Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          IrvKUIHeQqLz4hXk+HUFNkBYn4nEZFrfCkaSd2+1iDk=
Subject key identifier:   6D:2C:78:8B:07:FF:33:CA:EC:47:B5:80:DF:62:00:1F:DC:38:78:73
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       01974A0CBBD0C54D179A5897B18623E5DC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          1585
Signing time:             Sat 07 Jun 2025 11:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:37 +0000
Files and hashes:         1: 72fMUbgrTDPPo7cUu15VnQvLNWQ.roa (hash: RvxteBLUmDvyXH+S4lsSzz7zQ7LVEwbzwy16GpnGfc8=)
                          2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
                          4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: ++Kb4co2413eu2KclNcAwhwBHwDcAeYThgj7tos8gbM=)
                          6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
                          7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:bb:d0:c5:4d:17:9a:58:97:b1:86:23:e5:dc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jun  7 11:00:37 2025 GMT
            Not After : Jun  8 11:00:37 2025 GMT
        Subject: CN=6d2c788b07ff33caec47b580df62001fdc387873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:66:3b:89:b9:84:fd:59:fe:00:4f:80:62:
                    bf:0b:79:5b:ad:d3:2c:d9:5c:59:3e:ab:1c:c3:5a:
                    9e:05:64:bd:8b:09:bd:06:c5:14:55:17:11:0f:86:
                    bc:ce:7f:c9:89:13:8e:ea:f5:b0:e2:59:9b:1c:93:
                    42:e2:aa:b6:27:94:d3:61:95:6e:c1:5c:35:8e:f8:
                    af:d3:8b:00:ef:a4:c4:f6:89:5c:24:65:e3:29:f9:
                    3d:f3:b6:44:c8:79:ab:08:e7:83:82:28:8f:6b:b1:
                    47:b5:03:98:eb:df:51:8b:6d:89:7e:e7:d1:81:fd:
                    8d:95:89:26:ad:b6:39:c3:d7:58:04:05:65:9b:09:
                    04:68:9c:26:22:92:3d:91:f2:b5:6f:68:f4:da:ba:
                    9a:09:6b:6f:1a:9f:61:5b:b3:c3:dc:ea:8f:a3:46:
                    7b:73:6e:f2:ae:99:20:26:1a:38:e1:8c:21:44:16:
                    8a:dc:48:ab:63:18:47:e2:98:eb:35:97:17:61:6c:
                    63:e7:ba:5b:56:70:70:b5:50:e6:a8:75:af:d7:bf:
                    8f:57:68:22:89:69:00:b2:ce:07:b9:1b:3e:c5:26:
                    ba:77:07:7a:69:ca:c9:92:8a:67:c4:5d:c5:52:19:
                    26:27:83:f7:cc:1a:a7:34:ad:ab:6f:67:f8:a4:78:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:78:8B:07:FF:33:CA:EC:47:B5:80:DF:62:00:1F:DC:38:78:73
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:75:18:62:0b:8c:8f:37:d6:70:c2:04:9a:17:c8:22:fe:f0:
         da:d7:14:ca:75:cf:28:b5:ac:e7:64:24:51:3d:1a:a4:7c:c4:
         26:8d:ab:7d:0d:4e:a8:4e:df:50:5d:f4:80:06:19:ac:7a:e8:
         83:07:d8:a4:81:61:be:36:cb:08:da:58:5a:1f:f5:5d:aa:a2:
         d9:b7:cb:8d:dd:68:c1:73:91:81:e5:8c:c2:e5:fc:07:77:2d:
         30:2a:c6:7f:01:4a:26:05:2d:24:45:84:5d:40:a2:34:54:ee:
         2b:04:88:8d:20:e9:cd:06:3e:bb:28:ad:6a:98:94:48:e7:c3:
         48:ac:00:e6:c7:81:57:d6:70:75:73:f9:14:6b:25:82:80:fc:
         0e:01:35:85:0a:a7:42:c1:54:61:68:bf:2e:a1:ec:82:9c:c4:
         f2:fd:b8:29:1b:ca:cc:d6:c3:aa:5c:88:fd:be:4d:e0:8a:61:
         1c:0a:68:fa:99:9a:30:0b:02:69:53:2f:92:bc:b8:60:3e:94:
         4a:4c:89:13:e9:0b:ca:ba:71:bb:d1:3e:c9:74:df:a0:ea:e5:
         10:15:38:8f:09:07:b2:8d:4d:c2:7e:93:14:94:be:4e:9e:69:
         83:37:36:bb:c4:8b:51:40:4b:8b:28:85:0a:0d:05:bf:29:06:
         54:44:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:48 2025 by rpki-client