Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          OYKvU+9KD8FDhZUa7idCTIy04YhhODhUEugg8qqiAx4=
Subject key identifier:   28:4F:47:D5:0A:09:35:E1:4F:DF:D4:C6:08:D3:AB:1E:FD:89:B1:3C
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       019749681A0197B0DC2926EB7123EDE4EA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          1587
Signing time:             Sat 07 Jun 2025 08:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:48 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: vfVJQMYSrOeR4ddQ16KQRMR8PH5RPGs6MSwJHYIdwPs=)
                          9: xovZOIhlPZ45N9oOxx7_NSJCrEw.roa (hash: JeeMpjw12qOmA0b+WEGyWZXkSEOnUNh26ITmvmBxXbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:1a:01:97:b0:dc:29:26:eb:71:23:ed:e4:ea:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Jun  7 08:00:48 2025 GMT
            Not After : Jun  8 08:00:48 2025 GMT
        Subject: CN=284f47d50a0935e14fdfd4c608d3ab1efd89b13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:5d:87:04:f9:47:cf:52:f1:09:02:83:a7:
                    29:9a:b2:29:d2:30:30:4c:3c:69:cf:e1:e3:66:2a:
                    b6:bf:3b:49:20:c8:0c:97:d7:19:64:dc:ce:99:10:
                    04:60:bf:30:48:64:de:37:b2:39:57:9f:63:f6:53:
                    76:e5:61:b0:2a:d9:45:a1:0c:2a:0c:1c:d8:92:60:
                    ec:bb:5a:e9:6b:ec:68:7a:25:41:7d:66:1e:fc:43:
                    41:08:5d:e6:24:e5:51:43:74:bc:bd:67:8d:73:77:
                    f1:bc:7e:7f:50:6a:46:f5:cc:5d:2b:0e:a3:7b:f9:
                    90:7d:d7:a2:ff:bf:55:98:b8:ff:b0:03:87:1e:d2:
                    99:30:a0:c9:fd:a6:15:68:d5:46:3d:ae:e5:70:90:
                    0c:3d:8f:bc:11:ba:b1:99:67:bf:d1:e4:c6:b1:4b:
                    c4:a4:56:c0:e9:6e:8f:62:02:20:cf:57:22:6c:b6:
                    c4:48:bf:a9:2b:2b:b7:97:a0:19:9b:66:c7:dc:ee:
                    72:8c:33:fb:08:c0:78:e1:d6:07:93:11:6c:05:c3:
                    1b:fa:9d:a3:91:b7:ec:1f:03:c9:44:95:4c:2b:59:
                    ce:b3:99:04:f9:18:27:b3:f8:da:61:74:2c:e9:83:
                    82:61:ce:60:75:2e:bc:49:6f:40:d7:92:27:34:6a:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4F:47:D5:0A:09:35:E1:4F:DF:D4:C6:08:D3:AB:1E:FD:89:B1:3C
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:24:5e:fe:89:35:43:4d:20:fa:48:56:d9:e8:55:50:06:7f:
         c3:9c:4f:ea:7e:92:31:58:5b:5d:24:1f:eb:7c:2f:a9:42:52:
         78:46:24:d2:44:cb:e2:18:a6:48:2c:33:e2:20:72:20:e1:28:
         79:57:f5:0e:74:f4:92:3c:b7:10:a5:24:59:b2:76:f8:0c:ce:
         04:cb:38:2c:a5:0e:40:2e:d5:17:72:ee:9a:de:f3:ad:fb:5c:
         f6:6e:5f:ca:44:4e:66:9a:13:1f:84:42:4d:9f:42:ac:e4:69:
         82:08:d7:28:94:d3:f5:85:42:83:da:bd:06:13:1d:88:d8:c4:
         1a:48:2b:46:7b:80:64:73:78:02:83:dc:b6:a8:93:ee:be:35:
         94:b5:81:05:9e:77:0d:1b:74:a7:57:2f:94:4f:3f:76:cf:7a:
         8a:13:ca:26:c0:b7:63:8c:66:ac:d9:79:ea:ab:d9:c9:b2:37:
         26:2c:12:1c:9d:19:a4:a7:d0:3d:9c:62:9a:2a:1b:3f:27:ec:
         54:39:db:25:f1:a4:35:d3:a9:b6:d6:92:c5:3c:70:08:85:1a:
         44:cf:6b:97:44:ba:3a:2c:52:85:a7:39:98:55:6b:8a:1e:9b:
         04:5d:b0:e3:10:58:ae:04:06:8a:f6:7c:40:d9:90:ca:3a:fb:
         61:35:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:23 2025 by rpki-client