Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          ybe8q7BI/C67TxjGOex+lMoRaeGo2FZNZ5COQ9PCjb4=
Subject key identifier:   E6:84:65:2A:A8:07:EB:0D:50:54:D9:2E:3F:4E:70:9C:32:86:32:CA
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       0197500ECAD2870837F52997AC9050E87D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          1589
Signing time:             Sun 08 Jun 2025 15:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:36 +0000
Files and hashes:         1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=)
                          2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: JqwWyaEkrMu9SVB+C3+zjC77/xNnr3Rw/ic0tha9VrM=)
                          3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
                          4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=)
                          5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:ca:d2:87:08:37:f5:29:97:ac:90:50:e8:7d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Jun  8 15:00:36 2025 GMT
            Not After : Jun  9 15:00:36 2025 GMT
        Subject: CN=e684652aa807eb0d5054d92e3f4e709c328632ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:78:a1:24:9f:2c:2e:6e:68:1c:ab:5c:f2:
                    d5:8e:47:b0:ae:29:01:e1:b7:07:15:0e:24:c3:da:
                    fc:c0:50:88:59:c5:d1:e4:3b:2e:3d:74:de:28:13:
                    da:bc:27:20:8d:a8:dc:ae:19:29:3d:0b:fe:48:d4:
                    f9:8c:a8:43:aa:71:d7:c6:6d:d9:a3:f7:c1:e5:97:
                    44:05:5a:38:5a:cf:7e:c0:98:21:27:c1:17:ce:0f:
                    d8:29:0e:36:39:ba:1e:e6:ec:2f:6c:97:ef:0f:21:
                    50:8f:e9:0e:a1:fc:dd:ee:77:96:63:d1:d6:f6:93:
                    a7:ba:4f:0e:69:10:f3:06:df:ed:67:74:ce:d2:9d:
                    78:2f:4e:93:e6:59:25:46:21:40:88:88:71:5e:87:
                    09:88:cc:2a:6d:cb:c5:10:c4:71:c0:44:eb:15:5f:
                    8e:b8:49:82:6c:65:3e:f6:5f:2a:e9:21:45:84:88:
                    3a:43:8d:82:56:ce:9d:fa:5e:e6:66:03:58:c1:cc:
                    28:6f:9e:cf:24:22:bd:dd:42:c8:e1:20:d5:19:f8:
                    11:ad:8c:4e:80:9a:9f:c5:2f:1a:db:48:86:20:ae:
                    e9:ec:19:8f:4f:fc:a0:0e:d1:ef:2c:fc:75:78:a7:
                    40:e5:0e:97:29:ed:bc:95:b0:3b:b0:26:6e:96:d2:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:84:65:2A:A8:07:EB:0D:50:54:D9:2E:3F:4E:70:9C:32:86:32:CA
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:51:04:4c:3d:c3:00:d7:e3:c6:19:0c:80:b2:8f:71:be:
         6c:c5:7c:80:e2:85:15:f6:d6:f5:99:bf:ab:a7:cc:cf:ae:51:
         0a:3c:83:e1:09:32:4a:ed:4e:b7:f8:1a:91:cc:40:6d:08:99:
         49:78:73:2b:c5:59:7a:31:b3:59:fa:ef:ae:12:30:50:22:14:
         00:b4:d9:21:50:40:85:f5:56:6b:e6:38:bf:43:1b:0a:b6:62:
         87:e2:5d:7a:6b:49:ef:97:16:22:e3:94:60:99:80:2f:5a:db:
         60:ed:1e:5c:fc:e1:14:cf:16:be:fe:b0:2f:93:17:4f:eb:d2:
         8c:09:21:c6:c4:bc:24:7e:1c:63:29:df:0e:ba:21:11:4d:92:
         39:2e:ce:21:25:66:52:1c:14:35:d1:0b:7a:4a:85:12:1e:90:
         ed:44:1c:b4:df:9c:a9:37:21:8e:0b:09:1f:9f:b6:73:f4:bd:
         4a:61:57:38:78:e5:88:c4:03:2e:07:14:29:fa:c2:a1:da:4e:
         a6:c7:28:02:dd:79:03:2b:17:32:15:23:ba:52:4c:7b:01:38:
         ec:a8:2a:1b:9f:9a:de:43:10:db:39:78:65:94:fe:9f:26:58:
         e5:50:0c:0e:7f:eb:af:1b:65:c9:32:7a:0f:52:e6:eb:31:94:
         be:97:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:08:26 2025 by rpki-client