Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File:                     hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier:          8m3q/eljWpwkSmN0E/V5EuFXuK6D5cfNdJpTi8fGziY=
Subject key identifier:   A2:61:BE:C3:CB:27:4F:67:E7:F2:BA:CD:B4:FC:65:B0:52:E8:AF:9F
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer:       /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial:       01975FB8F59291D9B46F083AAD030F9E5079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 16:00:46 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:46 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:46 +0000
Files and hashes:         1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
                          2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: xDHKdKWOfEeijMAnptVPCd4YJBD6uJQquOjS7Lfvu/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:f5:92:91:d9:b4:6f:08:3a:ad:03:0f:9e:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
        Validity
            Not Before: Jun 11 16:00:46 2025 GMT
            Not After : Jun 12 16:00:46 2025 GMT
        Subject: CN=a261bec3cb274f67e7f2bacdb4fc65b052e8af9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:71:47:74:aa:4e:46:3e:98:e1:ef:e1:0b:
                    83:c1:05:e2:b1:40:46:f3:9a:43:ae:b4:6f:df:6a:
                    cc:64:c5:7b:7f:db:4a:98:6d:6a:47:7a:fe:99:f3:
                    7a:ab:53:45:20:cd:38:68:5a:57:f8:ae:94:45:8f:
                    2d:c1:dd:8c:ca:1b:ad:04:a9:4b:5b:ea:6c:26:6b:
                    7b:2f:75:0c:7f:1d:be:45:57:1f:92:af:e9:b4:26:
                    ce:fd:80:00:82:f1:cc:8f:45:5a:b5:39:53:32:fe:
                    bb:61:fb:32:b9:0d:76:f4:45:f5:cc:7a:18:1e:90:
                    90:c3:93:d4:af:e1:13:7b:97:5a:c0:09:c8:b8:b7:
                    4e:4c:81:49:0d:e6:5e:f8:6e:d7:d8:de:7b:ab:b9:
                    36:9c:80:c2:5f:13:a7:b3:b0:cc:b5:8d:ea:d9:86:
                    fb:47:eb:cb:74:eb:9f:20:b5:c3:03:59:89:b1:6a:
                    2d:25:b4:5b:9d:ce:3d:81:ca:3c:29:44:a5:5c:b7:
                    98:82:31:d7:da:1f:24:b5:e4:63:be:10:14:27:22:
                    aa:87:88:d4:d1:07:1a:c9:da:32:4d:86:c8:f0:5c:
                    16:5f:92:32:e6:c7:d0:a9:21:39:eb:8d:53:ba:5e:
                    cd:20:90:b4:f8:72:71:aa:2f:f7:a6:c0:e7:1d:4e:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:BE:C3:CB:27:4F:67:E7:F2:BA:CD:B4:FC:65:B0:52:E8:AF:9F
            X509v3 Authority Key Identifier:
                keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:ea:10:a3:91:df:99:e1:cf:44:29:8c:4a:0f:ce:43:f7:
         69:36:51:b6:4f:a4:6a:d7:6b:bf:1e:24:29:25:1f:16:00:65:
         29:1f:a0:65:96:e0:f7:81:e7:fb:af:61:14:79:f9:5f:bb:bd:
         2d:4d:42:77:54:38:f4:94:77:b1:92:b3:8a:80:5e:c3:4b:69:
         2f:70:70:9a:83:02:8e:ea:77:42:6b:99:14:1d:d6:56:1c:07:
         16:7d:59:a9:8d:3b:e1:6f:17:76:7b:7c:51:33:9b:ba:85:60:
         d6:2b:49:c8:3e:9f:62:83:f8:1e:b8:8e:31:98:12:eb:6e:c5:
         2d:91:37:a1:42:fc:5c:b2:a4:98:93:69:f9:dc:a0:d8:21:54:
         b5:19:5b:56:4e:57:e8:c2:b1:df:a0:48:12:e8:15:a1:84:55:
         31:77:c7:92:31:28:32:bd:d5:f0:61:09:6c:b9:9c:82:25:92:
         a6:4a:9f:9c:76:1d:d4:29:10:3b:bd:0c:39:04:76:8b:5d:e7:
         8e:89:19:82:e5:b2:46:30:6b:50:e6:b2:43:53:e9:0d:40:7f:
         f6:db:3c:80:23:a1:c7:52:30:60:bd:1a:cb:8f:d7:3d:b4:9e:
         7e:f4:31:2b:1f:80:69:31:ae:97:ed:47:48:91:1c:be:33:04:
         4a:b0:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:14:54 2025 by rpki-client