Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          i5+5Fix43BWhWFwu8/IJ/JaTvSAXAzsAL2onL5Elryo=
Subject key identifier:   D3:A8:62:F3:85:72:CF:39:19:98:6D:87:41:68:E2:CF:CA:95:1F:43
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       0197586D75C93066876D76B3E2104EDE20DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 06:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:57 +0000
Files and hashes:         1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: 1vQ1PmnN3N5LABF/e4A8IfFp28VndSHg0wgdm9ucwgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:75:c9:30:66:87:6d:76:b3:e2:10:4e:de:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Jun 10 06:00:57 2025 GMT
            Not After : Jun 11 06:00:57 2025 GMT
        Subject: CN=d3a862f38572cf3919986d874168e2cfca951f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:3a:29:c2:b2:d1:94:44:c1:d2:89:e2:6f:
                    a8:7d:fa:0c:34:a9:cc:c8:12:48:80:55:db:ba:22:
                    48:67:55:c8:81:7d:37:a9:18:07:c6:12:4c:61:c0:
                    eb:ab:40:c4:a5:ae:7d:8c:00:e2:4d:4a:0d:84:e3:
                    df:c0:3c:5a:de:6a:4c:fe:03:10:4b:a9:a8:66:8b:
                    9e:72:eb:7d:f5:1f:bc:31:e2:be:d8:bf:5f:ff:30:
                    60:5f:21:40:eb:62:63:4b:20:66:eb:0d:30:6a:6d:
                    b0:bd:b3:73:55:59:b7:9e:00:7c:d3:23:06:68:68:
                    88:4d:5a:e5:9d:96:d6:93:8f:6b:8d:59:e0:8e:f0:
                    ea:7f:78:24:ff:d1:73:ca:28:a5:55:77:4e:a7:83:
                    cd:07:bb:c4:7b:f1:3a:ad:d9:5d:b0:31:50:33:ee:
                    0e:9d:ae:74:bd:77:04:19:bf:6e:ca:af:bd:a7:7a:
                    ef:2e:af:32:cc:5e:0d:a5:00:9a:4b:0d:83:4a:32:
                    c0:5e:30:2f:09:0e:b7:7c:b7:82:6f:a0:54:09:7c:
                    de:7f:7e:ec:a5:0f:d5:39:1f:fd:d5:08:dd:33:0a:
                    3e:bf:7a:89:e4:5c:b0:87:88:e2:eb:92:3c:2a:ce:
                    14:d8:3f:42:35:25:67:e9:1f:47:3c:52:d7:b1:66:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:62:F3:85:72:CF:39:19:98:6D:87:41:68:E2:CF:CA:95:1F:43
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:a4:cc:07:26:8f:ad:c4:08:32:8f:77:41:fb:6c:cb:be:
         99:60:f7:3e:1c:b5:89:bb:84:7f:51:8d:ab:72:8f:76:f1:a6:
         c3:5e:0d:56:54:da:c9:36:e3:ef:90:cd:27:48:05:92:b4:67:
         b1:60:a6:2d:4e:9a:37:1c:83:8a:d5:3b:06:19:78:0c:1e:88:
         70:d0:10:6a:ee:c3:b7:48:7b:cf:ca:2f:2a:d7:0f:b1:8e:0a:
         d6:73:26:58:23:f2:1b:4a:99:13:25:31:35:81:14:59:f8:58:
         7b:bf:2a:9f:dc:df:cc:66:60:5e:3f:ed:8e:26:74:5c:46:8e:
         d1:09:79:cc:ab:db:67:6b:60:e0:f1:6d:57:92:5f:49:b5:72:
         6c:3c:2e:14:fc:64:90:af:ca:33:31:11:7b:f8:c4:2d:b4:05:
         3e:f7:ae:d2:1f:b4:f3:f9:00:b9:41:64:ef:04:30:e5:7d:7d:
         c9:46:37:b5:97:ca:1c:09:8a:44:71:d5:6e:fb:48:09:bf:95:
         c5:aa:44:df:88:f7:de:8c:a0:2d:b3:2e:45:61:54:94:ed:4c:
         a3:2b:1e:f1:34:dd:c1:33:e7:7e:a8:bb:5d:d8:e7:81:e1:57:
         07:a7:c5:cc:c9:c2:1c:ca:02:a5:d5:6b:98:ee:72:d2:49:20:
         62:e3:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:25:29 2025 by rpki-client