:6b:b7:40:88:32:1b:05:f3:
         40:61:2f:06:84:43:0a:ad:55:de:ae:28:8c:33:e3:49:28:6d:
         00:27:3f:76:58:cc:d0:97:cb:50:6a:ca:b8:e9:d8:83:ea:d0:
         fd:cd:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:58 2025 by rpki-client