Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          Okv7ujj4jUTznETIxSN1FznTOYAoj6IfCHxerQ1j93Y=
Subject key identifier:   95:B6:AD:7B:27:D4:0D:DE:DE:C9:E5:5C:59:74:DF:EA:16:7C:03:39
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       01976094832379C57B8F32389D40829FBF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 20:00:35 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:35 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:35 +0000
Files and hashes:         1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
                          2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: y+DZ0jkA+o5mkKfTS23HyyAvNFDNEogZqPUj3DaDtnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:83:23:79:c5:7b:8f:32:38:9d:40:82:9f:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Jun 11 20:00:35 2025 GMT
            Not After : Jun 12 20:00:35 2025 GMT
        Subject: CN=95b6ad7b27d40ddedec9e55c5974dfea167c0339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:ba:7a:06:a1:87:b7:08:b3:e3:46:30:7d:
                    26:53:ac:33:b3:1a:68:46:f0:0f:30:40:7d:55:d6:
                    64:33:20:01:10:6d:92:87:72:98:1b:57:04:0b:91:
                    d3:fc:ea:21:a8:79:16:75:75:a8:f3:26:9b:19:f9:
                    07:d1:75:e3:b8:06:68:94:fc:29:56:e3:ae:18:8b:
                    7e:3a:70:fa:1e:e8:3e:c4:5e:93:d6:65:68:b2:b5:
                    64:f4:ec:99:2a:e4:6a:e4:82:2d:f0:27:67:b7:db:
                    01:b5:9b:07:56:de:b8:eb:c6:99:90:81:9c:e4:0e:
                    4f:d6:7d:b1:bd:b7:9a:90:6e:3c:49:18:94:d6:c0:
                    2e:e0:0e:b0:c9:35:75:b8:64:fa:45:44:87:19:85:
                    21:1b:d1:3d:32:e1:71:34:a8:82:c4:ca:15:e5:13:
                    e6:e9:01:e3:4e:63:c4:aa:87:7c:2d:8a:e3:d9:cd:
                    df:e8:4c:90:e9:b0:37:31:45:bc:5b:16:94:43:d5:
                    68:59:5d:30:78:8c:2d:52:06:1d:39:0c:f7:ae:92:
                    33:f8:e0:9a:74:ce:90:91:f8:35:b5:e0:a6:d9:63:
                    78:ef:8c:be:05:a9:d9:d7:6e:ab:e8:22:63:1d:74:
                    4f:1a:c0:db:5a:95:d3:94:ee:14:7a:ed:09:e4:fe:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:AD:7B:27:D4:0D:DE:DE:C9:E5:5C:59:74:DF:EA:16:7C:03:39
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:59:73:29:51:5f:63:3e:8a:1c:c1:7c:46:31:9b:61:2a:
         2c:92:61:2f:1d:47:8c:3b:94:33:8e:6b:7c:03:e8:41:b9:aa:
         1c:ee:9a:b1:bd:ff:05:c5:c8:3c:e2:ec:3d:f3:01:7f:83:54:
         12:a3:0f:cf:22:dc:ce:34:ef:7d:92:c7:57:0f:e8:d1:e1:22:
         ad:eb:96:91:8d:bb:1f:02:e3:6a:8c:d9:0d:d6:3e:eb:32:d0:
         a8:87:99:ab:41:72:97:b9:4a:bf:b8:65:12:f1:f4:86:4e:0b:
         5b:a3:3e:fe:14:af:f4:d4:9a:bc:73:c2:ee:2f:1d:69:0f:06:
         ae:5b:62:4b:cc:9d:c4:3c:15:aa:b0:d6:b1:bb:d4:1d:55:5a:
         3a:5d:5f:f3:41:36:4d:3e:56:e2:46:f2:c4:af:df:44:dd:4e:
         c1:4f:b6:bb:f5:19:c7:39:db:36:26:2f:5b:09:eb:ed:78:f6:
         87:4f:fd:dc:6b:29:b4:9a:f5:1e:0a:13:74:8f:c6:7d:b7:72:
         64:a0:f9:4e:de:43:f4:26:40:59:72:0a:57:55:80:41:4a:fd:
         23:64:c3:b0:65:0d:a3:9d:b8:bc:69:f1:29:d0:76:03:d0:4b:
         b4:2d:4b:fd:8c:19:61:4a:ca:4f:f4:95:c7:fb:47:c0:3f:68:
         17:4a:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:33:28 2025 by rpki-client