Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          Mn/irCNm2+ls831R0UVnUN2AC5uGcsoFkA0oxlc2oGo=
Subject key identifier:   79:3E:CD:5B:FC:4E:50:4E:E0:26:58:6E:FD:91:20:14:46:03:C4:93
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       0197469E3F01C097CB67164E4D597F033645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          1591
Signing time:             Fri 06 Jun 2025 19:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:05 +0000
Files and hashes:         1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=)
                          2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=)
                          3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=)
                          4: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (hash: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=)
                          5: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=)
                          6: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=)
                          7: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=)
                          8: Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa (hash: b/H/zEu0WFP2D/nRrX3BPfEmih42pvZKFxL8bEEPnXE=)
                          9: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=)
                          10: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=)
                          11: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=)
                          12: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=)
                          13: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: 4+2rOQfkSLPC/k4v+JkWX5B+Bw+KQAoktgg7Apyh8JI=)
                          14: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=)
                          15: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=)
                          16: poFYbbPGkTt6CCvX4o3TCsHpfsg.roa (hash: s1SNEkHqWiUfn1yNCntzkNwcArO1bOsbt3CndoD1K8g=)
                          17: pyjq9eTJ16BICExepyy4hHdzJBY.roa (hash: 1qL3K1S3vi6SKpgKIPcn0F7XdPnvihL3lLBBWXETN6c=)
                          18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=)
                          19: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:3f:01:c0:97:cb:67:16:4e:4d:59:7f:03:36:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jun  6 19:01:05 2025 GMT
            Not After : Jun  7 19:01:05 2025 GMT
        Subject: CN=793ecd5bfc4e504ee026586efd9120144603c493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:72:3c:76:47:11:59:a2:c9:9f:04:90:e3:
                    8c:d3:df:4f:d1:bc:f4:6e:2e:da:5d:fe:1b:52:93:
                    3a:a2:18:3e:87:06:2a:7e:30:08:04:e9:2a:24:fe:
                    63:85:cb:1f:2d:eb:8c:1a:a0:24:b1:20:29:f5:57:
                    6b:7b:2a:ee:d9:24:dc:90:91:81:64:a2:7d:2b:ab:
                    fc:75:cd:46:61:ef:e9:34:0b:41:a2:e6:e7:4f:0a:
                    41:f4:fd:87:3b:de:31:8d:9a:34:c5:15:b2:af:df:
                    49:f1:08:bc:fc:2d:57:99:af:b2:bf:98:95:a3:ae:
                    4e:46:67:89:f3:cc:4e:ea:b9:60:12:26:e1:cc:cf:
                    98:0c:6c:ca:d8:67:a6:53:d3:47:98:db:81:fe:cf:
                    58:ec:cf:cb:06:79:34:91:4f:a7:85:ec:25:2d:3d:
                    0e:f8:1d:91:0e:46:ba:f5:ef:c3:f7:ac:f5:e0:da:
                    85:9b:ba:70:dd:8e:ba:1c:40:91:1a:f9:0e:98:a8:
                    31:09:09:14:46:73:51:c3:3d:c4:5e:a9:b7:38:41:
                    3e:10:a3:74:98:19:54:5d:62:c7:a2:a9:73:67:22:
                    b5:db:49:ae:08:10:c7:74:87:26:47:d7:b6:7d:b5:
                    c5:85:85:37:39:f2:91:2b:93:a7:86:7d:12:20:6b:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:CD:5B:FC:4E:50:4E:E0:26:58:6E:FD:91:20:14:46:03:C4:93
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:78:25:3a:22:4b:da:8e:00:e6:14:38:90:59:08:05:c0:f2:
         9e:92:f1:f6:d8:91:bf:77:a7:12:0c:e4:59:78:a1:9f:6c:38:
         a0:b8:51:68:e5:fe:9e:51:d7:5d:7e:fc:1e:92:61:6f:a8:7d:
         e5:2f:96:33:2e:e9:21:4c:c3:27:57:22:34:5c:e5:76:ab:c0:
         e6:86:1d:4e:04:77:b6:2f:0f:e8:5d:f4:ac:47:5d:5d:04:c0:
         25:ba:9e:93:d5:24:c5:59:0f:8f:63:03:5d:d7:60:12:55:fb:
         b5:d8:a3:aa:85:81:9d:a8:13:17:82:36:55:c6:b5:46:a9:b6:
         d3:6b:7c:cd:ee:6f:e1:ef:d4:e9:cf:fe:4d:66:d2:0c:fc:ab:
         8c:9c:5f:c9:31:ac:d3:d9:3c:58:4d:6b:fb:4d:ee:6f:c0:5c:
         49:49:0b:a5:16:66:b2:1a:63:ee:4f:93:08:73:80:c4:9f:78:
         fe:5b:64:6f:25:17:87:dd:1c:c2:00:75:be:ed:b6:10:93:75:
         12:52:29:82:11:7c:da:22:0d:f0:95:80:9d:59:de:cd:ca:33:
         4f:d0:c6:a3:30:dd:1f:b4:8e:3c:38:f3:b1:3e:1a:74:ba:d8:
         1f:09:3c:10:e5:6d:1e:54:55:93:1d:7d:2a:65:62:09:7a:32:
         ae:18:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:36 2025 by rpki-client