Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          nR9uoeOq2+QQwsa4gV5aviYUfdRS8QbEW0CQvOmvKtM=
Subject key identifier:   33:09:47:78:1E:FD:F8:A3:EE:04:2D:F7:37:C0:1C:51:3E:2E:48:CE
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       019752A29B5EF36568ECE02EC759EC02EDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 03:01:17 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:17 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:17 +0000
Files and hashes:         1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: xFd+Pu2Qdx6ph1j+7sVV/GpKvUwfcq5MxNQKp8VqFd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:9b:5e:f3:65:68:ec:e0:2e:c7:59:ec:02:ed:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Jun  9 03:01:17 2025 GMT
            Not After : Jun 10 03:01:17 2025 GMT
        Subject: CN=330947781efdf8a3ee042df737c01c513e2e48ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:23:7f:0d:02:50:e5:29:d9:01:97:37:e2:
                    ef:8b:1a:6b:e7:0c:eb:13:f1:6e:1a:60:0c:ae:60:
                    f3:cf:61:b2:aa:65:5a:20:92:f4:b6:2b:d2:1b:1b:
                    57:48:ef:36:e8:a3:66:11:5b:fb:da:e6:b3:f5:36:
                    88:89:cf:b8:00:f1:29:6f:e9:e8:44:11:74:83:30:
                    60:d7:24:da:54:fc:0f:38:c1:f6:9d:f2:42:07:27:
                    e5:24:ee:8b:da:cf:94:77:42:3a:6e:b9:fc:90:fc:
                    2c:5a:d9:89:9a:1a:fc:a1:9e:17:6a:84:15:18:7a:
                    2f:66:d6:c5:b1:44:29:2f:68:03:3b:bf:ed:43:59:
                    57:33:1c:9b:f2:a9:c5:48:92:66:d1:73:e1:54:84:
                    77:e7:38:bf:f4:eb:70:85:6d:0f:6e:cc:a6:3f:1e:
                    39:3f:d2:51:c7:e8:1b:5f:e9:63:b3:2e:2e:a0:db:
                    c7:b6:c7:0e:83:55:f0:bf:32:9b:7b:fe:5e:12:cf:
                    fa:d0:67:1c:35:da:2a:eb:81:cf:d5:5b:0b:52:c2:
                    32:8d:a0:73:d0:37:b0:c4:6b:d1:90:34:6f:8e:42:
                    cb:d7:32:6a:a0:d9:41:f7:1b:5c:67:bb:2d:b5:63:
                    84:4f:5a:ac:ff:1e:76:3f:5c:9d:f6:65:b1:18:e7:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:47:78:1E:FD:F8:A3:EE:04:2D:F7:37:C0:1C:51:3E:2E:48:CE
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:dc:37:d2:de:60:d0:8b:b0:47:ab:ec:49:9e:22:5c:a7:
         8d:56:41:47:89:59:1c:e0:71:e2:a6:10:49:f4:56:f7:8b:64:
         7c:89:ed:ff:48:ce:0b:e5:fe:2b:d6:31:df:5a:96:97:bd:99:
         67:3a:9a:8f:ad:0a:e3:4e:42:03:7d:3f:d1:1f:60:8e:30:99:
         31:b9:9b:39:a9:93:63:e0:fa:b3:d2:47:c4:f9:ea:bb:98:3c:
         36:18:c9:06:11:d9:16:33:1e:0b:bd:fa:76:2f:66:07:12:79:
         d8:19:34:90:65:db:1d:26:27:74:ac:3a:f5:52:7e:55:23:f5:
         06:6d:09:f2:53:73:fe:cc:0e:4b:6c:24:28:08:f6:0b:8b:0c:
         9b:76:dc:9d:3e:20:ff:d0:2b:80:4d:11:2b:ea:2c:62:ce:4e:
         44:48:d2:4f:0b:b6:30:e1:91:7d:a0:5b:dd:78:16:fd:4e:2e:
         1b:19:a0:bc:3f:c9:88:cc:1b:33:58:f5:3d:d5:04:2b:50:07:
         20:9b:b8:99:4c:5f:30:74:3a:a4:92:e0:c3:a7:7b:29:7a:a0:
         6d:13:ed:a3:ab:3c:8e:f5:4a:99:e8:59:9e:ec:4b:a8:73:de:
         c4:3b:59:35:7e:00:24:66:4c:fa:93:86:56:20:e7:13:30:0a:
         c4:84:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:55 2025 by rpki-client