Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          vLIYje58JtT9lAwtw1boH2kSp40YJmTD0u3KqG90Sxg=
Subject key identifier:   30:7D:0B:C8:E7:35:8A:34:20:06:E0:00:D9:CB:10:79:30:CC:9A:2A
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       01975045D0F175C0897010A1B4928ABA0021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 16:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:42 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: tYDylD3JHMlkRFq6vIQD8aQnoh+vkCzNnCi+B6/MkE4=)
                          2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:d0:f1:75:c0:89:70:10:a1:b4:92:8a:ba:00:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Jun  8 16:00:42 2025 GMT
            Not After : Jun  9 16:00:42 2025 GMT
        Subject: CN=307d0bc8e7358a342006e000d9cb107930cc9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:70:13:bc:86:40:b9:07:63:63:13:6b:2f:
                    6e:bf:a2:4a:b8:eb:f7:84:9c:a1:37:39:4c:12:fd:
                    19:44:e5:0e:96:3c:3b:f2:4f:b4:6d:6b:d0:e2:e0:
                    bd:51:fc:85:c4:e8:49:88:c0:db:18:bb:11:d1:49:
                    bc:a5:95:9c:60:1f:9c:24:6d:64:68:d7:09:aa:75:
                    94:8b:f5:f6:4b:c4:99:7d:cd:8d:48:81:e3:1a:e1:
                    a8:92:19:43:00:ca:cb:03:a5:20:0d:1d:4c:bf:06:
                    58:c2:92:81:98:e9:95:28:12:eb:94:0f:b7:20:ef:
                    93:70:b8:64:68:a2:b7:a8:3d:e7:6c:b6:a2:63:9b:
                    23:32:96:54:84:6c:e1:a4:60:bf:a1:e9:a1:d5:1d:
                    ed:2f:a9:a7:5a:f6:a2:b3:97:88:39:bd:29:c4:73:
                    e4:2c:1b:d9:52:6e:a9:8e:b6:84:c6:f1:70:1d:a1:
                    a5:f6:2f:82:d6:6a:5f:dc:5d:34:10:16:79:53:1e:
                    d8:3f:44:99:3c:df:12:d5:6b:66:b2:b7:38:96:80:
                    58:57:c8:7c:42:84:9e:1a:7c:a0:c8:50:15:6f:7b:
                    38:20:c4:db:85:b6:62:01:1e:e4:82:e8:5e:b1:85:
                    8d:b0:3d:b9:1e:20:88:c5:ea:25:8f:9b:3e:f3:e3:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7D:0B:C8:E7:35:8A:34:20:06:E0:00:D9:CB:10:79:30:CC:9A:2A
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:b9:f9:35:a9:83:86:60:d5:8e:3c:07:33:9d:56:ef:5c:
         42:89:90:8c:ee:0e:ab:44:14:a0:09:8a:9d:1d:82:23:f2:f4:
         be:71:59:15:37:52:01:4c:3c:2b:c0:c8:c1:23:a4:19:76:54:
         ce:a5:1c:9e:1b:33:80:d9:f6:b1:82:a2:d1:61:e2:b7:01:7e:
         c5:31:c8:87:3c:21:63:a9:52:2b:7c:92:55:1c:34:45:3e:d8:
         be:46:f3:d8:6e:32:be:bb:b6:db:59:f1:b4:54:b1:09:b4:26:
         54:55:4b:14:91:f7:86:9e:42:b1:3c:a1:d7:c5:96:92:8a:af:
         40:5c:13:20:70:12:d4:27:03:8b:8d:14:06:d0:e1:48:e3:a5:
         1e:c7:db:70:4f:6b:c3:61:02:7b:95:6b:6b:d5:03:8b:d6:e2:
         13:d6:67:69:c0:8e:34:6f:34:dc:5a:d7:94:24:15:4c:00:a6:
         30:7b:a9:2f:fb:aa:9b:03:7c:35:46:f4:0e:15:c2:cb:41:f5:
         a6:86:ef:bd:f4:73:7d:a2:8a:43:fc:9b:73:d0:23:cd:19:d0:
         1b:15:f1:f4:43:73:c8:02:aa:57:ea:00:06:a7:f4:50:f1:35:
         a6:17:0e:0b:d3:6a:53:21:6c:43:d7:b2:b1:e0:48:a5:f7:a4:
         b9:b7:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:21:55 2025 by rpki-client