Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          4qFkDeoqZgiiV0RIrx55TxtUt932e1sW+FqZuKhhEAk=
Subject key identifier:   7C:00:7E:3B:02:8E:A5:D1:B9:10:41:83:7E:42:AF:03:8B:80:A9:D1
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       01973DD2317F1BBA521256C8E1774A013B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          1580
Signing time:             Thu 05 Jun 2025 02:01:14 +0000
Manifest this update:     Thu 05 Jun 2025 02:01:14 +0000
Manifest next update:     Fri 06 Jun 2025 02:01:14 +0000
Files and hashes:         1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: l1XnHJKrFlPXyqHXfePTDEm+nrxIk+CZWqMb8zxiSsA=)
                          2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
                          3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
                          4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
                          5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:d2:31:7f:1b:ba:52:12:56:c8:e1:77:4a:01:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Jun  5 02:01:14 2025 GMT
            Not After : Jun  6 02:01:14 2025 GMT
        Subject: CN=7c007e3b028ea5d1b91041837e42af038b80a9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:7a:bf:8e:e0:bb:c8:b1:4c:1a:11:9d:2b:
                    b3:f1:a7:1e:7e:49:c9:cc:42:fc:c7:70:68:44:be:
                    77:fd:ff:09:33:d4:8c:90:a2:ce:c1:4e:5e:a9:1f:
                    ea:9a:34:3b:04:f3:77:a5:f6:ae:c3:73:b2:c8:a0:
                    00:49:49:0f:59:93:94:93:c4:0c:19:df:ef:9c:e3:
                    b1:60:1a:9f:fc:57:0e:f7:fd:cd:73:87:fb:65:5e:
                    05:6a:e6:a0:37:b3:8f:30:79:7d:29:a3:38:73:f6:
                    b3:40:01:8f:f4:68:23:f0:04:53:e2:e9:1a:70:d5:
                    0f:c9:d5:ab:b9:86:d5:dd:cc:97:58:19:e1:ca:a4:
                    ac:09:fb:68:97:38:91:5b:ba:dc:31:a6:fb:c6:de:
                    f2:d7:09:9a:a8:b1:68:d8:77:2f:0c:c5:30:4f:65:
                    81:fb:71:8e:ee:92:4a:d1:46:dd:a1:f6:03:f6:68:
                    7d:3d:90:2d:d8:ff:84:b3:ad:18:06:87:37:69:bb:
                    a2:e4:3b:e9:c4:e5:e5:93:14:93:c8:3a:53:dc:0a:
                    89:a1:2a:49:fa:82:b3:c9:f2:44:a4:f3:84:66:0a:
                    c2:7c:29:73:88:25:5b:a9:5f:37:92:3d:aa:33:12:
                    71:a5:c3:b0:ef:86:fb:73:bf:b5:b8:e7:df:53:e8:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:00:7E:3B:02:8E:A5:D1:B9:10:41:83:7E:42:AF:03:8B:80:A9:D1
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:2f:d8:0c:dc:88:3a:59:7f:2c:fc:31:b3:d5:e3:e0:f7:
         4f:16:91:3a:61:1b:0a:a9:d3:ef:6d:ab:df:b4:81:ef:57:3f:
         c3:cb:f1:e8:90:cf:03:fe:5f:6d:59:e7:fd:02:ce:8a:85:9a:
         18:0b:7f:3a:c1:2f:ba:bc:9a:84:34:35:e0:2b:ae:7f:a8:f8:
         5b:b9:c3:c5:64:91:b7:82:2b:1a:92:e3:22:0d:b0:eb:47:e8:
         53:5f:a4:3c:b6:25:eb:b4:42:51:2e:43:37:18:0d:ce:26:d9:
         e3:41:da:4a:8b:a4:32:b2:8a:74:d7:f9:04:0e:d9:a1:be:6e:
         52:e5:1f:fd:bb:ff:51:35:f0:fe:8c:0c:ed:8b:c1:a3:8b:d1:
         7d:35:c2:38:8c:68:d7:15:ec:6d:1d:7d:36:d8:39:4c:0f:b5:
         8a:31:2d:1d:8f:f4:9d:5b:86:9e:3d:cb:02:cb:a1:20:82:2a:
         23:ee:39:47:9c:2e:9a:e1:f2:67:01:2a:e2:cf:cc:aa:e8:a1:
         b9:91:83:f7:08:cc:5b:ba:8b:b9:98:26:58:35:0d:e6:98:d6:
         8a:02:d1:40:93:6f:4d:ce:ed:14:72:a1:7f:3b:da:eb:3d:90:
         e9:f8:cb:d9:27:f3:54:b3:4c:d2:10:b4:26:97:32:2d:ba:d2:
         d7:fc:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 06:58:05 2025 by rpki-client