Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          k7lu10YbvUVB+bKNtmM4hkf5ybsGeKUjvW3KbmeHoyo=
Subject key identifier:   B4:06:A8:EB:A0:80:25:F6:DD:A1:51:70:1A:90:4F:47:25:39:B4:DA
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       01974742694D0704828001C430C596A72B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1585
Signing time:             Fri 06 Jun 2025 22:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:24 +0000
Files and hashes:         1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: YhAgpXnKRbCFQ19qYuaMpi0rD7qOH2mLtcMzzzYXK3k=)
                          2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
                          3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
                          4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
                          5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:69:4d:07:04:82:80:01:c4:30:c5:96:a7:2b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Jun  6 22:00:24 2025 GMT
            Not After : Jun  7 22:00:24 2025 GMT
        Subject: CN=b406a8eba08025f6dda151701a904f472539b4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:62:1b:3b:aa:0d:9f:05:25:f6:18:49:94:
                    99:20:2a:89:ac:83:f8:b2:a6:e2:32:ec:94:34:22:
                    9a:8b:76:fc:ce:e6:1e:2f:1a:9e:0e:81:4a:b7:cb:
                    c0:af:d7:6f:fe:45:d9:a2:94:d3:f1:ca:a8:a2:44:
                    dc:63:2f:87:34:60:89:d9:ac:c8:21:d4:d1:26:62:
                    d7:47:eb:34:cf:e1:61:e2:c1:25:60:31:97:4e:29:
                    e0:a1:9d:ff:97:91:15:a3:5f:e8:c5:88:93:1f:45:
                    93:91:14:48:59:f5:a8:0b:9b:56:1a:25:7e:4e:5c:
                    83:da:c8:b1:15:a4:9b:7c:ea:f7:40:1f:93:23:0a:
                    5e:66:4d:7e:5a:76:3c:9c:fc:5e:88:c3:22:82:1d:
                    9f:49:2d:07:fe:83:96:c3:9d:76:54:f3:be:53:1d:
                    75:bf:e7:0a:ed:4e:a4:32:53:f9:40:f6:5f:75:26:
                    ce:59:1a:d1:98:16:79:71:6b:77:70:6e:09:9a:d3:
                    8b:5f:62:24:84:4f:7b:70:c2:6b:69:5c:71:5f:f5:
                    f9:bd:ca:ab:9a:9c:13:33:bb:65:45:98:cf:76:34:
                    78:93:91:ca:dc:55:3e:3f:ed:6d:a3:0f:f4:69:74:
                    f2:6d:e6:d2:36:54:42:05:2b:33:35:6c:d5:35:15:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:A8:EB:A0:80:25:F6:DD:A1:51:70:1A:90:4F:47:25:39:B4:DA
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:e7:2c:87:61:11:61:d9:4e:56:90:2e:b7:3c:03:d4:4e:
         bd:5d:20:7d:52:81:32:37:19:d3:85:dd:17:04:c4:72:f4:8c:
         8e:74:6e:34:b2:b5:dc:93:34:18:f6:dc:9f:6b:a9:61:7d:53:
         b6:40:21:92:86:1c:27:3c:f9:eb:f6:b8:9c:88:8b:44:c1:24:
         b6:46:ec:77:a2:ae:48:0b:3a:af:8c:ba:f6:c4:a9:72:c1:7e:
         c9:cf:d5:29:1f:92:37:8b:a1:e5:6f:71:7b:c4:b9:ff:b4:3b:
         b4:18:7d:37:0c:9e:c6:b2:b8:94:bf:93:4a:e0:eb:b2:33:bf:
         13:7b:6d:2b:5f:f8:e0:6e:76:ae:62:eb:70:9a:ac:8e:f6:af:
         69:b7:9a:b0:19:d6:70:df:fe:89:e8:f3:d5:80:3b:c3:ce:13:
         cd:87:d1:53:25:06:54:22:a7:04:6f:65:c6:10:6c:a4:76:96:
         ff:bd:fc:15:2c:e1:50:13:1c:80:60:c4:08:55:6c:ce:e6:70:
         58:c9:01:e3:97:9c:96:be:7b:e9:dd:f9:b8:5a:53:cf:9e:e1:
         4e:67:20:c9:87:6d:79:12:a5:4b:bd:dc:11:7d:74:ea:e9:89:
         11:7f:fa:e9:d8:26:c9:94:07:5f:61:70:a5:cf:61:fc:f5:55:
         de:74:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:47 2025 by rpki-client