Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File:                     Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier:          IuJ+DU+3tzJDTy9HVVw32UA9e5OqxwGSxQa0ow7QSXo=
Subject key identifier:   49:BC:24:A8:AB:0C:68:77:2E:B2:18:C0:30:01:65:AB:DA:86:FE:A2
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       01973F528AA054428FF8FE46D00B6271F998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number:          1594
Signing time:             Thu 05 Jun 2025 09:01:03 +0000
Manifest this update:     Thu 05 Jun 2025 09:01:03 +0000
Manifest next update:     Fri 06 Jun 2025 09:01:03 +0000
Files and hashes:         1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=)
                          2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=)
                          3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=)
                          4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: OGgrNdYKcehVLpru1YVP2vLGvjCSajR8Gy6TkaRLFwY=)
                          5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=)
                          6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=)
                          7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=)
                          8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=)
                          9: prsVOyRGU3MtYYx93kWm773j8G4.roa (hash: XFsscFozdK/fanLtH4eqsqCTvm9rcJcpt7EZvhsiimc=)
                          10: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=)
                          11: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=)
                          12: ys5vmqUy51MsJ0ygo_iK-V09VLk.roa (hash: 0bEBsx5vAAoh9m1hQ5TVct9tCZkHxHVWgyiCpF/cLSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3f:52:8a:a0:54:42:8f:f8:fe:46:d0:0b:62:71:f9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Jun  5 09:01:03 2025 GMT
            Not After : Jun  6 09:01:03 2025 GMT
        Subject: CN=49bc24a8ab0c68772eb218c0300165abda86fea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:79:48:16:97:10:26:c8:e2:1c:38:19:0f:
                    2a:c7:e8:43:ab:91:c0:8b:e5:45:96:cc:28:4e:e6:
                    59:b0:69:ea:30:fe:4c:94:08:c3:d6:8d:97:b9:49:
                    28:b6:09:ff:77:72:64:6d:87:9d:39:44:55:15:ea:
                    5b:a1:3b:1d:25:b2:1f:9d:a2:5a:e5:b5:58:e5:02:
                    aa:d3:4a:df:94:74:91:bc:92:7c:a6:62:5c:5b:cd:
                    08:58:c3:69:f1:df:83:83:62:39:44:cc:13:b7:f3:
                    68:e9:02:00:d1:08:f8:c0:e7:4f:1b:52:ab:76:10:
                    b7:a2:8d:75:75:c2:9f:b9:d6:65:21:79:95:0d:08:
                    d6:a2:38:81:08:81:5e:6b:0b:73:78:0e:9e:71:60:
                    6d:e7:61:00:7a:e7:41:6d:68:1f:b5:78:7b:b5:1c:
                    76:69:b7:ab:0f:91:0a:ff:4b:13:4b:6f:db:a3:97:
                    c4:31:9a:4d:c8:bb:33:b5:ea:bb:58:38:6b:58:1f:
                    70:ee:f4:cc:3e:3a:b3:70:c8:93:dc:0e:2c:27:b5:
                    41:f6:e0:25:fb:01:95:87:6f:af:d1:66:b2:7d:73:
                    5c:22:46:80:13:04:a6:3b:a1:0f:54:2e:1b:d5:42:
                    d6:ce:1b:b3:c7:25:22:5c:5e:e4:04:58:e0:5f:92:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BC:24:A8:AB:0C:68:77:2E:B2:18:C0:30:01:65:AB:DA:86:FE:A2
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:d1:f4:1a:34:29:9a:f9:c7:63:7e:fb:c4:c1:1d:03:7f:
         bf:af:dd:a3:04:00:bc:19:f6:75:eb:e1:08:74:06:50:b0:b6:
         7c:09:df:5e:21:51:91:a0:32:fe:b9:47:49:aa:b6:9c:f1:9a:
         e0:c3:e1:89:5f:46:74:50:4d:7b:f9:f7:ed:cc:f9:dd:b7:f5:
         4c:4e:8c:e7:06:54:9f:87:91:62:44:43:6b:b2:19:c3:47:be:
         60:c2:e6:59:53:ff:97:31:40:64:8a:d1:bb:cf:fc:9a:d9:71:
         b9:61:23:de:3f:88:c4:e9:2a:5b:61:c0:90:31:81:d3:2c:88:
         43:5d:28:82:65:eb:b7:a1:59:69:7e:b1:e6:9c:c5:e6:0d:2a:
         6e:69:24:02:bf:c2:58:7b:58:8d:f6:3b:dd:08:a9:1a:30:35:
         51:7e:8b:9f:2a:17:21:e1:09:f6:58:fb:0e:5d:89:dd:80:82:
         e4:e3:db:ae:51:6c:0c:3a:c4:a2:0c:6b:65:91:fd:0b:f8:71:
         96:54:81:2c:82:9d:59:68:a0:3b:5a:58:04:fa:e3:e0:38:45:
         c3:eb:54:52:2b:77:2a:15:6f:15:c2:a0:01:a1:20:aa:40:aa:
         5e:21:1a:b9:d4:84:96:63:4e:d7:87:b1:3c:75:4a:00:4d:e3:
         a7:7f:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:28 2025 by rpki-client