Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          PQg+FfbJbZLzjl8uScdQsVgA/fmAjH2h2n3JAwBiO2c=
Subject key identifier:   6E:EF:D0:A4:0C:FC:E4:1A:82:48:CE:15:16:BC:E7:98:97:6D:EE:E7
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       0197304DB89EACE08CCF782B0D1F2DB2C462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          1582
Signing time:             Mon 02 Jun 2025 11:01:29 +0000
Manifest this update:     Mon 02 Jun 2025 11:01:29 +0000
Manifest next update:     Tue 03 Jun 2025 11:01:29 +0000
Files and hashes:         1: 0J1BscA7ehqbG9hZ9JbrawPNkVs.roa (hash: /iRggTw1aJBwhVUj4BhUfXwzpsGpq6zWBqZNLYzvF+Y=)
                          2: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
                          3: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
                          4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
                          5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
                          6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
                          7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
                          8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: 3wv3CxEMFFsUcTbkfo34XebexlEMWmEKpa6DY7jSkc4=)
                          9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:30:4d:b8:9e:ac:e0:8c:cf:78:2b:0d:1f:2d:b2:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: Jun  2 11:01:29 2025 GMT
            Not After : Jun  3 11:01:29 2025 GMT
        Subject: CN=6eefd0a40cfce41a8248ce1516bce798976deee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:c6:16:1c:7d:70:c5:93:aa:31:f8:80:c7:
                    27:da:79:f9:5b:74:11:a6:db:46:89:b8:40:94:9d:
                    d1:31:23:a4:20:b1:44:54:d2:1d:9f:e1:b3:62:6d:
                    a4:0d:29:c6:db:00:d1:81:3c:78:1f:62:70:84:77:
                    4a:17:21:37:64:0a:c8:5f:17:6a:36:4e:f8:7d:de:
                    cf:fc:fa:83:78:76:26:ce:15:28:4a:4e:ae:6c:fe:
                    9e:62:00:a2:d1:2b:97:b1:c8:6d:78:10:0f:b0:61:
                    04:3c:9b:c0:98:20:e7:89:27:c4:06:98:b3:87:71:
                    af:c3:00:d0:6c:d8:d9:d9:3d:37:e7:8e:f7:31:6a:
                    30:87:bb:3f:e2:35:2c:81:6a:7f:4c:54:14:a8:9f:
                    f1:06:2d:e1:02:1b:9f:6c:b5:e8:28:bd:35:eb:55:
                    01:69:8d:a9:0b:12:13:33:82:d4:12:3e:66:87:39:
                    ee:97:0e:e0:c0:08:67:36:fa:67:a3:e9:df:0c:50:
                    2e:96:ab:8c:de:d6:0a:ab:0b:10:0a:52:f0:ff:9a:
                    4b:b9:f9:12:4e:1a:95:77:0b:b8:30:9f:3c:60:34:
                    35:d2:2f:73:9b:60:6a:91:83:34:02:b1:fd:21:17:
                    40:af:02:5f:5d:e6:c7:17:07:c8:fb:fe:a1:3c:65:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:D0:A4:0C:FC:E4:1A:82:48:CE:15:16:BC:E7:98:97:6D:EE:E7
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:be:a2:95:9a:51:4b:56:72:d1:f5:ee:61:9d:ba:2f:5e:f5:
         14:b3:70:6f:d5:ef:34:32:77:21:f9:34:ab:03:ff:52:a4:a8:
         19:c6:00:8d:94:0c:b2:80:12:f0:55:4a:01:13:53:3f:34:61:
         72:7e:e6:9a:0e:54:0a:14:e0:63:29:21:1d:ef:4e:84:3d:31:
         1b:c4:39:7c:61:b2:5c:d1:6e:98:a4:eb:43:0d:24:95:12:2a:
         54:34:11:92:80:89:4d:d3:a0:74:aa:57:49:25:ea:6c:47:ba:
         16:3e:64:21:59:f3:33:f6:aa:b8:14:8e:08:03:f6:0d:51:71:
         a3:1b:12:82:f1:6c:07:89:39:7f:4a:b7:7a:17:c9:92:8d:7f:
         61:54:49:0d:12:27:ea:1e:2d:0f:dd:18:2d:26:86:4e:aa:95:
         55:02:bd:5f:0f:87:6f:16:21:8b:de:b8:fc:46:ce:a9:68:53:
         8d:e8:67:9b:b8:6a:97:f4:75:c8:67:6d:39:9a:1c:0a:18:a6:
         bd:44:35:08:d5:3d:7e:9e:d5:d6:27:8d:6b:88:f1:d4:84:a6:
         9a:8b:18:8c:29:68:07:a1:cc:42:0c:c8:a3:f3:ad:9c:5c:a1:
         5b:62:2c:28:6d:d6:62:bc:5a:54:6d:1c:df:44:22:b2:37:8a:
         c0:4c:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 18:47:16 2025 by rpki-client