Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File:                     R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier:          +xQOzmmSfQkaBDRkRwMToM6B6Y2Z4sDsoSh85V92r0w=
Subject key identifier:   5F:FA:7D:E1:68:6C:4B:9C:21:47:C3:CD:E0:C6:17:FE:88:72:26:A7
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer:       /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial:       01974A43E4D4786D092D5F5341DE2CEE04A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 12:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:52 +0000
Files and hashes:         1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: mucLkPw6CqjqpJXPe7wbm1Pbqbq9BMEjExM3TIgcaNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:e4:d4:78:6d:09:2d:5f:53:41:de:2c:ee:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
        Validity
            Not Before: Jun  7 12:00:52 2025 GMT
            Not After : Jun  8 12:00:52 2025 GMT
        Subject: CN=5ffa7de1686c4b9c2147c3cde0c617fe887226a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:fd:4e:00:fc:9e:03:85:23:11:75:4a:19:
                    43:4c:16:69:3c:bc:a4:70:92:0c:b7:23:bb:93:cf:
                    4f:e8:a2:82:61:c3:c6:c6:dc:78:67:f3:8e:c5:c2:
                    24:8a:aa:63:94:24:ee:d4:a0:df:9f:c9:60:24:6a:
                    d5:28:11:6a:7a:21:6b:a6:47:41:59:20:cb:11:31:
                    5a:26:2b:00:5b:07:52:0a:03:d0:a2:78:c4:d7:3f:
                    78:ee:47:63:89:2b:73:aa:da:e2:7e:90:68:58:2e:
                    15:8c:e4:e0:60:5e:01:f4:07:24:89:7f:37:ae:67:
                    c8:8e:82:6b:38:08:9e:32:81:cb:7d:f7:6e:35:f1:
                    db:48:05:53:9b:08:dc:95:c4:16:1e:5a:2d:18:39:
                    b1:0d:bf:20:ab:1a:58:6d:64:7e:ef:3f:26:2e:0a:
                    ce:61:62:e9:2b:77:64:e6:ba:e4:5c:92:3e:e5:62:
                    ae:79:33:01:d0:97:6e:4e:a9:49:b8:de:76:24:ee:
                    b2:25:e2:84:b8:1f:a2:92:0a:f7:45:61:c3:7c:d7:
                    b8:d6:7c:eb:1a:9d:02:0d:a5:da:59:87:ba:6a:ba:
                    83:50:67:fe:07:66:1b:6f:38:32:c2:2a:63:f0:d3:
                    75:94:6b:9b:79:30:86:8b:bf:33:64:16:49:ef:5c:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:7D:E1:68:6C:4B:9C:21:47:C3:CD:E0:C6:17:FE:88:72:26:A7
            X509v3 Authority Key Identifier:
                keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:c0:7f:f6:66:6c:60:82:c6:10:bf:50:8a:aa:52:77:02:
         00:56:dc:b7:21:a0:a0:0b:fd:f3:fb:4d:bb:f9:b1:1d:3c:40:
         33:42:97:22:19:1a:8c:99:ec:bf:f1:a1:26:68:32:4f:f2:cd:
         5f:29:3f:af:25:fc:0c:0e:a0:62:cb:be:a0:9d:89:51:28:96:
         28:b6:5e:df:c1:54:60:19:b0:26:6a:5b:d5:26:5d:f9:58:6e:
         4c:07:9d:ce:a7:ee:49:62:d0:0a:df:24:6a:27:07:10:90:df:
         d8:70:99:0c:95:56:3c:fa:14:68:31:89:f5:88:72:93:62:a3:
         fc:62:da:fa:ee:21:08:78:3c:19:0a:a8:89:6f:97:5b:ac:15:
         7e:62:28:58:4a:48:a6:a3:49:e8:63:bf:f5:6e:4f:4b:7a:36:
         3d:6a:c9:4a:63:1f:42:16:6b:1e:92:09:ee:e5:80:7e:c6:1d:
         6a:64:e7:d7:a7:a7:0b:96:a8:2e:8b:86:c4:d3:f0:7c:ea:39:
         93:aa:56:2d:0c:e1:ff:49:82:34:7a:48:f8:24:63:31:91:83:
         e5:0b:85:86:c0:c6:c2:2b:3a:17:8b:f7:fd:63:46:9b:5c:c5:
         b9:de:8a:61:e0:b5:3b:4c:42:f7:ef:0c:cd:72:3a:75:3b:7a:
         6c:61:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:00 2025 by rpki-client