Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File:                     egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier:          PiBEjF/b5VFet2cN13h5FtqCfEJEUki7k6KZ4crk+c0=
Subject key identifier:   AD:05:A0:1E:8F:E8:7E:5C:EB:90:36:12:E4:F0:C5:FC:47:7B:4C:F5
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       0197496837C5796584D51B1838A01E7A80E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number:          1589
Signing time:             Sat 07 Jun 2025 08:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:56 +0000
Files and hashes:         1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
                          2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
                          3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: QsPkN0UR4/2XseV595wWpNdh/RQZ0Xb1VhXF/UavI6g=)
                          4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:37:c5:79:65:84:d5:1b:18:38:a0:1e:7a:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Jun  7 08:00:56 2025 GMT
            Not After : Jun  8 08:00:56 2025 GMT
        Subject: CN=ad05a01e8fe87e5ceb903612e4f0c5fc477b4cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:24:cf:ca:a6:64:30:65:9a:97:7f:5e:0e:
                    dd:3a:9e:5a:98:ed:f9:4a:23:85:f1:27:78:3d:6f:
                    eb:5d:d6:d8:43:99:06:b2:ec:8c:32:93:66:46:6a:
                    ec:b9:48:d9:b3:2a:e2:e1:81:51:f2:68:76:0d:f7:
                    54:64:a9:70:e7:12:9b:d6:96:ec:b1:d1:a0:04:75:
                    56:16:07:a8:08:70:31:86:89:68:20:7e:98:a1:83:
                    09:43:79:d5:02:81:f1:5f:55:30:89:d4:58:97:36:
                    a7:36:b9:a2:48:37:b8:2d:64:37:37:0d:e4:61:f4:
                    9c:91:de:f0:98:1e:4c:5b:62:57:fc:b4:24:2c:a2:
                    2f:b9:3b:30:1f:a2:3b:77:c5:f0:2c:1a:b0:32:84:
                    9a:1c:07:82:8f:60:f9:55:d4:49:44:be:37:75:05:
                    8b:4c:56:60:46:c5:c0:ae:f3:65:cb:f7:06:65:c7:
                    66:d5:21:55:d5:9f:e2:5c:13:ef:62:a3:3d:3e:63:
                    88:d5:ae:9a:26:32:ef:97:af:a3:b6:c3:81:6b:86:
                    15:f1:96:7b:be:5d:a9:13:7f:dd:6e:e7:f6:75:f4:
                    ef:59:9f:01:b7:60:f3:70:64:69:c5:f3:2a:a3:d2:
                    b7:d2:4b:11:4e:7c:96:60:f7:57:a4:54:76:8b:5f:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:A0:1E:8F:E8:7E:5C:EB:90:36:12:E4:F0:C5:FC:47:7B:4C:F5
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:28:be:c7:a7:32:44:6c:17:ad:ee:34:f2:ac:af:87:df:0a:
         c2:d5:bc:dd:b8:fc:2c:2c:99:05:7e:32:be:05:44:d9:05:1c:
         6c:d1:8b:37:84:9a:19:c6:88:77:c1:15:6d:0c:a3:1a:55:b0:
         98:8a:aa:d0:94:c2:ca:ba:12:92:32:73:7f:c4:1b:e7:8f:dc:
         73:07:1b:e0:e4:df:e2:00:18:b0:9d:77:0c:06:4c:65:9e:78:
         9a:db:ab:24:d1:4a:f6:dc:74:02:71:dc:3c:dd:64:8d:db:4f:
         9b:a4:78:b5:09:0f:80:27:96:44:5e:3b:63:ec:96:6e:52:5d:
         d7:b6:1b:41:47:4d:d8:7c:35:47:e7:46:18:0f:58:41:e5:7c:
         ff:26:0e:a3:fc:1e:62:70:b2:98:f6:25:97:2b:66:dc:5e:79:
         bf:36:68:67:0a:a4:ef:f5:c1:e7:32:45:17:16:bd:28:c8:20:
         ee:60:0b:18:e9:c6:db:89:72:76:74:7e:c1:ba:a0:ad:e5:22:
         d7:19:89:c9:36:32:e2:f2:74:36:7f:4b:9d:06:2e:6f:b7:52:
         3d:7c:ef:d3:40:de:a1:20:e9:2b:6c:cd:92:a3:b9:94:68:a2:
         f1:b2:91:16:97:77:84:26:23:f0:e6:90:86:45:4e:32:79:a2:
         75:e0:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:27 2025 by rpki-client