Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          f65sWqTPJ0iF4SWuxwsH6KBc8O6W2XSz3Naq74XFiwQ=
Subject key identifier:   15:16:8B:DD:79:12:B1:32:EC:5C:F3:38:FB:F1:D5:9B:7A:F1:44:04
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       0197485531E8DFE4932F5285B4C683E6C301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 03:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:32 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: VWGNB5cpnZURs0xIm4aHfZUaCFcQjlQsYUzARnRiWPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:31:e8:df:e4:93:2f:52:85:b4:c6:83:e6:c3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: Jun  7 03:00:32 2025 GMT
            Not After : Jun  8 03:00:32 2025 GMT
        Subject: CN=15168bdd7912b132ec5cf338fbf1d59b7af14404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:2d:05:d9:35:d3:2a:9a:01:5c:7c:4d:9a:
                    3c:6c:c9:17:f6:52:1f:f6:ef:22:4d:8b:32:1e:c0:
                    00:1a:7b:20:7b:02:1c:ee:1c:d5:75:57:46:62:e6:
                    a8:b5:11:fa:7f:6b:86:72:3e:84:b7:f5:7a:cb:8c:
                    c0:3f:41:6f:38:c9:6f:1b:3b:7e:65:c7:4b:b6:ff:
                    ed:dc:7c:3b:d7:e9:d7:85:57:11:57:8e:25:d0:7b:
                    6e:61:72:fb:ef:34:1a:06:b8:21:c3:a7:68:a6:a7:
                    94:34:5d:ab:35:eb:6b:54:ba:c2:ad:05:2b:c8:74:
                    13:44:42:54:3e:d3:d6:1f:be:ab:f1:58:c1:9b:f4:
                    18:9c:8f:75:90:c8:27:76:3f:5e:ee:1c:c1:24:c2:
                    3b:ac:33:3b:81:68:fd:b7:62:ce:90:a3:e6:23:ea:
                    6d:4c:c8:8f:6f:53:64:18:60:34:64:5a:b1:59:a0:
                    47:7a:82:a1:50:ca:c8:3a:9d:dd:89:fa:d8:79:52:
                    a7:49:36:5c:96:f6:d9:9d:e6:87:52:8c:7a:b5:37:
                    e0:63:14:69:11:22:29:6d:b5:fa:dd:13:54:d8:b0:
                    cc:1f:b3:91:31:8b:d5:ad:df:36:dc:cb:ac:8d:b1:
                    b3:10:b8:de:7c:04:b7:f9:a3:67:9a:a2:f7:25:46:
                    06:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:8B:DD:79:12:B1:32:EC:5C:F3:38:FB:F1:D5:9B:7A:F1:44:04
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:c2:e6:84:b1:53:79:c9:8f:94:91:3e:a5:fe:d4:29:6e:
         94:30:bd:95:7c:be:8f:8b:d9:5b:90:81:ed:ca:09:79:46:83:
         8c:ed:2b:ac:d3:2e:10:00:68:aa:35:81:bd:1c:77:d8:b4:52:
         54:7b:02:36:27:be:ee:9b:0b:42:be:06:b6:70:4e:f4:d6:a8:
         96:4e:91:66:04:ee:4a:70:67:fc:76:da:0a:e5:0f:f7:ea:7e:
         b6:16:ae:4d:fb:85:46:ac:bc:78:53:8f:51:50:a0:4a:7c:5b:
         03:dc:ed:dd:bd:2f:96:0e:64:ca:53:8e:46:6b:1d:4f:ef:ad:
         d4:43:41:eb:83:37:64:b0:41:3d:31:4e:12:7e:09:ba:03:8a:
         0e:ce:36:16:9b:fd:3d:80:e3:62:89:6d:58:29:c7:3b:5f:65:
         57:58:af:b9:6e:91:d3:87:9b:75:1b:0b:75:42:82:24:d5:3c:
         79:12:7a:fe:3c:a3:f3:19:14:b8:b5:3e:1d:23:f2:96:48:bd:
         f4:8c:48:06:18:10:c3:32:be:ee:8a:02:fa:fc:28:62:b8:06:
         c3:27:88:5a:3f:47:32:56:e5:da:28:d9:c0:8f:f3:e5:a8:07:
         06:b8:49:a8:41:b1:85:7d:97:9b:ff:c6:66:df:ae:58:cc:a0:
         b6:24:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:26 2025 by rpki-client