Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          2jFa5a8a3nslhpKQllxW7SDQRWED5J72B49lCl7mXTg=
Subject key identifier:   BE:C7:8E:04:F1:D6:E8:7C:B6:35:33:02:24:82:D0:C5:4B:9F:89:A9
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       0197493125C65A7149E94DADF006A78B68C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 07:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:47 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: 4J8UNVnxXmZbekV4CX0oGXCGSgD83YrLxLuQqo+S9vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:25:c6:5a:71:49:e9:4d:ad:f0:06:a7:8b:68:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Jun  7 07:00:47 2025 GMT
            Not After : Jun  8 07:00:47 2025 GMT
        Subject: CN=bec78e04f1d6e87cb63533022482d0c54b9f89a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:b0:0a:ae:b9:8d:c7:3d:63:1c:e3:ad:fa:
                    eb:06:d0:d3:fa:14:3f:71:06:9b:44:be:f7:4c:b5:
                    7d:9f:59:c9:4f:46:c1:a4:fa:93:ae:16:50:3b:8c:
                    c6:36:bd:8c:90:47:e0:f1:4b:91:55:1f:f0:b3:70:
                    86:22:6c:2d:9f:b6:c1:0b:2f:51:7c:89:98:78:36:
                    19:82:0b:54:58:46:94:01:ec:52:6c:d6:6d:2c:79:
                    19:c2:e3:f1:5b:b8:76:ff:ac:b1:da:5e:50:f8:e2:
                    b4:a0:e1:eb:2a:de:3e:55:57:3b:69:05:a1:1e:9e:
                    e2:41:a7:be:55:1c:72:4e:2b:06:22:3d:d8:05:41:
                    9a:4f:b5:7f:0f:56:4c:94:44:39:89:b5:e0:a0:9e:
                    82:6a:00:1c:55:98:43:54:3b:c3:02:34:08:ca:cb:
                    ca:13:28:ab:38:f3:fa:b3:06:ce:c9:ba:e8:99:42:
                    64:3b:ce:aa:ef:d2:7d:6b:a9:98:c2:ed:bc:3f:d3:
                    1b:6f:76:44:e1:92:1a:f6:63:8a:dc:31:c1:8a:a8:
                    5c:e4:08:7c:ad:ef:47:7d:b7:b9:8f:50:27:20:94:
                    bd:b7:3d:f2:ae:68:29:91:f2:32:4b:6b:db:59:34:
                    3c:90:64:a8:24:c2:c9:85:d0:6f:b4:b3:91:f1:df:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:8E:04:F1:D6:E8:7C:B6:35:33:02:24:82:D0:C5:4B:9F:89:A9
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:71:6b:17:3e:dc:a0:22:38:de:84:c7:8b:34:55:1e:e1:
         54:f3:b7:2f:cc:7c:6f:e8:db:38:ce:6c:90:51:3a:de:35:b4:
         f6:36:62:01:46:3d:ca:44:b2:13:f7:08:ca:e5:4b:cd:ec:67:
         70:55:cd:28:9e:73:ff:e1:06:ba:0c:ee:b6:99:b6:ac:0f:2a:
         86:1a:9e:d3:35:67:22:46:77:25:d1:fe:29:7e:d2:fa:16:30:
         1f:21:52:6f:c4:d9:34:65:10:1f:f6:bd:57:8e:98:66:d1:a1:
         b0:54:4e:33:24:7c:27:9d:7f:1a:05:1e:24:0a:ed:02:7d:7e:
         eb:1a:bd:31:12:53:77:53:7e:2e:a2:f2:1a:08:f0:2d:2c:e4:
         5f:89:61:7c:31:b5:7e:49:fb:da:05:e4:c2:d2:82:1f:87:08:
         ae:3f:25:ae:34:c8:5b:5a:e6:24:26:60:33:c9:11:8d:74:b0:
         99:16:0b:15:fb:f2:8b:3b:8b:a3:51:51:1f:3a:48:fd:a0:8d:
         a9:79:a8:7c:a1:45:7e:26:8f:d7:12:85:4f:e7:ad:dc:e0:eb:
         aa:2c:2a:11:59:2e:36:e5:83:bc:05:28:43:35:e1:a1:c1:6b:
         c9:5d:a0:ee:28:f5:b9:cb:ab:8f:54:ec:aa:f9:83:8b:5f:88:
         6a:7b:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:40 2025 by rpki-client