Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          xCYCkabq/YAmouwy0QHT2Rbk+22spqpZGGOc3R5WwnQ=
Subject key identifier:   41:E6:99:CA:8C:73:70:39:29:25:BB:28:1D:78:5F:1D:B8:FC:05:B2
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       019746302C58C08E1C252F791608552977E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          1598
Signing time:             Fri 06 Jun 2025 17:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:51 +0000
Files and hashes:         1: 1-dpFpZ66BUopKTWddAy3aYd5Q58.roa (hash: a/nFyI+oVdi7douUuLnGlPqM2YOH9iXTA2Ltk7+EQUM=)
                          2: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (hash: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=)
                          3: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: +AgPD40zAuc7GHb5H/0TmdnJ0xtzPNWElkRUA7049ks=)
                          4: TSdQZeiJv87sxq_OJ-PJSQE8GTQ.roa (hash: zeHI0YzPke/O83NDkRPiKpR8/sA4EMZWB7tgWAf8HNc=)
                          5: YG4GH2kbor4nZ_HdlU4bXsM_ISU.roa (hash: orPHPnq001m59xqGhWWhOTcNNv+UhgU5D7ZAydlYwJ0=)
                          6: _YciLAUMll_l6Ad-S-3jEr-WUP0.roa (hash: YLNVgwBOiutPhe7HbfVw0eYS7E9cfJJEs9zT8+FOZFI=)
                          7: ct-_W27EwoC0fOGDJoYPaUOCh1k.roa (hash: Ry7d3ypfHQ+1XBY6nTPep5IZIfXf1osPEMavue76/1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:2c:58:c0:8e:1c:25:2f:79:16:08:55:29:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Jun  6 17:00:51 2025 GMT
            Not After : Jun  7 17:00:51 2025 GMT
        Subject: CN=41e699ca8c7370392925bb281d785f1db8fc05b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:2b:74:09:4e:32:ac:9e:cc:20:6c:60:20:
                    1f:96:b7:8f:84:60:85:88:1a:56:84:c2:ef:8e:d8:
                    71:28:33:b3:14:42:0d:61:ec:5e:a5:54:2c:9c:1d:
                    ce:96:8e:e7:7d:3a:be:fb:33:1f:b5:f6:c3:3a:a9:
                    31:ee:86:9e:c8:cd:c6:23:4e:02:82:5e:4f:ba:42:
                    93:da:21:df:ac:c1:24:fd:78:2f:15:09:98:1b:35:
                    d6:f5:63:28:90:db:1e:87:ca:99:21:8f:53:92:bc:
                    8d:a7:29:fd:f3:d4:76:3b:81:b6:0c:b9:11:37:43:
                    28:2c:b1:e1:e4:2a:f2:4b:9f:b5:45:85:44:30:e7:
                    7d:cf:dc:af:2d:88:50:c5:20:9d:e9:09:ef:d0:00:
                    22:95:48:3d:fb:c8:90:cb:e6:20:7b:9d:d6:34:e5:
                    cd:9b:83:86:f1:04:ac:b3:fb:0c:18:af:cd:b0:d1:
                    6d:12:a0:37:c7:33:05:fe:52:a3:d6:66:99:39:e0:
                    6c:fb:a4:9c:63:e8:60:42:74:ef:2d:64:04:ac:08:
                    53:fc:11:0b:8e:ad:ed:11:7f:59:26:9d:c8:01:ae:
                    17:bb:cd:8d:90:e1:f9:79:e0:9a:04:2a:cb:ff:8c:
                    09:28:12:11:0c:4e:3a:bf:a1:b4:e9:7b:01:5f:d6:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:99:CA:8C:73:70:39:29:25:BB:28:1D:78:5F:1D:B8:FC:05:B2
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:53:e4:20:96:14:4e:8b:60:f0:53:a5:db:5e:47:39:eb:7f:
         35:bb:0c:f4:d5:f9:3f:68:f9:3f:81:3f:f0:57:1b:52:45:1c:
         14:6c:85:6a:3f:5a:f8:62:aa:25:12:5b:45:44:e1:12:60:2d:
         8b:de:f6:aa:0c:2e:c3:b3:83:c4:38:9e:e0:04:dc:4c:be:bd:
         f2:5a:9b:06:6b:86:e3:b7:04:e5:ae:bf:0a:e5:61:b4:06:4e:
         cd:69:c0:84:ed:5a:6b:3e:14:6c:80:a5:f8:72:5f:ce:55:6c:
         84:94:fd:ea:e2:40:fa:b6:65:db:ca:a6:af:19:a8:80:dd:72:
         48:33:1b:8b:b8:bc:73:fc:25:f3:2d:8a:8d:11:13:82:39:4b:
         28:30:ad:1b:e4:93:7b:75:ce:22:e6:c0:04:4c:42:84:8e:3b:
         15:68:00:c4:43:d9:6b:5a:2b:7a:2e:81:6d:dc:74:1a:53:38:
         c4:f0:15:24:a6:1d:d4:0a:1a:b9:4e:31:6d:ec:94:6b:1a:74:
         e7:7f:2e:23:23:80:9b:57:14:7d:75:c3:4b:ea:a3:37:4c:ee:
         02:21:bd:0e:62:9a:2c:90:7c:7e:dd:eb:f7:8c:3a:81:ae:ef:
         46:a1:cb:d4:d2:8d:c0:0c:34:46:48:6f:62:ce:67:d7:16:c1:
         c1:ac:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:03 2025 by rpki-client