Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
File:                     MeZZHRoE1q_h7V9O0B05SuUUhYk.mft (raw, json)
Hash identifier:          FJFcPNqdWLau0xdQ2tVx980JX0XC95t1AmvIWS7t4t0=
Subject key identifier:   A0:2B:1D:9B:A5:06:15:F8:26:AE:2B:E3:8D:EA:42:16:42:F4:C2:00
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Certificate issuer:       /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial:       019748C30942829DD81F9B007415C5DE696E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
Manifest number:          0577
Signing time:             Sat 07 Jun 2025 05:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:30 +0000
Files and hashes:         1: JhwNwII4YOfneNhA5yI11PtA4Rk.roa (hash: xDvSQcwSJJU3/GnqEWqCRE4KK2ZXksvwiDHhnfKzQ7A=)
                          2: MeZZHRoE1q_h7V9O0B05SuUUhYk.crl (hash: P742mXLG23+5AcKjOC6wZkHWIG9n88cGSbw0ozAJYlI=)
                          3: NJKcRgijhXh37gGjWUXBc4kdFrM.roa (hash: VgH49H33jw2zh7xceu9DxV5517h/9Lf09S+uqXMzIIo=)
                          4: fhtC19QCvGdf0Oc_EeWcXSC0cgs.roa (hash: W3l2bfxo/nDFx3boBX/Qrxp8uh2idkRpvnrRaDUWAME=)
                          5: l-1-sJYhOvDnP0vt97ZEE8EG64Y.roa (hash: a9IJZav4U9lQV/r8RFyllgV9eyE4dU00VcjenG9YGbw=)
                          6: yL32EH6JFTrCOhK8RiGGmgov4oE.roa (hash: cEac+CHXj7CTP1r+Y4KLas1tMJqLekECb13nf0gmkms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:09:42:82:9d:d8:1f:9b:00:74:15:c5:de:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
        Validity
            Not Before: Jun  7 05:00:30 2025 GMT
            Not After : Jun  8 05:00:30 2025 GMT
        Subject: CN=a02b1d9ba50615f826ae2be38dea421642f4c200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:64:e2:39:47:33:4b:fa:cb:2f:ca:b0:3b:
                    db:34:4b:d5:ad:2f:d6:ae:92:61:12:e8:50:73:96:
                    c0:f2:4b:b6:ce:e9:6a:0e:85:38:09:6b:48:8d:c9:
                    2a:12:1e:c3:01:e1:56:51:9b:7b:d3:22:e3:87:dc:
                    49:91:df:93:94:96:95:ea:c5:da:b3:5e:e0:33:88:
                    72:c3:75:68:85:e6:a5:e3:28:b9:fd:1d:30:56:5c:
                    7c:29:19:68:b9:bf:3f:b2:d3:ec:15:a8:07:55:74:
                    6e:83:b7:88:99:8e:14:a5:b8:56:d5:21:47:bf:3e:
                    45:93:eb:ec:4b:e4:45:38:c2:4c:0b:bf:91:fe:b0:
                    5f:ac:a7:4a:a2:3b:39:f9:6b:3a:61:c0:6d:6b:46:
                    08:90:8e:03:a3:76:a6:7b:40:3b:57:ae:cd:46:e2:
                    ea:2d:16:b7:5c:d1:76:aa:e3:0d:04:b5:93:9e:e2:
                    7a:f1:ab:5f:cb:87:14:05:75:c5:1c:9d:ef:cf:8d:
                    cc:83:ba:cb:02:88:15:be:f2:26:6c:da:1d:ae:62:
                    46:f9:bd:31:16:ee:af:05:61:03:42:35:ef:89:b1:
                    54:2b:a6:40:9b:01:45:ba:3b:83:51:26:8d:36:54:
                    0a:5a:d3:aa:31:43:db:da:78:bc:71:2b:9f:3e:62:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2B:1D:9B:A5:06:15:F8:26:AE:2B:E3:8D:EA:42:16:42:F4:C2:00
            X509v3 Authority Key Identifier:
                keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:58:60:03:3e:c9:11:3c:cd:81:cd:cd:a6:c9:e5:91:fe:
         60:72:fc:c8:4c:95:c7:ea:02:b7:c3:c5:b7:ad:90:cf:c8:60:
         65:d5:04:c7:09:9d:27:12:c0:a2:bc:fc:97:ee:b5:cf:ce:0c:
         3f:c7:ab:4d:05:a1:09:99:c1:7e:72:53:68:58:ba:fe:dd:8f:
         62:b8:9b:e6:f3:31:cd:42:38:7d:e7:1f:02:d6:68:09:95:68:
         e7:5e:8b:ec:2d:4a:f7:fb:92:e2:33:c0:43:65:f7:1b:80:18:
         2d:da:6e:07:69:ec:22:56:43:7e:9f:41:11:82:ef:13:3e:a4:
         55:de:d4:f7:e7:63:84:50:36:71:c9:f7:6e:64:93:fe:52:61:
         92:85:b4:4b:c7:58:e6:37:61:05:75:69:0a:a1:60:6c:7e:c8:
         5e:ff:d8:b2:b7:a7:f6:c2:fa:ed:69:ae:c1:26:ea:bc:b7:a3:
         f7:38:b0:8a:0d:82:25:74:40:ae:c3:5b:d4:c3:60:47:fc:e7:
         48:7f:8a:eb:ca:4b:e2:e0:2f:62:08:8f:81:53:d9:55:5e:3a:
         3c:52:ff:b7:a2:9d:47:c4:3a:fb:bb:1d:30:26:06:2c:51:74:
         69:7a:57:ad:a5:33:f7:84:79:b2:4f:ba:27:04:e0:79:f5:04:
         51:59:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:01 2025 by rpki-client