Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          fCN9HRKOQxDgpcNyPL+JM/xWZDsHEFpkRO0FYXugaGk=
Subject key identifier:   91:78:F1:77:4C:4D:A1:8B:09:CD:40:77:D8:5A:00:92:E3:FA:CE:41
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       01975C4A12B8100D58DC3D8264FD0496D54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          1586
Signing time:             Wed 11 Jun 2025 00:00:47 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:47 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:47 +0000
Files and hashes:         1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
                          2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 7NEh6lvVlkrnXlA4pOj7RpUOhzol8b7U0sVoWYIfKag=)
                          3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:12:b8:10:0d:58:dc:3d:82:64:fd:04:96:d5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: Jun 11 00:00:47 2025 GMT
            Not After : Jun 12 00:00:47 2025 GMT
        Subject: CN=9178f1774c4da18b09cd4077d85a0092e3face41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d9:41:16:06:f5:e7:3f:f3:1b:e1:cd:12:fe:
                    ab:d1:51:a2:95:88:cf:01:1e:bf:d5:50:bd:4f:6c:
                    06:6a:87:b9:92:2c:46:c7:84:69:f6:46:b3:2d:cf:
                    fd:3f:df:d0:c5:fa:ba:c5:e6:0b:97:dd:e7:1f:0b:
                    98:1f:ca:f7:8b:74:92:f6:71:fd:73:b2:0d:be:75:
                    5d:a2:85:d6:aa:ee:9c:d4:ca:5e:1a:41:e6:2f:ea:
                    82:43:fb:14:f3:36:ca:09:33:b7:98:d9:80:b1:dd:
                    41:70:60:d8:33:81:49:1d:a9:26:f2:21:d9:e3:f9:
                    92:00:24:3c:52:34:73:96:b0:0e:2e:18:cd:0c:d5:
                    89:89:e1:69:29:fd:74:86:b3:ca:14:9a:74:0d:07:
                    39:95:cf:5a:f0:5e:26:98:99:68:7d:25:5f:b6:05:
                    eb:e3:ee:f8:8c:f4:88:d6:9a:8f:3c:87:7b:f6:95:
                    d1:d8:b6:63:96:1c:94:b0:d4:a4:72:7d:a9:f7:5b:
                    3f:f6:b4:a9:ca:89:c5:03:8c:4b:a7:59:67:a0:9b:
                    89:7d:4c:77:ff:16:80:54:b4:b1:4c:e0:29:90:4a:
                    10:22:dd:f0:a4:5b:61:34:02:a9:ce:b6:cf:7e:37:
                    26:cd:46:cf:f4:e3:ec:ce:cd:b0:73:f9:76:eb:b3:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:F1:77:4C:4D:A1:8B:09:CD:40:77:D8:5A:00:92:E3:FA:CE:41
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:9a:ff:69:30:0d:b4:27:57:77:46:de:a9:56:22:77:fc:
         e9:7d:a2:b2:f0:55:85:f2:0b:25:1e:dd:95:a5:cb:a0:c8:19:
         0f:03:e0:20:77:fa:30:85:fc:04:de:c5:2b:1e:d9:da:69:55:
         dd:42:fb:06:75:85:8b:d2:1a:70:67:49:1c:32:82:fc:dc:3d:
         00:fc:b5:7e:1a:d0:ef:d2:ee:84:c3:94:41:40:27:c0:88:03:
         d4:fc:05:5a:3c:a6:6f:45:0c:69:f6:f2:12:c1:8c:e3:47:3f:
         5b:a0:37:ca:4c:74:19:c5:6f:ee:58:73:a5:86:ef:24:a0:ad:
         04:65:d7:5a:43:4e:f1:5b:39:40:13:d3:d4:87:c5:c5:87:35:
         dc:a5:dc:5d:4e:d3:8f:5e:06:59:17:52:ac:99:33:79:64:22:
         ce:06:28:67:1e:d4:6d:3d:ee:27:98:93:5c:ff:17:ec:37:66:
         a0:d6:ab:c6:89:d9:28:11:5f:d2:59:a2:39:87:ae:b1:33:0e:
         5b:47:57:1a:13:62:18:ac:c6:b0:43:6b:46:ac:f3:80:a9:f4:
         ae:dd:c8:de:d7:90:b1:7b:1c:32:b4:a0:b9:58:b4:47:bb:a9:
         2e:ac:aa:2f:83:f2:3e:1a:75:b4:b5:4d:55:e7:e6:b1:53:2d:
         1d:b0:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:10:40 2025 by rpki-client