Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          /zvKAW0MWhjXKvKa1V+PtS6UAe0yVRQj0u1QVDTcy4A=
Subject key identifier:   6C:71:61:D5:7D:B8:9A:45:9D:51:88:F7:38:20:A3:80:AA:09:FF:B6
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       01975046A164B49280166BE8CD87D2E0EE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 16:01:35 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:35 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:35 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: j3ReDHHooq2uuXsAqv+XrL4hplUZv8GhmhnukGGFnsM=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:a1:64:b4:92:80:16:6b:e8:cd:87:d2:e0:ee:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Jun  8 16:01:35 2025 GMT
            Not After : Jun  9 16:01:35 2025 GMT
        Subject: CN=6c7161d57db89a459d5188f73820a380aa09ffb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:ce:75:0c:b1:d9:59:1f:05:17:3b:4c:50:
                    bf:c8:cb:0b:69:20:22:33:f6:d3:94:8d:ac:77:ee:
                    98:ed:24:b9:1a:3a:ca:f4:98:59:78:2d:db:c7:50:
                    b5:9e:d3:54:7c:14:b8:21:e9:39:87:c6:db:67:3b:
                    bf:91:54:24:70:ac:13:64:4e:8d:b0:44:1c:86:09:
                    51:e6:ed:6d:7b:47:e2:10:a8:59:b7:f3:dd:7a:51:
                    0c:72:37:4c:cc:5c:bb:4d:71:0d:fd:7b:38:c0:d3:
                    86:a6:cb:6e:b6:93:06:a7:55:14:00:f2:7e:c9:91:
                    41:64:6a:02:92:57:55:da:ea:ff:46:c8:3f:3c:7d:
                    72:7f:31:15:00:e1:4f:b8:3c:28:91:77:92:b6:6e:
                    38:82:3f:9b:2d:b4:80:90:77:c3:63:8e:3b:aa:1f:
                    7b:13:bd:8d:40:06:8a:a9:ec:82:02:61:b2:08:d1:
                    ff:8c:89:6f:8c:74:9f:25:85:3e:00:8c:8f:6f:5f:
                    b7:4a:43:1d:be:79:17:28:00:36:2d:b4:56:60:2b:
                    64:5c:cc:38:77:6a:15:13:ba:74:d8:e3:fb:42:95:
                    34:44:dc:8e:89:4a:a3:5d:7d:04:b1:67:5c:c1:ba:
                    df:1c:3f:f6:e8:03:80:54:b1:93:00:19:ae:4e:8f:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:61:D5:7D:B8:9A:45:9D:51:88:F7:38:20:A3:80:AA:09:FF:B6
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:fa:05:62:1e:37:98:65:dd:6c:e5:90:73:d4:71:3b:1b:
         9c:97:7e:fb:d7:04:25:07:c7:f8:b0:45:59:28:c1:9d:27:9b:
         d8:7b:84:a2:c2:87:49:4e:42:e3:bc:3d:66:0a:94:16:1e:a6:
         e2:c1:19:33:4e:e2:ab:23:5f:74:3c:c6:de:16:6c:69:90:2d:
         97:f7:7c:ea:24:b3:18:90:2a:d2:0b:76:3f:e6:73:75:41:05:
         a4:6f:49:a2:f0:99:1f:22:b7:d5:ca:b0:a9:97:e0:b2:cc:b1:
         3c:51:7f:5f:50:c4:dc:2f:5d:31:0c:66:c8:dd:d8:f9:a5:ec:
         7c:26:ff:90:0a:da:9f:40:57:7f:bc:bc:d9:2a:b3:91:b0:ca:
         2c:36:30:f5:03:77:49:93:37:13:ca:75:f8:67:4a:90:01:3f:
         e3:d6:4e:18:78:16:28:81:57:b9:0f:69:8a:80:bc:77:96:94:
         4a:65:5c:05:51:c6:a4:6a:ad:75:e1:e3:a6:f5:54:04:bd:e3:
         51:86:27:f1:6d:67:75:85:9f:76:92:b8:c0:c3:af:66:2f:d6:
         38:f0:a2:19:d1:89:1d:fb:13:c9:ef:b8:10:43:f3:61:4b:ca:
         5a:24:28:c5:0d:91:d8:55:de:a1:59:11:35:f6:53:67:a0:ad:
         25:ef:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:40 2025 by rpki-client