Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          Tt7YYaXLEQAJxDwqv/u/54xMIWmCNuEvi8T8d8v4t2A=
Subject key identifier:   57:A7:A4:67:6B:F7:FB:39:1F:E3:4A:59:4C:B4:B4:B1:96:FF:82:F7
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       01974E8E0979F6CF4E9ABA43AD110626B26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 08:00:20 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:20 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:20 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: ugkWYtIv/g5Gmf/D/h20Nccgdo3t2mA7bFYhpUeEYwY=)
                          2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:09:79:f6:cf:4e:9a:ba:43:ad:11:06:26:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: Jun  8 08:00:20 2025 GMT
            Not After : Jun  9 08:00:20 2025 GMT
        Subject: CN=57a7a4676bf7fb391fe34a594cb4b4b196ff82f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:48:63:5e:96:59:6b:68:89:33:02:bf:f4:
                    eb:de:d3:ed:b8:c6:dd:6c:d3:50:91:03:7a:d1:c4:
                    ac:6a:81:18:7c:5c:e0:e1:80:62:9e:c3:73:ef:73:
                    d6:fd:b5:78:8d:1c:9d:64:87:a0:d9:e7:dd:85:37:
                    c6:39:29:18:ea:67:86:a3:55:a0:ff:81:40:ce:62:
                    0d:0b:82:10:f0:fc:f6:e0:07:ba:a4:99:56:9f:77:
                    d1:bc:d7:36:2b:92:b7:e5:78:02:87:6a:0a:56:97:
                    b5:ec:e0:f2:35:07:f8:7c:b3:95:59:7f:09:72:fb:
                    ee:ab:e3:62:1e:c0:85:4d:d6:41:db:09:8a:cd:2c:
                    8c:cb:18:ac:a5:5d:6b:88:2b:8f:f7:fe:25:8e:3c:
                    83:58:d1:66:81:86:c5:ee:5a:2b:ff:7d:29:db:76:
                    c8:cc:9a:0e:53:0e:ed:f5:2a:aa:17:e5:b6:9e:c5:
                    a8:87:01:03:ab:84:33:88:f4:88:e0:72:c4:1e:58:
                    58:f3:61:cd:60:9c:fb:72:1a:9f:d8:43:e6:7b:85:
                    1c:ed:36:78:06:bc:e1:fa:5b:2e:17:6c:c1:c5:db:
                    21:fc:98:fe:84:aa:ed:e7:5a:cc:a4:74:55:63:58:
                    c1:6d:ed:c7:c2:7f:65:4d:35:bf:12:f4:5f:e2:05:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:A4:67:6B:F7:FB:39:1F:E3:4A:59:4C:B4:B4:B1:96:FF:82:F7
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:07:10:43:a0:61:ee:11:f4:ae:62:dd:a9:e4:ff:5a:b4:01:
         87:b5:5d:6a:ac:03:df:05:0b:cd:1a:31:11:25:a9:f2:5e:05:
         ef:c5:5b:db:57:38:91:d3:f9:97:a6:34:95:9e:d0:ba:c1:88:
         fc:0b:3b:42:8e:dc:09:33:af:9b:45:6b:98:2d:a2:e4:6d:7b:
         0a:3d:18:6b:6c:84:c2:37:8e:e9:59:5b:77:01:44:b5:45:7a:
         42:43:15:ce:ae:06:5d:9d:ac:9a:2b:8f:3e:3f:3e:4d:ff:40:
         62:84:2e:40:ea:86:3c:e5:79:80:7d:02:58:94:56:0c:66:90:
         c7:93:28:bc:44:fb:5c:fe:1d:d3:b2:1f:98:6e:43:15:ce:07:
         ac:de:0d:3e:c4:16:15:0f:b5:85:24:55:ca:a7:e1:e9:e5:f2:
         a5:b5:76:03:3d:62:ea:7f:33:f9:ed:ff:5a:8c:f7:22:73:13:
         24:ff:1b:50:07:40:25:4e:31:03:a6:aa:bb:93:2c:9b:62:23:
         01:c1:00:3e:88:2b:6b:d2:d5:ef:6f:b5:f0:9d:3e:67:e3:bb:
         c6:13:e0:a7:67:80:b2:65:d8:94:23:62:3a:2e:f5:21:2a:88:
         b3:f6:9f:ee:b5:40:6f:32:eb:87:b6:23:6f:bb:2e:0f:e6:8b:
         1e:2d:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:45:51 2025 by rpki-client