Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          YcpAjIxGkm/cO9pk2R8+zKnZLkqgpphw2v0WQ7FjDCo=
Subject key identifier:   23:20:39:C4:00:B5:F6:BA:3B:45:95:57:91:F0:B3:EF:FC:4A:1D:B2
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       0197488C66D22C9F4005072F0663147FE2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          1588
Signing time:             Sat 07 Jun 2025 04:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:50 +0000
Files and hashes:         1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: 1Oods12n9DdmqpiVvkLJQBA6nHGnTzxrJzuQ7LBBybg=)
                          3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
                          4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
                          5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:66:d2:2c:9f:40:05:07:2f:06:63:14:7f:e2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Jun  7 04:00:50 2025 GMT
            Not After : Jun  8 04:00:50 2025 GMT
        Subject: CN=232039c400b5f6ba3b45955791f0b3effc4a1db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:f0:18:ff:bf:62:da:1f:4a:f2:16:23:be:
                    91:be:3a:96:30:af:52:e6:8b:23:f7:3b:a8:61:57:
                    c6:48:e8:f7:16:d4:0d:0e:72:2f:eb:e3:e8:67:5e:
                    2e:e3:70:a8:7b:74:16:1c:ee:d8:2f:3b:8a:d3:59:
                    3b:ca:aa:b7:1c:f9:b6:16:7d:0c:d4:05:2a:11:35:
                    de:b6:59:f5:a1:93:83:d9:4d:09:ae:09:00:ad:ab:
                    95:e0:a9:ec:d0:71:5f:3a:29:a8:35:ee:56:77:ae:
                    a6:08:29:db:95:f4:32:b1:43:48:01:17:05:5c:93:
                    59:d0:2f:4d:a5:66:73:41:87:b3:af:7d:db:0c:9c:
                    46:ce:eb:c5:93:53:67:b7:a3:4c:6d:bc:9d:60:6f:
                    46:f3:a0:a8:43:b1:04:84:59:d1:0a:82:cc:66:d7:
                    c7:0e:24:20:c3:38:a3:34:ca:e9:64:f6:7b:5a:ee:
                    22:c7:61:d2:34:cc:98:e0:27:a0:ea:2d:ff:fd:e0:
                    1a:8f:7c:69:94:4d:43:fd:13:84:42:3b:5f:81:9b:
                    be:74:03:ce:7e:1e:36:b0:b8:8d:ce:35:5e:6b:ba:
                    77:c5:38:34:34:5d:24:c6:a5:93:b9:e1:13:fe:af:
                    47:52:83:c2:c8:95:a9:53:af:09:b5:ba:35:96:c8:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:20:39:C4:00:B5:F6:BA:3B:45:95:57:91:F0:B3:EF:FC:4A:1D:B2
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:63:62:58:5f:39:e4:96:06:4f:1d:2c:5f:a8:a6:ad:a6:
         94:fc:5b:0d:25:a0:00:40:b2:c1:83:c3:2c:9a:7c:ad:33:43:
         58:58:e4:4a:85:88:3d:bb:83:bb:5d:f4:5b:cd:f4:69:97:ee:
         4f:39:e3:5f:ef:92:eb:7b:8e:f4:5c:1c:4d:2b:3a:9d:9d:e6:
         b9:26:3d:02:73:67:2c:98:30:79:70:bd:a9:45:9c:92:5d:a3:
         86:06:9c:10:53:5f:7c:ed:56:79:80:1e:7d:1e:0b:72:99:30:
         d0:50:e9:b6:9a:34:c1:a2:c0:ed:96:bc:5c:10:7f:38:03:aa:
         ce:3b:4f:f1:33:d4:b3:fd:92:84:81:f0:c5:b6:74:b1:10:68:
         bc:62:be:bf:35:78:22:28:0a:35:f6:ce:46:63:d1:ac:3e:6d:
         d8:b6:67:47:dc:be:79:da:c7:43:10:33:7b:75:47:21:1b:f2:
         9f:62:f2:24:80:f5:56:a7:bd:20:90:b5:6a:1d:5a:99:ac:6c:
         eb:38:b6:4d:47:71:6d:bc:e2:44:e0:23:26:2a:c2:3a:d6:06:
         4a:0f:4b:2c:2a:3d:c1:4d:cb:c1:88:77:13:f5:ed:23:78:f2:
         08:d4:2c:af:da:6d:97:76:eb:c3:35:8b:ed:51:57:de:92:8b:
         57:ce:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:51 2025 by rpki-client