Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File:                     pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier:          jgYqBfX/AVQgRED8cY5QHn3F/ERIfmj5m286KH/F/nQ=
Subject key identifier:   84:8C:A7:E2:1C:12:03:7F:D1:41:9B:79:65:B6:62:F6:B9:A4:64:29
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer:       /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial:       01976929B01A335EFD7BAF136BB0881B650C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 12:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:29 +0000
Files and hashes:         1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
                          2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
                          3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 7kjPim7dcDxFa1ka5z4adt3RCw87eY8yvEyXtpuwElk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b0:1a:33:5e:fd:7b:af:13:6b:b0:88:1b:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
        Validity
            Not Before: Jun 13 12:00:29 2025 GMT
            Not After : Jun 14 12:00:29 2025 GMT
        Subject: CN=848ca7e21c12037fd1419b7965b662f6b9a46429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:c1:d0:40:76:f8:f8:21:46:61:34:64:c0:
                    a4:51:ab:e9:39:ac:6f:68:93:52:d5:0d:a9:16:66:
                    f0:16:4c:3e:97:02:ea:3c:50:64:7d:9a:dc:2f:af:
                    a7:72:81:27:e9:93:cd:df:dc:d6:78:c6:c2:89:5c:
                    9c:8d:fb:19:6d:fb:43:8b:f4:25:4e:1f:ed:b2:b0:
                    04:85:79:fd:7a:3f:58:3c:c4:e3:39:af:01:f8:1d:
                    66:a3:84:f5:25:93:d9:05:ee:71:0d:10:8a:70:2a:
                    38:93:45:3f:57:e6:a7:0c:f1:95:c3:e4:c2:54:c1:
                    15:e4:e9:66:a4:7e:11:87:c0:f4:2f:b2:2e:33:3b:
                    ec:4b:c2:e0:b5:56:ac:d9:2c:ea:6a:9d:4c:5e:ba:
                    60:11:aa:0f:99:ee:7b:ba:14:69:da:ab:68:67:09:
                    48:e1:7d:ac:03:e4:b9:d7:a0:a9:35:ab:8e:73:67:
                    43:05:5b:9b:dd:d4:70:8f:34:3c:bd:ce:9f:45:ed:
                    29:1d:94:72:ac:18:c1:c0:34:f5:d8:74:b2:8a:8c:
                    f7:ff:cd:d3:fb:b3:24:40:a0:36:74:92:87:47:ec:
                    34:4a:ea:fc:21:b3:1b:10:d9:a9:85:f8:7e:0a:83:
                    c1:4d:2c:9a:5a:95:7a:83:7a:d8:b9:45:58:62:ae:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8C:A7:E2:1C:12:03:7F:D1:41:9B:79:65:B6:62:F6:B9:A4:64:29
            X509v3 Authority Key Identifier:
                keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bb:a2:52:e7:40:55:f8:cf:37:1d:24:83:b9:24:52:9e:aa:
         fa:94:a8:94:3d:bd:90:6f:94:d2:26:92:03:f5:e3:53:7b:fc:
         b9:14:b8:48:0d:f7:81:07:9e:1a:e4:bf:43:f9:6f:6f:61:94:
         72:ae:76:1a:80:39:d3:64:1a:04:30:c5:17:e7:bb:31:bc:44:
         d2:57:2c:90:cd:35:a4:53:0b:86:60:0b:6e:3f:23:8d:bd:ab:
         65:60:81:3d:bb:da:44:1e:44:ef:86:77:3b:01:43:9a:4d:85:
         8d:5e:27:14:4d:12:27:a2:08:77:10:8d:50:aa:12:b6:16:5c:
         b8:2e:2e:b2:34:05:a2:0b:55:3c:57:fb:72:96:53:3f:a4:a4:
         31:d8:99:3b:ac:35:1a:cb:c0:8e:dd:af:3b:a1:cc:fd:c6:24:
         ca:02:68:ca:29:fe:fe:14:1e:9c:67:60:7f:61:36:f2:33:e2:
         21:e6:5d:95:83:e6:55:ef:31:1b:62:a6:b4:f8:8b:f7:3d:cc:
         77:77:c1:8f:76:b2:7a:4d:8d:80:a7:77:9a:db:9b:87:50:51:
         3e:7e:59:a3:e4:9c:32:ec:4c:c1:47:32:06:41:0b:18:31:41:
         0f:fb:37:90:71:17:4c:71:b7:95:4b:6b:e3:6c:57:15:bb:df:
         42:df:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:54:52 2025 by rpki-client