Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          bO2t+Tep2wtJKuivaG3rVswqZUS1H13PImJzo1PytfQ=
Subject key identifier:   57:9F:A5:5D:7C:E4:18:7D:AF:56:7F:1A:56:57:6A:72:F4:AC:EA:78
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       01984664851A02C0CFDE27790D3C5B07BBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          1590
Signing time:             Sat 26 Jul 2025 11:00:49 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:49 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:49 +0000
Files and hashes:         1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: IBI8zR/g7se5JSPZgETgsK3oK9JI2PZjkHqRTVIvnj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:85:1a:02:c0:cf:de:27:79:0d:3c:5b:07:bb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Jul 26 11:00:49 2025 GMT
            Not After : Jul 27 11:00:49 2025 GMT
        Subject: CN=579fa55d7ce4187daf567f1a56576a72f4acea78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:1a:49:74:ec:f8:c6:be:5b:6d:78:be:88:
                    26:c8:fd:ac:e4:22:b5:9e:8d:c5:6d:16:d3:f2:29:
                    3d:be:b8:0b:34:58:a4:5f:3e:af:f6:7b:a6:37:d7:
                    94:ae:63:c6:0d:3e:a0:9a:0f:9d:65:a5:77:07:67:
                    06:07:68:13:03:40:07:2e:05:c3:23:f0:a5:f3:6b:
                    8d:c4:66:8f:4c:5d:26:b2:f1:6d:4c:43:ec:cf:3e:
                    78:6b:db:21:25:9e:5f:ca:04:78:45:af:11:f9:0f:
                    b3:77:de:6c:d3:f2:c3:c2:16:5b:ab:c2:61:17:4e:
                    7e:88:d2:10:f3:90:8d:0c:d7:12:8f:f0:72:55:49:
                    7f:6d:c2:61:3e:5b:db:65:42:45:71:e9:64:8c:a2:
                    a4:f9:5f:8a:80:74:41:2a:d8:8e:ed:0b:77:05:6f:
                    da:9d:7f:19:06:bb:15:ca:eb:be:71:ff:50:35:be:
                    fb:93:65:ee:4b:a7:e9:d6:eb:7a:47:89:f0:c8:05:
                    ff:f0:01:e8:5b:f6:ad:49:45:4e:bc:b5:bb:5c:d1:
                    20:dd:f9:fb:4d:8e:80:8b:35:0c:07:bb:a4:9a:91:
                    df:53:d9:e2:7c:6e:d2:b9:f9:9b:d8:f7:a5:6f:e6:
                    80:1d:e8:56:19:77:ec:8c:45:61:ca:48:a6:2a:14:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:A5:5D:7C:E4:18:7D:AF:56:7F:1A:56:57:6A:72:F4:AC:EA:78
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:bd:a6:5f:fd:8f:6c:ef:55:44:97:a2:6f:06:93:fe:e9:
         07:cc:4f:9a:17:04:c8:9b:8e:1c:15:c2:72:14:c5:aa:d9:51:
         f4:87:33:7b:9d:4c:09:ff:68:30:b0:18:34:99:7d:69:a7:91:
         65:cf:34:b1:67:29:24:56:c0:ec:41:7c:b8:26:9d:a1:95:a9:
         e2:f8:69:88:05:18:ad:81:a1:0b:5b:32:87:e4:74:b2:49:08:
         1a:77:82:76:9b:c5:96:47:5b:0a:17:fe:9f:d4:de:fd:62:99:
         58:c4:90:0e:02:2a:de:6b:de:b7:7b:3d:ee:fc:66:8e:f1:af:
         ac:18:55:3f:83:17:2f:41:a9:f0:6b:da:79:28:51:ab:ba:90:
         3e:c1:19:11:f3:d0:25:fc:dd:18:28:7a:94:bd:eb:97:d7:04:
         4d:0d:ef:d9:85:ff:73:65:e9:68:e0:17:79:61:b5:a1:4c:96:
         6b:d5:0c:cb:bd:c0:32:46:9e:0f:65:c2:db:df:56:52:dc:d1:
         20:56:b2:0c:44:fd:0a:ce:9f:d7:64:1d:c9:13:0d:c5:af:e2:
         c1:7a:5d:50:f4:84:c0:af:13:58:bb:ad:d3:3c:dc:d6:48:4f:
         40:67:fc:29:74:31:a9:9e:bd:a8:bd:d7:e9:88:bd:65:b2:43:
         ce:6d:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:26 2025 by rpki-client