Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          PBGF5dqflA8Fz3njwdW7ncSxy0CkgP9VYyZcGUdJRwI=
Subject key identifier:   82:CE:9D:92:A2:88:7B:97:CB:70:83:92:98:DE:75:25:25:9A:29:6A
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       01974AE926B3623C34666B0F5149F90FCC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 15:01:23 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:23 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:23 +0000
Files and hashes:         1: 6c4mStZuLFdhZBFsXfkgnUT06kQ.roa (hash: 9X0qingJMgYTrqsJkiVxYQdXm9VKJ3coL7dPpBcYOeI=)
                          2: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: fBBByggwWjWnpmxcbJo48iMlEdjsbmUOZZst3AKoZ74=)
                          4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:26:b3:62:3c:34:66:6b:0f:51:49:f9:0f:cc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Jun  7 15:01:23 2025 GMT
            Not After : Jun  8 15:01:23 2025 GMT
        Subject: CN=82ce9d92a2887b97cb70839298de7525259a296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:47:4a:cc:85:f0:88:ad:51:6e:77:68:f4:
                    c9:05:05:06:7a:90:92:04:64:d5:84:69:82:91:05:
                    9c:46:40:08:3a:5b:e5:c8:e7:21:32:fd:66:8d:47:
                    73:3c:49:f3:9f:99:c2:e4:2e:03:61:12:e7:de:84:
                    38:20:cc:56:da:7a:a0:2e:7d:3f:27:82:61:c6:0b:
                    24:da:37:e9:97:dc:f8:0e:6a:be:23:f3:5d:fc:87:
                    b3:c0:7a:16:31:dd:b9:b2:d7:6b:ca:ea:d1:2c:67:
                    99:8d:22:7c:7e:e5:45:02:a5:7e:d3:d4:86:ac:ed:
                    5d:8c:2b:11:fc:bb:13:fe:d7:5b:ef:b9:d3:85:4d:
                    df:1c:9d:74:6d:2d:5c:77:91:83:bd:be:27:b3:44:
                    97:62:3d:03:4a:95:29:c6:d4:08:74:c7:83:5c:5f:
                    75:80:e6:d3:67:b3:38:5a:6d:ed:34:8e:78:cd:6f:
                    94:05:a8:fc:71:f2:09:6a:d7:df:d1:9f:3d:d7:fa:
                    73:06:ef:55:90:3a:0b:06:bf:4e:76:49:5c:3c:02:
                    88:64:6a:8b:ba:eb:7f:82:36:8b:7d:50:20:12:89:
                    ad:b5:75:cb:6b:44:79:25:73:29:a2:d4:22:cb:ac:
                    02:ea:68:e7:5f:bf:ee:92:4f:54:04:21:d6:5f:33:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:9D:92:A2:88:7B:97:CB:70:83:92:98:DE:75:25:25:9A:29:6A
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:80:33:66:8b:42:5b:44:c7:2e:16:8d:c1:b5:9b:6e:0c:90:
         a8:9d:f2:80:ad:14:d5:45:95:15:ed:35:a4:0d:77:a7:85:d1:
         1f:10:98:03:db:d5:64:d4:e3:c7:72:18:54:2e:64:d4:fb:0f:
         d1:91:5c:b0:69:81:3b:f7:a4:7e:68:3f:cf:93:13:3d:38:79:
         ea:9d:ea:45:56:f8:10:e7:bf:92:3c:6f:02:99:36:30:e1:39:
         4d:08:ff:41:96:0a:b1:97:28:2a:a9:f3:db:97:98:bc:13:6a:
         07:e8:33:e8:ae:01:41:ff:eb:6a:06:63:6d:a0:93:83:82:75:
         53:55:3e:38:40:ab:fa:d0:5e:53:b0:a8:4e:50:bf:4a:98:93:
         91:75:90:b6:f5:d3:f0:cc:54:7a:2e:3f:54:e3:39:99:48:ae:
         61:72:f6:9c:f1:13:eb:86:03:2c:c0:e2:75:bc:c8:48:c5:0e:
         a9:b5:2d:4f:73:a1:ce:b2:4b:df:79:bd:44:89:98:ec:a7:f5:
         bf:5a:ce:ca:63:ee:2a:f5:75:90:d2:9b:ae:53:62:ec:91:90:
         43:7e:d6:ce:c7:ad:7c:23:77:f5:c2:37:e8:71:f1:c3:3d:e2:
         3b:0e:2a:47:0b:02:41:6c:2e:27:9a:a5:18:06:91:9f:3c:6f:
         bd:dd:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:35:50 2025 by rpki-client