Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          /9ehF5uWEZj3gG27FsX9y3+rIRbt7CVQPCkn7RMmWYQ=
Subject key identifier:   DB:E5:93:B5:7F:FF:1F:FB:39:55:8E:B7:DC:45:5B:EE:AD:A1:24:84
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       01974742D982BA0BC0F51C9611302C894933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          1596
Signing time:             Fri 06 Jun 2025 22:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:52 +0000
Files and hashes:         1: 71ShF1BCLjj0zaSeXk0AMT8blX8.roa (hash: e2hez6w1xM1fmLGyeGjPMPTWmBAzD8pwvbWMd9Ngygs=)
                          2: OP-qluzkX5DpP--tqOyTqe3xHcQ.roa (hash: jbnp8pZaghnbGo5f+Z7LlRrvT6qH4dxP9RPLOACmte4=)
                          3: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: hMzsZduckaLTaOMof1m3aBj5S+dMAKaMywP0/LITe4s=)
                          4: kPZEIQD00f54ZqT4l8jT3U6aQnM.roa (hash: +0mivRqNtYBY/xMUeXXOLBAXk2BX+gr2q/xuFmdEA2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:d9:82:ba:0b:c0:f5:1c:96:11:30:2c:89:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Jun  6 22:00:52 2025 GMT
            Not After : Jun  7 22:00:52 2025 GMT
        Subject: CN=dbe593b57fff1ffb39558eb7dc455beeada12484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d2:1e:d4:8a:0c:7a:e8:fd:29:24:b3:ea:d2:
                    78:7a:34:c9:ac:d8:2d:5f:77:87:a4:11:d3:09:df:
                    f1:54:97:68:47:e7:88:b8:88:76:d5:86:e1:79:6c:
                    8b:95:de:81:2d:9f:64:57:de:e2:29:73:1c:33:2a:
                    69:78:59:45:67:3f:4d:28:d6:9a:d8:51:47:3f:16:
                    4b:8b:8b:21:e2:e0:4c:95:41:f4:4e:19:99:f3:85:
                    cc:a1:7b:54:53:9c:c6:6c:94:89:53:66:ce:8a:83:
                    03:d9:46:30:ec:9e:a2:05:90:3d:60:10:d1:07:65:
                    19:53:f0:78:7e:89:b9:44:60:50:de:e3:18:aa:d2:
                    d4:87:06:90:e9:a3:29:a6:ec:88:b5:7a:3d:a7:e1:
                    07:06:a0:b1:38:05:e8:34:b1:a9:61:65:43:c3:20:
                    cc:17:aa:a2:3b:8f:b5:26:d9:25:db:0c:f9:fb:31:
                    82:1b:b9:6d:68:3c:cf:b2:ea:30:1e:89:0a:df:a5:
                    fe:2d:17:a8:74:ca:95:6a:56:cb:a6:19:5e:b3:9e:
                    16:a8:c4:43:41:74:fb:75:59:af:e2:89:1e:de:da:
                    58:99:e0:fe:fb:9f:f9:1c:c9:f3:73:bf:d5:2c:60:
                    ff:95:2e:6d:f5:8e:82:5b:15:f8:4c:1e:f0:f7:de:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E5:93:B5:7F:FF:1F:FB:39:55:8E:B7:DC:45:5B:EE:AD:A1:24:84
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:74:25:0c:21:c3:85:d8:dc:6b:8b:e6:b5:93:f5:54:92:12:
         ec:c9:9c:a6:c1:86:5c:a3:8d:59:83:5e:fd:94:0c:43:ff:65:
         2f:4d:d7:4a:9a:88:84:ea:7b:9c:ea:42:99:2f:94:3c:2b:6d:
         40:21:29:f5:c8:0b:b8:3a:06:70:cc:7a:06:b9:89:54:89:6c:
         07:35:6d:13:93:02:e6:a2:80:ae:27:8c:bc:fb:29:97:9a:ec:
         7f:a6:6e:30:a8:cb:30:95:a8:7c:0a:f9:ce:ba:d0:c8:25:0f:
         07:2e:59:78:fc:06:8b:72:c6:94:c2:85:ef:2d:f5:11:f4:24:
         4e:c5:e9:04:bd:b6:ce:c9:d4:4a:88:e4:02:ed:a9:f3:1a:a3:
         58:96:51:6b:ad:4e:35:61:c3:80:87:b5:90:dd:62:3c:2a:95:
         1e:86:3a:6b:3e:05:78:83:aa:cc:52:ac:05:32:7f:7a:8e:36:
         6b:52:bc:d7:07:26:90:91:e9:2c:b8:9b:02:f8:a2:62:24:82:
         86:5c:38:c5:82:99:ef:33:3c:b4:19:58:07:53:a6:ae:ab:a3:
         c2:17:f4:f7:b9:04:63:24:cb:17:ad:6c:93:76:38:39:1b:cf:
         d3:40:1f:fd:e4:82:ca:ae:8c:1c:14:9a:8a:70:c3:1c:97:a2:
         92:97:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:46:49 2025 by rpki-client