Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File:                     _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier:          ZV9tikE1fSXKea1kESkSHH9HyW8cKCy3WWWCqX76GgY=
Subject key identifier:   59:CB:D3:E1:C9:C0:89:21:AA:E8:C1:2E:C5:31:B6:81:5C:8D:7F:AD
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer:       /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial:       019748C2E989133511516AB0C48FCD207DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number:          0302
Signing time:             Sat 07 Jun 2025 05:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:22 +0000
Files and hashes:         1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
                          2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: Ya/GdAN17m3/5tWNUiNrBlCqM6JmBm2IdXToeilETlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:e9:89:13:35:11:51:6a:b0:c4:8f:cd:20:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
        Validity
            Not Before: Jun  7 05:00:22 2025 GMT
            Not After : Jun  8 05:00:22 2025 GMT
        Subject: CN=59cbd3e1c9c08921aae8c12ec531b6815c8d7fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:78:d3:d3:7c:ac:59:2f:23:cf:64:69:81:
                    ce:b8:45:bd:ec:51:ee:f3:10:38:6a:4b:eb:df:eb:
                    05:04:88:8c:71:7f:93:14:70:b3:b5:7f:21:68:16:
                    6f:40:f6:41:6e:82:bd:72:ca:d9:e8:89:ec:3b:d9:
                    20:5f:5e:95:38:69:2d:bd:1c:64:fc:8d:3c:14:04:
                    2b:8b:59:f4:f5:a1:3e:74:46:78:ff:7c:e7:1c:94:
                    f1:03:92:85:33:48:ad:f1:c3:85:8a:6d:f2:70:40:
                    c2:88:e2:05:94:48:ff:d3:81:05:02:7b:b5:0b:4b:
                    ae:0f:d8:1d:4d:de:61:d0:2e:75:c6:73:54:af:96:
                    6e:ef:e5:e9:45:1c:9e:f9:02:18:e9:dd:eb:cc:f2:
                    58:42:c6:06:e3:95:10:7d:90:49:86:19:b9:46:12:
                    4c:22:bc:2b:40:89:86:63:a1:25:96:0d:b9:1a:fc:
                    1c:19:af:08:9c:46:21:05:a5:df:d9:c8:9e:b0:89:
                    f3:64:cb:4d:82:ef:f6:f8:26:85:c6:82:88:7a:fc:
                    a6:cb:14:de:97:ff:a2:28:3b:a7:2b:62:15:39:83:
                    72:49:dd:f3:a2:0c:4f:96:b5:08:19:80:20:98:38:
                    be:cd:a6:85:22:2e:bc:38:97:15:f7:d4:9b:c6:30:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:D3:E1:C9:C0:89:21:AA:E8:C1:2E:C5:31:B6:81:5C:8D:7F:AD
            X509v3 Authority Key Identifier:
                keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:37:b5:bf:ba:c7:19:ab:95:58:99:5c:42:90:1f:c8:0b:
         ff:95:59:cd:04:e9:08:be:59:00:14:7b:db:73:e9:8e:6f:ac:
         92:2e:af:36:19:db:e9:aa:ff:c9:67:c8:d4:f1:09:51:1e:81:
         81:89:88:4c:a5:e1:de:5c:ab:51:65:04:c8:1d:c7:e8:92:c4:
         89:b9:21:7b:b1:da:65:bb:54:ab:36:96:b8:22:cb:bd:dc:25:
         ab:99:d7:82:aa:ba:71:12:fd:5a:e7:cb:9d:8e:45:57:57:23:
         1a:46:d7:20:1e:ae:8f:5e:b5:c7:ab:aa:a6:b6:ef:65:47:11:
         9a:1d:ad:db:dd:85:6a:74:bb:d5:97:a5:66:9d:e8:7f:e1:ea:
         a6:cb:59:20:7f:96:be:12:72:53:d7:b5:7d:08:fd:81:95:6d:
         81:dd:05:98:73:ec:e2:06:4c:05:f8:bf:9e:73:5d:f0:24:57:
         94:1f:19:bd:7c:a4:67:a7:c8:ab:90:8c:db:94:8d:6e:30:f8:
         2e:07:a0:75:56:e4:84:2f:9f:52:cb:6b:09:09:45:40:6d:d5:
         32:1d:74:5d:0c:54:aa:71:81:4e:d3:07:2e:18:c3:57:a0:c3:
         4d:33:f1:9f:cc:49:32:b0:91:90:91:1c:da:5b:19:a1:c3:c0:
         ff:dd:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:21 2025 by rpki-client