Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File:                     gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier:          uT3OhLJrOD2ThjPu2asGDgOgyqki/S/EyenRCdwmrOE=
Subject key identifier:   F6:76:BD:72:4F:24:08:A0:93:FA:29:F3:89:7C:13:E9:9B:C2:B5:7D
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer:       /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial:       019750EAE0E63ABBD154C847003962349444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number:          1584
Signing time:             Sun 08 Jun 2025 19:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:59 +0000
Files and hashes:         1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
                          2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
                          3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: pdPLUutql4/Xt5JrR7xdRSDN/kKECQcJAhtHKDQKIsE=)
                          4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
                          5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:e0:e6:3a:bb:d1:54:c8:47:00:39:62:34:94:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
        Validity
            Not Before: Jun  8 19:00:59 2025 GMT
            Not After : Jun  9 19:00:59 2025 GMT
        Subject: CN=f676bd724f2408a093fa29f3897c13e99bc2b57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:e7:7a:dd:f8:75:38:1a:62:66:0e:c1:07:
                    d7:f7:dc:7a:9a:5c:28:d9:ad:32:70:e7:ef:bf:94:
                    42:42:04:e5:16:55:45:bb:d2:79:bb:e2:06:bf:5d:
                    eb:df:f2:bb:46:8d:56:4e:ef:b8:ae:35:43:47:bb:
                    a7:cf:52:47:90:56:c9:ee:4b:e7:5b:49:d1:7e:fb:
                    9a:13:4a:a9:09:0e:a7:2b:22:27:ad:b9:dc:2f:ee:
                    7f:c9:c2:24:84:e9:51:26:94:eb:50:59:32:5b:6f:
                    e8:e9:e9:e2:9a:6e:fe:0d:5a:7e:d7:7f:05:c5:58:
                    75:88:a5:b2:3c:91:d3:b6:1a:0c:60:2f:3b:60:76:
                    3c:c9:cb:41:19:38:d2:a7:fc:17:93:58:41:48:fc:
                    73:a9:0a:e3:43:36:2f:f6:a9:cb:9b:a0:10:76:d0:
                    78:56:94:99:3c:93:e9:e7:01:98:84:b4:ba:26:a0:
                    bf:9b:54:5e:45:94:e5:a0:f4:17:9f:5f:b6:55:62:
                    e6:5f:99:3b:10:ee:f0:2a:e1:73:98:40:e2:b5:af:
                    b1:dc:ab:dc:22:cd:10:d7:78:c4:49:9d:13:6b:70:
                    a8:79:a8:16:5e:74:ac:ba:d4:09:6d:19:47:cf:78:
                    66:75:e2:d9:e9:cb:be:0b:83:4d:91:92:40:03:44:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:76:BD:72:4F:24:08:A0:93:FA:29:F3:89:7C:13:E9:9B:C2:B5:7D
            X509v3 Authority Key Identifier:
                keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:2f:6f:72:58:e2:1b:20:63:e6:1e:77:92:43:a7:77:22:
         13:f7:58:31:fd:a8:0e:29:bc:a6:b5:fb:f4:06:64:c5:28:b5:
         90:db:9b:9c:68:15:a5:eb:9f:ab:98:0c:9f:53:ec:84:2a:f0:
         e2:63:71:fa:a1:73:b1:39:ef:84:0f:50:bc:7c:25:d3:f3:72:
         3b:e6:48:b3:20:68:ac:50:4f:93:a9:7b:7c:7d:93:5e:3a:f3:
         93:ee:7a:b9:dc:34:6d:47:12:77:7b:ce:b5:06:29:b0:a1:d9:
         ef:c0:48:1c:a7:17:25:a6:a4:00:c0:dd:11:4a:73:cd:64:07:
         8c:70:bd:37:01:74:a3:05:2c:6b:eb:26:23:a1:86:9b:1a:f1:
         85:e9:eb:8f:59:70:52:3b:67:89:4a:ca:a7:13:38:f8:e8:2e:
         96:6f:65:9d:6a:3f:bc:db:96:9b:d6:47:26:f2:21:ec:ee:a0:
         45:0e:63:11:b1:f8:d4:0c:c1:52:6b:8c:cd:09:e6:62:21:5b:
         fe:16:80:b4:fe:92:24:03:37:ad:bc:f8:bd:8d:4c:e9:fd:f1:
         98:e3:7b:41:75:5a:ac:3d:3b:fb:ff:64:cb:42:64:ac:52:f3:
         57:1c:7a:0c:fb:3c:98:62:a2:a2:d5:d8:54:65:21:da:da:9e:
         3b:07:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:34:55 2025 by rpki-client