Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          DopLXIbmmlCJjO80iAa+ooUnmu8KJ9W5Hw4+diYiyv8=
Subject key identifier:   8B:64:77:AF:A9:E4:44:6D:E9:BF:E0:D5:64:4C:2D:B3:30:E9:9D:CF
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       019757C84D8574C721B58CCB8AE36D306DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          1588
Signing time:             Tue 10 Jun 2025 03:00:34 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:34 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:34 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: WJl6QCqJF3++0FYSQDW0PNhVZyfLQTPVO6Zwi+h4LR4=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:4d:85:74:c7:21:b5:8c:cb:8a:e3:6d:30:6d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jun 10 03:00:34 2025 GMT
            Not After : Jun 11 03:00:34 2025 GMT
        Subject: CN=8b6477afa9e4446de9bfe0d5644c2db330e99dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:ef:93:f7:c3:20:22:93:18:c5:33:2f:0e:
                    ff:34:97:2a:c7:3e:42:e0:46:02:62:f9:f9:5e:e0:
                    40:13:a2:7f:96:c5:9d:dd:a6:5e:df:3f:19:d5:49:
                    d3:cd:50:62:ba:dd:00:98:4b:bb:f6:f9:20:61:61:
                    cf:75:44:96:1d:96:5b:bf:cf:c3:67:3a:2b:eb:4e:
                    4e:fb:98:94:e2:f8:48:11:4a:b2:94:97:e6:2a:a2:
                    65:66:5c:c7:99:be:ab:b5:a7:6d:28:aa:6c:c0:d1:
                    3e:15:d3:39:ef:e0:82:e2:cd:5e:16:d6:50:c7:3b:
                    aa:36:00:b5:4b:70:44:86:74:ad:d5:09:3d:67:4f:
                    2f:04:fe:64:d4:7c:0a:ca:ff:4d:e4:2f:aa:9d:90:
                    4e:9f:ab:74:80:00:ab:8f:e1:03:18:38:e1:b6:a5:
                    1a:a1:b1:9d:1d:99:ae:57:bc:22:c8:e9:a4:42:b9:
                    fc:f5:7d:2d:0d:fa:e3:ff:62:c7:2e:ec:0b:6a:4a:
                    f7:a8:be:5a:47:fd:a4:63:6e:89:9e:cd:32:74:af:
                    8b:9a:5f:20:7f:af:db:24:26:6b:6e:73:48:24:7c:
                    da:f6:98:16:7c:bf:f4:37:59:00:6e:62:c7:c8:21:
                    c4:0c:4b:77:df:6c:58:8b:9a:8a:11:b9:94:35:ad:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:77:AF:A9:E4:44:6D:E9:BF:E0:D5:64:4C:2D:B3:30:E9:9D:CF
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:be:e1:5f:fe:39:46:d7:49:40:5f:46:c6:12:1c:6a:15:
         97:30:69:49:7d:ac:37:eb:99:99:02:ed:d8:b2:d7:bd:68:b0:
         b3:e0:ec:4e:c2:f4:02:45:e5:ce:f4:7e:5c:ad:af:7f:c2:a0:
         13:6b:56:a4:d0:45:ac:50:76:fc:6b:9a:34:ef:c3:55:3c:3e:
         2f:4d:17:01:ed:05:46:1e:71:27:e9:7f:63:e8:a8:57:cc:20:
         d5:fe:0f:60:8f:ed:83:66:a4:ad:a9:1e:5d:58:04:53:df:b2:
         95:ab:ba:d5:d9:46:c3:3a:d3:bf:b3:d2:47:9f:2d:1b:54:1f:
         87:96:53:9a:d8:b1:69:53:dd:6c:eb:0e:6f:57:f2:77:33:57:
         7a:74:04:95:ba:7d:bc:b9:63:9c:b5:19:c7:05:23:b5:31:ac:
         12:14:10:0e:2b:4b:e4:11:15:f6:1b:d1:4c:80:18:a2:52:50:
         4a:f4:22:54:22:42:79:9f:2a:52:a3:ea:df:39:5d:28:5c:16:
         b2:1d:de:ce:1c:86:da:b1:77:f6:64:5b:0f:ff:75:ab:ea:1c:
         3e:58:98:71:aa:e2:09:e9:ac:2d:dc:68:41:f1:a6:be:43:b2:
         a4:74:85:19:04:85:41:c5:a0:1f:bf:f7:e9:b5:9a:7d:e1:f9:
         e6:93:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:22:57 2025 by rpki-client