Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          u9mPyBoADawlu+qKAL7412SlGiJPtgptWTi9akhpnao=
Subject key identifier:   08:B3:06:CB:98:FF:CB:3B:F5:31:EF:15:BA:79:AC:0C:C0:80:4B:9D
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       01974FA0E1DD0F723E75777189600547DD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          1589
Signing time:             Sun 08 Jun 2025 13:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:32 +0000
Files and hashes:         1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
                          2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
                          3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: xLkESlnsIAflf7XmPsJhaXU7edY6nabqE5osTxc0L+o=)
                          4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
                          5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:e1:dd:0f:72:3e:75:77:71:89:60:05:47:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jun  8 13:00:32 2025 GMT
            Not After : Jun  9 13:00:32 2025 GMT
        Subject: CN=08b306cb98ffcb3bf531ef15ba79ac0cc0804b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:8d:1c:97:e2:19:bc:eb:e8:2c:9b:9b:0d:
                    36:03:44:de:36:58:91:da:74:c4:a3:b8:16:7f:2e:
                    de:0b:78:85:2d:bc:8b:e2:f2:61:03:b6:8c:60:7c:
                    0e:5b:20:ff:64:d5:2a:81:97:4e:8a:b8:de:ea:38:
                    8e:78:14:d7:96:c0:67:6a:11:f6:0d:68:79:c7:1b:
                    c3:e5:3d:34:87:83:e0:39:22:d6:5a:9c:88:7d:b7:
                    ed:aa:f5:99:e2:e6:17:a4:7d:ca:9c:cc:42:97:b7:
                    f3:40:ff:71:f6:82:80:ee:a2:8e:41:df:90:f6:63:
                    a1:d7:31:d8:6f:96:b8:92:56:9f:d6:e6:56:71:eb:
                    ef:c2:fa:cb:dd:ff:8e:c4:1a:56:ec:79:fc:77:7f:
                    3a:e7:ad:2b:5e:e9:1c:51:ef:86:09:91:30:e3:00:
                    72:83:a0:a8:ec:7d:39:d2:3f:ef:22:13:cd:bd:9d:
                    b3:8f:e0:7c:7f:f2:9d:76:e9:a0:60:3b:f9:89:9f:
                    02:62:4b:02:1b:69:da:73:38:cb:f0:d6:a7:15:ca:
                    a1:42:9b:65:4d:98:27:16:c9:08:aa:00:d8:31:f4:
                    89:31:ac:3e:73:72:9d:88:a8:4a:fe:17:b2:49:c9:
                    a9:37:27:72:57:42:b9:b4:44:52:e1:09:5c:48:f5:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:06:CB:98:FF:CB:3B:F5:31:EF:15:BA:79:AC:0C:C0:80:4B:9D
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:7b:c5:da:f3:14:73:3c:85:24:fd:57:d9:81:24:15:c1:
         a0:24:e6:0b:f5:86:3b:9b:cf:bb:00:0d:93:a2:36:b4:df:26:
         d0:e0:a0:d2:08:cd:56:a2:69:9f:40:50:3b:e0:a3:4e:ce:dc:
         15:77:eb:f0:ed:28:92:94:41:9e:f4:37:dd:e6:93:0e:a6:80:
         d9:68:12:f9:47:8a:12:ba:45:56:ba:b5:00:32:f0:34:c1:36:
         7a:b6:3c:e7:18:b5:88:5c:e9:42:a9:71:21:27:ed:45:c8:3e:
         09:da:85:e9:16:78:b4:22:f9:3d:75:34:22:1e:37:37:e3:e7:
         54:14:77:df:64:8a:5f:be:d2:b8:dc:4e:ec:1a:39:ca:f8:c4:
         76:72:a3:93:64:9e:3a:64:32:8d:77:05:d5:9c:de:92:45:d0:
         3f:c5:b9:7b:6c:fa:b2:8f:77:a5:61:b5:3a:c7:9b:08:f9:b2:
         7f:2e:c0:44:e4:45:dc:e1:83:f4:8f:ce:84:e6:60:7c:48:fa:
         33:2e:90:b6:29:ed:3f:fa:8b:32:89:e9:8e:96:6d:c8:c5:9b:
         53:8e:e5:c7:8e:5a:16:45:a4:b6:b0:73:a1:7e:dd:16:05:6a:
         6f:82:ce:ce:ee:ed:3d:d9:b7:af:13:09:95:9e:4c:fc:d9:3e:
         64:d6:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:02 2025 by rpki-client