Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          VaTuNHjGv++zCHumCZLt3V+w2vvAnv3+uUGwuoO9gEc=
Subject key identifier:   F8:A5:86:02:F2:7D:B8:B6:48:73:5A:81:DB:8F:E1:D5:BC:C6:81:B7
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       01976D747A886E4F8430BF92713F426485C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:39 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: G2Q7D1tiOCvutxJ3H2y3gdOmzrBcXELDcE403mbWMow=)
                          2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
                          3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
                          4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:7a:88:6e:4f:84:30:bf:92:71:3f:42:64:85:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Jun 14 08:00:39 2025 GMT
            Not After : Jun 15 08:00:39 2025 GMT
        Subject: CN=f8a58602f27db8b648735a81db8fe1d5bcc681b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:27:a9:98:48:99:e7:6b:93:b4:08:79:4a:
                    df:5e:d4:98:3f:72:38:86:5f:67:bc:be:4a:ed:0b:
                    9d:64:a7:27:03:ea:33:cd:e3:4c:f2:86:22:0e:8f:
                    53:24:73:36:31:13:8d:02:49:22:54:24:f0:e2:3a:
                    0a:fa:47:d4:bd:f1:e5:9c:93:47:62:a2:df:db:a9:
                    aa:ef:07:76:d0:69:5d:ad:f6:19:96:6e:b4:a9:5b:
                    d1:8f:cc:a4:4c:21:4d:ca:85:6f:fc:e0:2c:6d:5f:
                    43:ff:a5:c8:cd:2c:71:c8:e2:fd:dd:72:d5:73:f9:
                    86:a5:15:63:cc:13:de:df:cf:9f:cd:a6:f2:74:ff:
                    e0:c7:05:21:70:66:df:7c:b5:6d:f9:ca:a0:27:51:
                    32:4f:5e:39:f7:6f:52:f1:ff:26:ef:ab:c5:67:27:
                    b8:fc:81:f1:bb:a1:f0:5e:bc:18:b8:1e:c8:fb:91:
                    b7:c0:8b:a6:dd:32:d3:ea:4c:a9:0e:53:4a:ab:ba:
                    01:22:e7:a8:9d:b6:f2:eb:9b:95:8a:54:6d:25:4e:
                    30:d5:65:e2:1d:bb:3d:a9:8b:cd:05:95:ec:a7:19:
                    42:ee:23:6f:46:dc:48:46:38:78:2b:57:fd:7a:30:
                    5b:c9:4a:5d:9a:60:5c:e2:3a:9a:d4:64:9d:12:d4:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:86:02:F2:7D:B8:B6:48:73:5A:81:DB:8F:E1:D5:BC:C6:81:B7
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:73:85:c6:f4:a1:54:2c:b3:7d:7a:b7:f6:e1:9a:d0:a9:
         11:7e:2c:85:cb:aa:42:f4:41:78:50:8e:d8:b8:59:82:dd:91:
         0f:4b:f2:e2:62:c1:da:bc:36:a0:47:34:bb:7e:9d:b4:95:7c:
         b6:5e:3c:2b:7b:0b:b7:a7:df:82:db:1e:12:32:a0:e9:38:5e:
         14:93:09:ae:87:0b:d8:e3:68:02:76:b8:79:80:29:3e:f9:36:
         c2:7e:1d:e5:75:ea:5d:14:1e:d8:fc:f5:10:89:44:17:46:92:
         01:09:a2:22:59:2c:44:03:b2:ae:5f:74:01:6f:6b:b3:51:e3:
         33:7b:d9:d1:81:4c:fa:d6:bb:f3:b9:0c:1c:e1:cd:d8:12:df:
         12:a3:94:89:28:36:4c:a7:08:df:9e:4f:e8:db:75:c7:e2:b3:
         69:85:d2:77:b9:06:0f:c7:98:0e:3a:cc:37:97:60:f7:db:97:
         fe:b9:ec:05:f5:07:a2:c9:44:bd:29:03:0e:4d:ac:f2:a6:23:
         04:08:43:2d:29:3f:63:1d:7e:b5:eb:b3:8a:0e:a0:60:e0:bc:
         61:b9:7c:f4:18:ca:ab:af:c5:f2:46:eb:11:86:50:5a:29:d7:
         31:ff:4e:79:ae:18:e8:2c:5f:88:06:3d:90:42:80:1e:27:04:
         46:1e:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:53 2025 by rpki-client