Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File:                     RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier:          vHfRhg+xKL8Kpi9r+JT4PCjQXO/8UkknChaJw9TW3KQ=
Subject key identifier:   70:2E:EC:FB:FF:6F:E6:28:55:95:6D:2D:CF:11:D4:46:DF:24:43:03
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer:       /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial:       019770755804E99829EACC23764B8ACB1372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 22:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:27 +0000
Files and hashes:         1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: trZBSFZOtjPQpFcCX003NSe3yydOK1NjHOuZkWA1Tcg=)
                          2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:58:04:e9:98:29:ea:cc:23:76:4b:8a:cb:13:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
        Validity
            Not Before: Jun 14 22:00:27 2025 GMT
            Not After : Jun 15 22:00:27 2025 GMT
        Subject: CN=702eecfbff6fe62855956d2dcf11d446df244303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:ba:ed:b8:1b:9c:da:37:c8:14:51:58:f3:
                    17:80:fe:31:c4:d4:29:75:fa:c0:73:a3:87:76:b4:
                    b3:2a:73:63:f1:b3:a8:1a:19:bb:49:51:5a:1f:c3:
                    bd:b0:1a:9f:14:d0:db:69:45:c5:2e:9f:97:a9:a6:
                    af:77:03:f9:63:f9:27:1f:c6:27:26:1f:b5:e3:1c:
                    ae:cd:0a:73:43:49:14:2c:d2:85:92:21:0a:38:a0:
                    d4:9c:39:21:0f:69:0d:f1:b4:26:ad:ed:dd:a6:d9:
                    bb:b4:9d:6d:c1:0a:81:89:f3:1e:9f:60:08:ac:5f:
                    ed:14:65:cb:1b:63:d2:99:24:6d:b8:f0:5a:6a:22:
                    47:3e:f5:41:e0:01:9e:25:40:63:24:9f:af:67:97:
                    c1:96:14:fd:e1:73:7d:00:6b:a7:91:3b:ac:8b:a1:
                    33:3c:0a:6f:43:93:2a:c4:60:fa:15:b5:49:01:e0:
                    9d:c4:a3:d9:6c:d5:88:a6:95:e1:3e:32:3a:10:b5:
                    9c:73:6e:63:83:3c:10:02:71:8d:07:f2:c2:a9:83:
                    db:69:9f:9d:00:96:b2:30:40:c5:d0:e7:6b:9c:59:
                    1f:4d:e7:41:97:de:34:e1:2e:d2:42:28:85:27:00:
                    e4:33:49:f4:56:f0:28:b1:d8:47:44:32:59:97:41:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:EC:FB:FF:6F:E6:28:55:95:6D:2D:CF:11:D4:46:DF:24:43:03
            X509v3 Authority Key Identifier:
                keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:af:b7:66:0a:cf:08:83:98:7f:b3:05:d7:77:6a:5a:fa:
         12:7b:94:5e:5f:1f:6d:a3:33:1b:8b:f0:00:ca:b3:3f:a8:7e:
         fc:6f:2f:93:ef:82:eb:84:25:2a:c3:78:14:3c:46:e2:33:de:
         9d:9a:80:07:2f:a9:fd:e3:85:89:01:cc:e4:e3:57:94:f0:16:
         7c:b3:9a:15:62:06:0b:40:66:ef:1d:b2:b0:da:10:c1:a3:3e:
         09:f6:7d:53:8d:d9:64:b7:5b:40:14:58:5f:e1:b8:03:42:5c:
         64:bd:e0:98:74:68:d6:58:46:d8:2f:20:53:b7:ab:e8:e9:36:
         20:fb:ed:db:33:01:b0:6d:93:99:5a:a5:eb:5c:51:bd:cd:ad:
         71:0b:36:96:9b:c5:d3:2e:56:2b:7c:8a:ae:6b:03:ef:d3:0a:
         64:82:38:15:0f:08:55:6b:46:a5:55:f5:6a:c6:4a:9f:03:3d:
         b5:88:b2:c5:6f:ac:5a:84:73:33:0b:94:22:90:23:c5:ef:c9:
         10:e3:67:2d:65:da:fa:3d:1a:f3:49:9e:b8:b4:2e:4d:83:64:
         78:4c:73:f6:d1:2d:dd:a6:b8:26:8a:28:10:66:35:fa:a6:36:
         e3:8f:85:a1:68:ab:71:ae:25:31:7d:ed:7e:29:e0:39:40:c2:
         ac:29:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:13:14 2025 by rpki-client