Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File:                     mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier:          JRsVA5xL5VOTPV6+1C1te1m+doblGIBEKLReMEJmBz4=
Subject key identifier:   BA:03:A7:C4:D0:89:F3:C9:96:F9:67:EE:CC:3B:8D:07:7C:F6:77:11
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer:       /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial:       01976094B0DA65C9DB6590C97A0254E2CDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 20:00:46 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:46 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:46 +0000
Files and hashes:         1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
                          2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
                          3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: p9G4KAZnTCAciyyqvPrSXG83WsXjtWZqkUC6DPkZulw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:b0:da:65:c9:db:65:90:c9:7a:02:54:e2:cd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
        Validity
            Not Before: Jun 11 20:00:46 2025 GMT
            Not After : Jun 12 20:00:46 2025 GMT
        Subject: CN=ba03a7c4d089f3c996f967eecc3b8d077cf67711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:28:e5:b2:b6:0e:4b:92:46:10:18:6c:35:
                    51:6e:16:8d:dd:65:9e:b0:ea:de:a8:13:78:14:4a:
                    72:38:e5:37:0a:7a:6e:4d:90:c2:d0:67:6a:fb:c9:
                    bd:7d:4f:6b:b2:6a:8a:26:74:47:6a:c4:4d:8c:78:
                    31:3a:db:06:30:96:c0:b7:64:9b:48:86:e5:d5:2b:
                    d4:f2:ac:c5:12:96:b6:c5:50:8f:e7:a3:72:ee:bd:
                    78:00:6f:74:80:d7:42:ce:3e:34:3b:a9:06:54:5d:
                    2c:33:ec:58:42:dc:33:2e:ab:68:92:33:04:34:13:
                    27:b3:01:63:0f:88:ce:f3:00:72:84:6f:6f:fd:7a:
                    18:95:f9:f8:28:29:f5:65:c3:83:63:80:97:57:09:
                    e1:3a:c3:41:56:d2:d7:f7:90:40:41:d5:b5:13:33:
                    1e:71:72:50:69:9d:90:c1:ba:9e:bf:7c:60:1a:13:
                    f2:00:64:ec:33:3c:9b:df:c4:fa:c5:34:39:55:6c:
                    f8:f4:f2:ae:d8:43:bf:21:f1:7c:89:e4:9b:04:2a:
                    7e:09:8e:3e:6c:2b:be:f7:52:95:2e:9a:4b:db:25:
                    c2:2c:7f:82:ac:0a:53:af:51:5a:e2:19:ab:fd:44:
                    1a:8b:ef:fd:69:cf:44:80:93:89:94:2b:af:e8:64:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:03:A7:C4:D0:89:F3:C9:96:F9:67:EE:CC:3B:8D:07:7C:F6:77:11
            X509v3 Authority Key Identifier:
                keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:91:92:18:dc:f2:d2:46:e6:ad:a5:35:69:2a:19:60:8c:
         cf:08:8e:fd:1a:7d:f0:13:78:fb:06:7f:73:f7:92:fa:87:e2:
         ff:4d:0f:d2:15:7f:d9:ff:8e:c0:d8:cb:5e:40:0d:84:a4:c5:
         67:de:3b:e0:ed:aa:b2:b5:91:89:f3:bb:e9:08:2c:d3:5d:17:
         88:4c:6c:6e:f4:1a:49:b1:23:38:45:fc:9b:be:a1:87:0f:84:
         04:1b:4b:12:59:f6:e0:9d:c1:e7:12:03:f1:36:d8:61:9d:55:
         26:7f:93:07:4d:cf:b6:f4:c5:3d:88:d6:a6:02:37:2a:03:f1:
         ca:7b:96:37:81:06:91:36:f7:a5:e4:88:af:b7:27:61:48:d1:
         1f:9e:ff:a7:9e:1e:cc:22:87:74:30:4f:4d:7f:59:d1:19:90:
         34:b7:3b:27:7c:1a:a0:aa:4e:a6:ce:d8:5e:ff:f4:f0:ed:cc:
         a5:9c:06:29:b2:5f:6f:b2:f9:c6:48:ad:45:00:36:10:d7:40:
         96:6e:d4:2c:7b:63:b3:b0:b3:94:0c:83:fe:0f:36:c7:84:d9:
         80:7d:2d:26:6e:27:85:f9:fc:fc:6d:ee:6f:8b:f5:47:be:89:
         86:4a:2d:18:56:8f:6b:e1:72:06:7e:38:a1:04:93:f3:f2:61:
         12:15:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:07 2025 by rpki-client