Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          MGTLYYgfg6I9yOP3/Timj90VkQPyxdyPd9SEkvKROxs=
Subject key identifier:   71:63:45:CE:96:6D:1B:CC:A9:CD:47:BB:41:EA:96:68:93:F7:A9:6B
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       01974D44FF233A309F3F9F818A0EC0845C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1598
Signing time:             Sun 08 Jun 2025 02:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:56 +0000
Files and hashes:         1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
                          2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
                          3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=)
                          4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: w4cTSFs0h9j2VfPqkrjrGRRkyaHW6KOZ6ygV+nlP2x8=)
                          5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:ff:23:3a:30:9f:3f:9f:81:8a:0e:c0:84:5c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Jun  8 02:00:56 2025 GMT
            Not After : Jun  9 02:00:56 2025 GMT
        Subject: CN=716345ce966d1bcca9cd47bb41ea966893f7a96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:cf:d1:34:00:37:60:a3:1f:10:40:42:02:
                    c9:73:42:db:fd:2d:df:9b:44:8e:e3:fe:a2:88:9e:
                    16:ee:cf:67:f4:00:5a:49:af:b8:4d:fe:b3:7c:f9:
                    bf:89:57:37:ee:d6:17:0f:f9:38:bb:42:de:3c:4a:
                    e5:72:c9:78:60:ab:4b:57:45:78:7a:44:00:ad:5a:
                    cc:1a:df:a3:94:79:13:f7:1d:52:9b:5e:59:07:e2:
                    78:67:56:fb:b9:02:78:2c:a3:c7:a7:18:63:99:b3:
                    2c:a8:5a:1f:9e:0d:a6:da:d2:e4:27:a9:34:33:8d:
                    df:f3:21:5d:22:5c:bd:92:2f:9c:a0:53:48:05:29:
                    9d:90:bc:dd:8c:cf:fa:4c:b5:8f:7d:66:0a:f1:31:
                    45:a3:ea:31:f9:1a:8b:3f:c0:18:8f:8e:9e:59:dc:
                    13:a7:f8:a0:fb:d7:47:fb:9e:36:f3:46:bd:43:d1:
                    17:51:8c:e9:12:a8:73:88:22:f3:f5:79:56:c8:82:
                    72:fc:97:6e:37:8d:cd:f5:8e:2e:b5:68:fd:53:ed:
                    c4:ee:bf:a6:9e:22:59:85:a6:e6:36:79:88:4d:a8:
                    64:dc:64:be:6f:aa:36:8f:00:33:e8:99:39:9d:13:
                    c7:f1:22:85:7d:24:6c:e4:fe:14:c4:8a:93:7a:42:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:45:CE:96:6D:1B:CC:A9:CD:47:BB:41:EA:96:68:93:F7:A9:6B
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:28:50:f4:37:c5:7a:f6:3a:eb:54:d2:46:79:40:cf:3f:
         dd:d5:8b:bf:58:b4:8c:43:7f:c2:10:5a:da:63:e2:ed:2b:73:
         9e:a4:67:ac:5f:e7:3e:4c:c3:27:a3:41:57:07:fc:b9:b5:d8:
         a9:fc:1b:4e:9c:29:5a:75:98:92:c9:79:46:6d:f5:dd:c3:b0:
         cd:9c:8c:d6:73:d3:90:4c:2c:3f:dd:47:9c:e5:8d:2f:48:df:
         12:1c:d3:44:9c:5d:48:ad:6c:90:23:dc:7f:59:f8:33:da:12:
         33:02:db:d8:e1:05:95:6d:7f:de:5d:14:9f:47:ad:a3:c5:eb:
         5f:e4:56:27:be:5a:10:f3:cd:56:c2:dc:51:c3:47:9a:88:1c:
         a0:c6:39:ed:5e:00:19:56:d0:bb:a8:4f:88:70:de:fa:4b:ab:
         c5:41:13:89:12:de:ac:c3:5a:ca:44:44:24:42:58:1d:18:89:
         c2:5d:52:e2:ca:27:4f:57:53:c6:65:6a:47:32:70:b6:9d:69:
         67:c1:72:12:b4:c2:4d:b5:76:a6:56:8a:3c:73:90:12:6f:05:
         7a:a8:ea:67:5a:db:f3:f9:9c:3e:17:cc:31:cd:d5:52:a2:de:
         25:85:82:6f:c7:39:59:4d:95:32:d4:ae:57:bf:ff:38:3f:40:
         52:66:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:55 2025 by rpki-client