Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          JRHsqKo+/IoMkTOR6UDMgVkrdaMrKgPBjwxFDDEniu8=
Subject key identifier:   7F:EF:BA:35:35:E0:35:07:67:C7:1F:AE:A9:C5:27:D7:E9:11:E0:AE
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       01974930F13E7C1AC9EDBD5E63E559EA5A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          1415
Signing time:             Sat 07 Jun 2025 07:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:33 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: gFMjw4RUnhpLH9rqsNQdmVaAetW8Hvta0dAHHmy0ngk=)
                          2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:30:f1:3e:7c:1a:c9:ed:bd:5e:63:e5:59:ea:5a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Jun  7 07:00:33 2025 GMT
            Not After : Jun  8 07:00:33 2025 GMT
        Subject: CN=7fefba3535e0350767c71faea9c527d7e911e0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:95:b3:76:d1:b9:fd:f6:0c:93:ca:1b:56:
                    fb:92:2e:76:cb:5a:03:bf:62:dc:16:69:4d:1f:0b:
                    49:83:70:61:81:8d:22:44:55:a9:d4:17:54:8a:2b:
                    50:3f:33:72:e4:96:e4:d8:58:c2:c5:20:b7:f0:9a:
                    88:02:d2:d6:bf:91:58:44:44:22:76:0b:7e:e3:92:
                    d6:b3:c5:1e:94:65:4c:a1:b9:01:f7:de:89:82:cf:
                    2d:c4:5d:87:8f:c9:93:51:5d:fc:c5:b5:c8:86:f9:
                    a4:f7:44:31:9e:09:18:ce:4a:f9:67:85:74:51:9b:
                    2c:d8:c6:36:24:21:ee:f0:ab:40:a4:01:ff:51:17:
                    25:4f:fe:5f:ec:b6:9b:6f:8c:c8:25:17:7b:db:e7:
                    79:13:59:39:26:f8:79:06:a9:5f:7f:ee:97:ce:a4:
                    b9:47:4b:ee:ca:f9:81:4d:3d:f0:b7:f9:45:9c:1e:
                    76:4b:12:f4:12:5d:f9:44:98:52:ab:94:20:7a:11:
                    2c:93:ac:2b:ba:7f:a7:06:57:ff:53:3d:a5:00:cc:
                    f6:3e:19:56:07:68:de:fe:92:36:f1:6e:b2:ed:45:
                    96:3b:92:f9:ea:d4:7a:37:db:f3:e1:ab:82:d0:37:
                    d1:2b:e5:ae:dd:a8:5d:52:b7:e6:cd:1a:ac:32:3c:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:BA:35:35:E0:35:07:67:C7:1F:AE:A9:C5:27:D7:E9:11:E0:AE
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:46:96:11:f9:fb:6b:42:6b:03:76:46:ab:4c:2d:b9:10:
         d4:86:5f:0e:ab:2a:bc:40:38:a0:32:19:f9:bc:ce:99:00:9d:
         5b:03:6b:10:9d:ee:31:39:99:32:6d:9d:bf:a0:01:37:28:18:
         ec:8a:1d:a9:02:18:0b:2b:b4:6d:47:02:67:bf:aa:d4:a3:2a:
         a4:db:14:15:45:12:54:d7:f6:4a:d5:a9:96:0f:e2:74:2c:40:
         bb:6c:6b:0b:28:53:d9:25:9b:7f:e8:b5:c8:2e:d4:fc:e5:23:
         d7:45:4c:71:c4:38:a2:56:03:ec:1f:bb:21:3d:ed:6a:ac:e5:
         b6:2c:29:29:b5:c4:34:fa:49:6a:8a:60:de:be:e1:8f:9d:c0:
         42:8a:c5:1e:a8:59:13:b1:e9:9f:f8:fb:20:d5:0a:ac:85:f4:
         17:65:57:93:78:6b:e6:8d:01:2a:a3:71:41:81:26:c0:c7:90:
         6b:f7:c5:fd:6d:3a:7a:b0:1e:5d:32:50:b5:90:03:48:0f:2f:
         7a:9c:b1:1c:59:32:b3:d1:61:71:75:ac:34:c8:55:75:07:1c:
         26:a0:1e:e2:9e:34:c4:fb:87:98:28:ce:aa:0b:61:e5:e2:e0:
         7a:e4:ad:83:e6:0a:83:9a:32:e1:45:70:4d:c0:96:5a:b7:4c:
         c8:7c:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:25:28 2025 by rpki-client