Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          cLi0CL1AtAwIXisR7Y7tVdyLdv64LM9dcFpK5Boo9+E=
Subject key identifier:   1F:12:81:08:7A:1A:E4:BE:22:DD:6D:A9:C0:12:B9:A4:A5:B5:ED:80
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01974D7C140DBA3DA2084DBD8DB00E9CFA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1585
Signing time:             Sun 08 Jun 2025 03:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:06 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: gWAy5/Zgxuhl8t7kM9oXh8vCF9vjfM2eo7H9TsQc2+0=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:14:0d:ba:3d:a2:08:4d:bd:8d:b0:0e:9c:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Jun  8 03:01:06 2025 GMT
            Not After : Jun  9 03:01:06 2025 GMT
        Subject: CN=1f1281087a1ae4be22dd6da9c012b9a4a5b5ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:40:d0:ff:67:6f:fc:7e:98:28:67:a6:c8:
                    9c:ae:88:00:c8:7b:14:d6:ee:0c:ca:d1:00:70:67:
                    55:45:0f:75:76:dc:9a:ab:00:cc:74:d2:0d:22:ec:
                    33:34:e7:c9:44:d7:b1:1a:16:23:8f:ea:80:c8:3b:
                    18:cf:da:2e:62:55:6a:47:0d:67:49:3b:4b:b2:ff:
                    59:08:2b:ef:d7:c2:06:43:28:2f:25:58:2d:cd:07:
                    d6:6e:50:61:a8:ee:dd:ef:09:f7:cb:be:f6:46:5b:
                    c4:bf:70:8f:3f:68:1d:b5:8b:5e:5b:c4:68:6f:34:
                    02:dc:b0:63:1f:25:77:1a:73:f4:22:92:c7:12:87:
                    12:c9:78:c7:a0:26:61:d5:4e:af:fa:3d:c1:ad:57:
                    02:d1:7d:df:ac:03:54:a8:08:6c:d8:f5:bc:86:e6:
                    86:b8:be:8e:35:c4:44:8e:1c:0d:90:3a:a4:b3:95:
                    cc:da:4a:df:6c:50:5d:20:a0:96:38:02:da:5d:54:
                    17:4f:0c:3b:b5:9c:68:ce:15:87:bc:d4:3c:ac:5a:
                    29:3c:d1:56:19:c4:a0:54:56:42:f4:0b:09:84:d1:
                    90:1e:6c:e2:26:c7:a2:e8:cd:0a:ce:a1:97:e8:44:
                    66:16:78:5f:0c:78:ac:e8:47:f4:ce:e1:e4:82:6e:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:81:08:7A:1A:E4:BE:22:DD:6D:A9:C0:12:B9:A4:A5:B5:ED:80
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:ff:83:88:62:60:e9:e5:86:f3:47:5e:94:f6:34:b5:b8:
         4c:2f:2f:35:86:df:4c:1a:a3:59:c0:03:07:ad:b6:f9:7d:30:
         15:14:f4:22:18:d7:c5:a0:d4:cc:b3:85:39:4d:ff:38:cf:e3:
         b1:04:91:04:49:0e:fa:42:9a:e4:ad:fe:be:c5:92:aa:28:6e:
         cb:1d:48:22:27:c8:e5:80:ff:80:d1:c5:2a:13:50:a5:5f:ba:
         86:3e:24:86:f6:c8:3e:f9:7e:2c:4f:af:61:0e:a0:34:78:54:
         cd:fd:a7:be:37:c1:a1:1d:d1:e7:51:5f:a6:7d:e9:18:6a:4b:
         13:b9:4a:8f:9a:7f:24:ea:98:33:b1:c8:d8:2d:e5:e5:a0:c6:
         aa:3e:2f:00:bd:c7:ed:7f:3f:2c:ed:56:b4:a4:77:cd:31:9b:
         df:8c:f8:4a:b7:52:b8:f1:f3:49:4f:18:dc:da:37:b6:eb:6b:
         15:e6:ac:d9:d7:80:47:e8:a6:d6:63:d9:16:63:3c:6c:3e:32:
         4c:4f:02:d5:fd:46:85:e2:66:8e:c7:8f:00:42:bf:7e:fc:05:
         0c:2e:27:e3:29:0d:8a:90:59:52:ab:20:2a:44:dd:b2:27:3d:
         bc:76:3a:31:08:bf:7e:81:f1:02:26:e1:46:92:fd:ce:4d:c1:
         6c:19:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:48 2025 by rpki-client