Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          hfmvWD8/LbS7EOJ3G0G+rEhrLCZ/5H0Gv7b6LlkW9oA=
Subject key identifier:   2D:51:38:FE:7E:5E:A1:FC:17:90:60:B8:68:29:8A:F4:B4:47:BA:41
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       01976214E03C5E53D435EABD2FAA2C88E97F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1585
Signing time:             Thu 12 Jun 2025 03:00:24 +0000
Manifest this update:     Thu 12 Jun 2025 03:00:24 +0000
Manifest next update:     Fri 13 Jun 2025 03:00:24 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: FgQypQsTJiy4tt8fFZr+qztKLLJqxzZKtIL5CtdBzCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:14:e0:3c:5e:53:d4:35:ea:bd:2f:aa:2c:88:e9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Jun 12 03:00:24 2025 GMT
            Not After : Jun 13 03:00:24 2025 GMT
        Subject: CN=2d5138fe7e5ea1fc179060b868298af4b447ba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:cb:bd:5f:1d:dd:a2:04:d5:fe:da:45:30:
                    89:47:74:7b:27:28:2c:c6:3c:fc:49:04:4c:73:72:
                    ee:85:2e:b6:92:40:78:db:b0:c1:d1:b0:ba:55:09:
                    1a:64:71:5f:5f:6f:97:fc:aa:fa:1b:23:f1:a5:37:
                    98:14:9e:22:82:63:ac:9e:2d:19:e3:a0:76:a0:f1:
                    c0:04:03:2b:54:e0:ff:38:a7:48:6b:33:7c:79:a4:
                    98:4a:b9:e6:89:b9:14:f3:09:30:74:34:8f:10:91:
                    8f:2a:3a:42:83:9d:cf:46:3b:69:f6:98:05:af:b4:
                    e5:ea:e4:b2:a1:d6:27:1d:b7:c4:d4:d2:9e:cc:7c:
                    27:25:e9:9f:02:cf:75:c6:2b:b9:66:f5:dc:ea:26:
                    b2:2d:1c:ee:3e:ea:0c:3c:86:e9:97:b1:da:68:63:
                    1a:7e:d9:e1:91:9b:bf:82:9c:84:dc:88:ba:f1:db:
                    e2:f2:c3:75:84:6a:3d:7d:e5:22:fe:b7:9d:9d:ac:
                    ed:b3:c3:92:a2:7a:51:46:19:2c:8c:fa:17:88:31:
                    a5:27:d6:4c:bd:e3:2b:49:91:15:75:1e:11:45:75:
                    3e:58:f2:3f:51:df:0e:d0:9e:c9:43:f5:57:90:d7:
                    f9:f8:5b:8d:d7:83:70:dc:35:2b:b8:ef:3d:bd:ab:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:38:FE:7E:5E:A1:FC:17:90:60:B8:68:29:8A:F4:B4:47:BA:41
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:89:f4:4b:42:2f:0b:28:77:8c:63:84:e0:b8:7e:7c:b8:fb:
         9b:16:22:49:ae:d9:38:8d:71:ad:01:96:44:45:38:13:85:da:
         86:1b:eb:f7:4d:fd:c8:a2:88:f0:4b:66:ae:52:1e:54:4d:68:
         72:9f:6b:09:fd:5f:86:d5:ab:e0:4b:c0:c4:d8:bb:de:e0:a0:
         52:ad:c3:4f:40:93:ee:7b:a4:2a:88:82:b9:d0:2b:9a:82:99:
         a2:ea:e1:c7:c6:d5:41:c6:ac:6d:81:e9:a9:a7:7e:2b:ba:67:
         51:3b:bf:86:e7:87:2a:21:50:c0:7a:4b:71:8b:c5:48:c0:a7:
         ff:85:ad:5a:d0:e1:8c:89:ec:b2:16:7b:c9:46:fb:61:c3:72:
         b4:4a:ac:a1:96:1b:a0:91:11:22:2a:b0:10:d5:5e:ab:c5:86:
         a1:39:5e:1b:1b:98:18:34:0b:92:94:18:b5:40:44:3a:c6:97:
         88:73:c1:35:64:be:03:92:3d:05:e6:3a:0e:51:e5:be:eb:bd:
         c2:22:5c:3f:31:53:d1:43:c6:da:53:71:9e:27:a8:40:60:d4:
         89:cb:bd:d1:30:b1:05:5e:26:90:66:8b:b6:22:15:3c:c9:06:
         75:fd:bf:da:32:8c:90:0b:8f:11:e6:98:4b:9b:a5:b6:55:b6:
         d6:ed:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:32:40 2025 by rpki-client