Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File:                     flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier:          dpVK+XQBgtyL79x8yfXru5bZGD3EeM6pcb3tO9OKCkI=
Subject key identifier:   1C:DE:F8:3D:A8:25:8B:FC:6E:CF:43:C6:BD:FA:DD:B3:C9:72:32:05
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer:       /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial:       01974C3263CDFF571A08BCC72F1FDF599122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 21:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 21:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 21:01:00 +0000
Files and hashes:         1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
                          2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
                          3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: ijAmi5Ll7Sld4gLCI7KqBpLVQ6Kq6ANGmKklygxII08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:63:cd:ff:57:1a:08:bc:c7:2f:1f:df:59:91:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
        Validity
            Not Before: Jun  7 21:01:00 2025 GMT
            Not After : Jun  8 21:01:00 2025 GMT
        Subject: CN=1cdef83da8258bfc6ecf43c6bdfaddb3c9723205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:d8:fc:00:4d:de:b5:e4:a5:ac:69:ad:dd:
                    90:9c:e8:99:d6:2d:06:08:b2:05:80:9f:34:f2:86:
                    f4:35:81:bb:71:26:d4:03:14:f6:0b:4d:e9:b4:8f:
                    9c:55:53:06:41:98:44:68:3b:6d:3e:1f:33:66:66:
                    55:83:44:23:77:d7:7e:39:c1:78:e7:d9:c9:da:7c:
                    d4:9a:b0:28:36:b8:69:c7:34:87:77:66:7e:d7:29:
                    ca:83:a7:cf:90:73:0a:80:d8:65:ef:a5:23:4d:b4:
                    a7:c1:28:e9:67:44:b1:61:de:2d:a1:98:5f:57:c8:
                    81:e5:24:4e:c9:d4:79:88:14:da:69:57:4f:26:91:
                    7f:ef:c0:b8:e6:78:c3:e6:49:a0:3e:c9:58:0a:0f:
                    24:2b:ce:c8:f6:2f:92:3f:af:c5:ef:de:53:95:8f:
                    82:b9:28:f7:7d:f4:b4:e4:2d:22:3e:1c:23:95:4a:
                    50:6b:7d:1e:79:9d:98:7c:ce:ba:f1:8e:c1:ce:05:
                    05:f2:d4:67:d5:f7:28:b1:be:2f:1e:ae:bf:90:a9:
                    cf:c3:0c:97:37:78:05:72:57:7d:e2:bd:c0:78:d0:
                    d6:8b:a3:fc:ca:07:0b:4d:e5:4a:7f:e5:54:cb:71:
                    0c:43:d4:71:68:05:4b:03:04:d3:b1:4f:c6:88:32:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:F8:3D:A8:25:8B:FC:6E:CF:43:C6:BD:FA:DD:B3:C9:72:32:05
            X509v3 Authority Key Identifier:
                keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:17:5a:24:ea:d5:5b:af:77:54:79:db:d8:91:a1:16:fb:
         e0:6c:48:b8:fc:44:16:4f:c2:c1:32:90:98:60:ff:dc:4a:6b:
         fe:aa:1a:74:f2:ee:bb:39:f6:d1:0b:11:53:d2:2b:b8:e1:54:
         1d:03:6d:02:ba:c1:71:33:01:ac:09:e8:49:a8:2c:7f:0b:27:
         a8:0c:82:c7:c5:ab:90:f5:47:27:45:b1:6b:b7:e8:c2:06:46:
         a6:3f:37:31:7b:d5:47:4e:86:b4:4f:e0:bb:d2:8a:d5:f0:66:
         f5:96:7a:3e:12:98:88:6b:30:ef:31:7d:6c:4e:c7:7e:2e:e3:
         21:e4:86:d8:1b:af:41:58:cd:00:ff:45:6d:2e:0d:0c:51:87:
         48:de:d1:40:fa:9a:d9:a0:d2:ce:84:04:38:eb:ae:b7:ec:e0:
         2d:11:53:c6:69:8f:f8:97:18:25:6d:b3:90:4d:5a:95:d8:69:
         53:99:94:96:4b:c0:d3:19:b4:49:02:e8:31:3f:d2:f9:b6:d0:
         e9:a1:b4:04:b3:bf:b5:b0:2e:e7:18:57:7b:3a:22:72:13:d7:
         21:7b:d8:ef:be:69:77:4a:19:b9:18:b7:41:4d:3f:f1:42:f6:
         38:cf:41:f3:3f:49:7f:e9:1c:6b:8c:96:f3:55:22:14:a1:19:
         67:d0:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:40 2025 by rpki-client