Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File:                     lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier:          ymhZp2yQxDeOIu7g4K2JAedzKi42UJ40MaE1FJwwKtw=
Subject key identifier:   BF:D2:B3:8F:DB:A9:EA:3F:82:BC:F6:30:15:46:93:26:7D:C0:0B:78
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer:       /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial:       019763CCB37742B393352E079A86833913D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number:          1593
Signing time:             Thu 12 Jun 2025 11:00:49 +0000
Manifest this update:     Thu 12 Jun 2025 11:00:49 +0000
Manifest next update:     Fri 13 Jun 2025 11:00:49 +0000
Files and hashes:         1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
                          2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
                          3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
                          4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
                          5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
                          6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: npjxUjZtm+qA0/2vLzmJQlO/f6TM33/LNP/ZayG4nnI=)
                          7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
                          8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:cc:b3:77:42:b3:93:35:2e:07:9a:86:83:39:13:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
        Validity
            Not Before: Jun 12 11:00:49 2025 GMT
            Not After : Jun 13 11:00:49 2025 GMT
        Subject: CN=bfd2b38fdba9ea3f82bcf630154693267dc00b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:be:97:ae:ae:57:90:fa:3b:1a:86:11:57:
                    dc:22:d6:cf:69:fd:cd:b8:db:65:66:71:0c:86:66:
                    00:51:4f:25:a0:d3:fd:06:8e:d9:30:76:12:ae:45:
                    f8:55:72:b3:52:32:e6:64:55:a3:81:80:c9:34:49:
                    90:b7:5d:92:80:9b:68:f1:c5:2d:5e:69:1c:02:6c:
                    0f:c3:94:53:f7:e1:eb:87:91:8f:59:9c:d3:03:82:
                    f6:80:4e:fb:52:28:3a:d7:1d:be:72:f2:b8:3d:e6:
                    26:9a:59:2e:b1:fb:6d:f0:2d:12:1e:0e:84:b8:bd:
                    e1:cf:ba:e3:82:64:4f:ed:80:8b:79:7b:3e:98:36:
                    37:9d:13:f1:23:6c:41:8f:b3:00:85:04:3d:59:21:
                    0f:a6:22:2c:2c:69:ab:70:21:63:96:dd:54:55:d0:
                    41:94:0b:2b:36:cc:8e:fe:03:3f:1c:5b:70:72:74:
                    fc:5c:b4:bf:ea:d4:6c:5f:e7:b8:2b:b1:63:78:5d:
                    32:00:fe:4c:b9:0d:54:91:6f:ba:38:92:87:84:a4:
                    a2:7e:ad:ca:68:29:8e:14:0c:d6:57:8c:a7:a7:84:
                    fa:ec:e4:45:d0:a4:aa:bc:2d:91:34:2e:6b:c1:74:
                    37:dd:6b:cc:6d:0e:96:04:03:5d:2e:35:b6:7d:4c:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D2:B3:8F:DB:A9:EA:3F:82:BC:F6:30:15:46:93:26:7D:C0:0B:78
            X509v3 Authority Key Identifier:
                keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:32:e8:55:09:3e:30:61:09:31:35:53:ea:68:b4:85:cb:
         8b:85:02:43:d6:eb:ae:8b:25:e0:1a:99:e9:bf:70:93:5d:5f:
         86:aa:df:b9:5b:70:50:19:2a:3d:3b:41:21:0d:25:8e:e8:35:
         45:d6:0c:fd:70:9b:bd:d1:64:eb:61:30:32:db:1e:a3:e3:74:
         5b:17:f5:f6:e7:2d:f4:a2:7d:e0:9e:36:cf:00:a8:80:01:6e:
         2b:2d:28:3f:7f:98:ec:af:e3:74:cb:0f:dc:e8:7b:9f:d0:27:
         1e:3f:1e:9d:48:8e:aa:a6:cb:24:31:f8:62:f7:07:a5:d7:c9:
         20:07:87:a9:61:ea:a8:5f:a3:25:9a:e4:47:eb:1a:18:82:f8:
         0b:a6:0b:4b:5d:98:55:09:e0:14:b8:59:fc:e1:7e:4e:a9:16:
         53:0d:4b:00:44:90:a3:55:03:b7:f7:50:de:92:52:48:94:94:
         bf:57:47:c5:71:65:9a:6e:25:c5:84:15:2f:de:63:ba:75:9e:
         d6:31:a4:f1:e0:95:8d:2e:ca:42:af:dd:63:78:17:37:0b:dd:
         0f:90:c5:ef:39:99:36:03:d4:11:09:77:3e:b8:7f:27:de:96:
         ef:1a:fc:6c:d5:b9:91:87:bb:2c:9a:e3:1b:86:f4:4f:8c:d3:
         d9:d8:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:18:34 2025 by rpki-client