Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File:                     rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier:          okLLnLpTJmj6qddVU2KOn9w6M6AE7ELhc5ZUP5LvUhk=
Subject key identifier:   3B:53:E6:4E:CA:51:31:B7:C9:7B:62:B0:87:B9:32:87:9C:22:35:BD
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer:       /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial:       01974FA0C08008ACCEF8E8720B72491A9524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 13:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:24 +0000
Files and hashes:         1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
                          2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: ZFGJCD8SM3HTMvKt8qZFTqXogPRFLsRIqq/P/2sPemc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:c0:80:08:ac:ce:f8:e8:72:0b:72:49:1a:95:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
        Validity
            Not Before: Jun  8 13:00:24 2025 GMT
            Not After : Jun  9 13:00:24 2025 GMT
        Subject: CN=3b53e64eca5131b7c97b62b087b932879c2235bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:68:8f:a2:56:b8:50:2d:4f:ba:22:5a:c5:
                    d6:51:67:97:e8:65:aa:89:e2:e7:f4:ae:4d:c9:eb:
                    b7:d7:66:09:30:48:16:ef:f2:c7:cb:4a:64:08:14:
                    6c:a4:c6:a6:c4:02:5b:5b:42:a8:8b:53:87:9a:d0:
                    56:6c:be:a1:55:ba:fa:ac:60:45:47:9a:db:cd:16:
                    25:51:3f:a9:31:93:b8:80:f6:bd:07:50:3c:c0:93:
                    09:6d:ae:22:54:a0:a4:9d:fe:c3:e6:aa:93:22:8e:
                    ee:53:9d:4a:65:78:20:94:59:16:ad:5e:90:c0:0d:
                    45:09:60:f7:bb:53:07:b2:15:ec:a4:d5:f3:b4:ae:
                    4b:f0:21:08:cf:e5:8c:13:2a:29:f2:44:6c:4a:8b:
                    89:1f:50:fd:29:59:67:c2:13:a8:4d:4f:3e:8c:91:
                    6f:9d:69:02:c1:0b:ec:97:16:ad:d3:37:4a:f9:74:
                    d6:20:23:25:b2:57:2b:a9:f9:c7:6b:23:ff:95:72:
                    4f:ca:40:58:32:49:73:d0:ae:1c:26:63:17:2a:c1:
                    ca:4d:29:6a:f6:4f:78:98:be:c4:8b:f8:e6:6b:4a:
                    d8:38:7b:e9:26:a4:21:1e:4e:04:0b:72:b0:bb:6f:
                    2d:a0:06:40:e4:4c:9c:f1:21:7b:8e:4b:50:a0:26:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:53:E6:4E:CA:51:31:B7:C9:7B:62:B0:87:B9:32:87:9C:22:35:BD
            X509v3 Authority Key Identifier:
                keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:16:54:19:72:d5:a4:3c:10:4e:90:8a:6a:69:38:07:cf:bb:
         ff:b6:0f:c1:d4:71:7e:72:bb:40:80:96:c0:d8:de:b3:b5:40:
         4a:ff:ae:74:f4:cd:15:0c:6a:32:22:44:a1:54:5b:fb:c5:f8:
         3d:71:36:59:d3:d9:41:c2:6e:a9:68:97:2a:aa:e7:65:98:62:
         00:18:82:52:75:df:40:df:1b:a7:f5:89:6b:67:1d:24:67:7d:
         f8:4b:93:4a:cb:72:f0:3f:31:4d:68:8e:6d:d5:94:06:ac:e8:
         ca:78:7e:5d:50:10:1e:98:c6:58:50:30:e3:60:b4:06:16:21:
         86:dc:af:64:8d:5c:8d:60:dc:61:f0:1d:86:78:1e:43:dd:ea:
         03:ec:75:4c:ca:95:fa:12:5f:48:b1:09:03:9d:83:8c:fb:79:
         bd:e5:66:b2:ee:a3:33:da:9c:20:f5:44:2e:ab:2a:01:19:70:
         75:6e:f8:8c:4a:e1:0f:a1:9c:75:8a:b6:a4:36:40:c7:13:45:
         10:1a:31:61:73:d2:32:a9:ba:6c:d9:ff:93:48:14:3d:a5:0b:
         4d:c5:62:d8:be:a3:b0:de:ca:91:8b:ba:d4:2f:32:c3:ec:16:
         ee:93:fc:26:23:9c:d2:50:1d:97:9f:2a:01:06:e1:87:d6:72:
         30:1c:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:23 2025 by rpki-client