Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File:                     RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier:          IIO/1vPAYjKA3dFECNYpyTdqEt91mp5JY6zrS++N9p0=
Subject key identifier:   7F:4D:D0:0B:14:9C:08:A2:36:E6:0B:99:25:57:3E:F0:34:E6:E0:8C
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer:       /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial:       019759B6AD6341231AF684877FCBE115F9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 12:00:33 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:33 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:33 +0000
Files and hashes:         1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: PF8b4MYupoL1KvlJ6rbqV6yKuwLFpZq+ZQc8ionETPg=)
                          2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:ad:63:41:23:1a:f6:84:87:7f:cb:e1:15:f9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
        Validity
            Not Before: Jun 10 12:00:33 2025 GMT
            Not After : Jun 11 12:00:33 2025 GMT
        Subject: CN=7f4dd00b149c08a236e60b9925573ef034e6e08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:ba:52:a3:c6:7b:39:47:1a:36:fb:32:f7:
                    b6:7f:ee:73:85:78:aa:7d:c1:8c:62:c0:88:c9:88:
                    22:0b:b2:78:e5:bb:be:44:71:b1:2e:0a:57:ac:c6:
                    25:f1:0c:58:47:c4:96:bc:3b:74:c8:dc:98:85:4e:
                    91:75:21:0e:3e:3c:00:67:e0:53:71:03:8b:79:62:
                    aa:e0:6e:d2:0b:ce:7f:db:e9:44:2d:7a:9f:16:6b:
                    09:dd:f2:dc:df:cb:a9:71:d6:88:b6:32:7c:4e:c4:
                    04:de:e3:5b:62:16:59:1c:74:a6:53:64:a5:e7:6a:
                    8a:9f:5f:43:a4:02:e2:1e:f0:02:d0:e8:ee:19:a2:
                    6c:95:b8:3c:97:2c:35:24:e7:83:85:83:55:5a:9d:
                    ef:fa:96:22:d5:23:c1:83:7d:2a:02:94:68:2a:ec:
                    44:9d:8e:10:f7:fc:a1:41:10:b8:b4:7e:8c:37:46:
                    37:6f:43:fa:4f:82:9a:58:c7:d2:f4:45:9e:e8:71:
                    eb:5c:b3:61:e8:1e:46:65:67:63:1a:bc:e1:6e:19:
                    8b:e1:2e:e3:a6:61:cf:6a:40:7a:ef:d2:c4:10:71:
                    63:8c:3b:ea:03:09:be:04:7d:b3:5a:6b:ec:34:d7:
                    ed:82:77:30:81:2a:df:18:10:ca:1e:9c:e1:14:37:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4D:D0:0B:14:9C:08:A2:36:E6:0B:99:25:57:3E:F0:34:E6:E0:8C
            X509v3 Authority Key Identifier:
                keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:c1:cd:70:ba:65:48:65:14:f4:3f:79:49:45:d5:5e:c0:
         12:d3:cb:51:b1:d1:04:4f:dc:8f:ff:68:35:2b:99:ac:7e:6c:
         0b:96:ea:1b:a1:4f:ba:42:01:6e:bb:a2:40:1b:30:f2:1b:8d:
         a6:ef:0c:51:13:3c:47:93:26:b0:c8:f1:ed:04:17:aa:a2:f7:
         62:36:c7:10:dc:70:a9:e2:55:c0:6b:2a:1f:d8:bb:06:d7:d1:
         fa:63:52:b3:8d:db:1d:05:48:c3:29:60:b3:9b:e9:85:23:ca:
         a4:be:36:3d:87:69:0a:c2:4b:8e:ae:6f:71:29:e6:83:f4:88:
         1e:df:3c:ab:d6:5d:a2:c9:9b:4a:7d:54:ec:a5:14:a3:b4:60:
         e5:43:93:26:fc:3f:07:f8:d1:bd:9f:b7:9f:f0:53:9d:46:aa:
         79:33:0a:5a:d6:3c:59:1b:43:b5:a6:be:08:7d:36:ad:f2:7c:
         90:c6:1c:ef:e3:dc:f4:7a:5f:b5:20:ae:3b:96:83:90:c5:8c:
         a9:d0:f5:ef:8a:1b:0b:bc:f1:01:0e:81:1a:58:50:33:11:91:
         c0:dd:c2:83:91:b2:41:b4:72:76:1c:16:0a:1d:63:19:75:3d:
         80:68:c8:fb:9e:db:f4:dd:72:20:cb:6c:8f:1c:8b:de:98:27:
         84:9d:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:37:30 2025 by rpki-client