Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File:                     dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier:          /WsbG6jcV4JsYjBgGfPmxqh11d5Nl5vNd4jq/EVzOBc=
Subject key identifier:   D0:7F:4B:86:1A:46:4A:A7:0D:01:AA:52:8A:A1:D3:96:B1:91:2A:FF
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer:       /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial:       01974BC493601C3FF0A02B0F02BB985A5A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 19:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:03 +0000
Files and hashes:         1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: lbKk4sJ2KVofovudnxyCKfprv6P4ZWLR/fj4OoVBgtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:93:60:1c:3f:f0:a0:2b:0f:02:bb:98:5a:5a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
        Validity
            Not Before: Jun  7 19:01:03 2025 GMT
            Not After : Jun  8 19:01:03 2025 GMT
        Subject: CN=d07f4b861a464aa70d01aa528aa1d396b1912aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:9c:f3:96:24:0b:4c:60:1d:6b:57:8e:22:
                    bd:64:c8:d2:b2:59:83:c3:06:d8:98:91:1d:11:a1:
                    44:d8:35:25:89:23:58:0c:eb:f3:3f:32:f5:a0:a9:
                    33:20:1f:a5:49:1a:b3:bd:7b:80:08:7b:6c:57:3a:
                    26:74:fe:6b:57:61:97:7c:2f:df:79:3f:a0:33:71:
                    47:f6:ee:bf:db:a6:1d:ab:de:0d:f4:ca:ad:7e:e2:
                    4a:38:c6:09:64:c4:be:31:e5:1f:10:10:a4:39:c4:
                    b5:d3:28:84:c6:e6:a6:07:c7:e8:bb:d0:33:bb:99:
                    42:44:36:68:6c:a6:49:bb:f9:16:0c:12:00:d5:d1:
                    83:a8:23:4b:a1:37:f6:2c:bb:15:61:08:06:f3:a2:
                    0c:48:d0:37:4d:e9:ec:16:4c:8c:9c:a4:0a:1a:52:
                    2c:f5:ae:6e:43:94:f7:39:e1:85:a7:94:d8:de:87:
                    16:21:d7:45:37:60:66:2e:c2:5e:26:86:23:9b:ae:
                    30:b9:06:dc:00:8e:77:36:98:a4:0f:f6:24:bf:cd:
                    86:b0:98:8c:68:a7:8f:d9:72:d6:25:ad:b7:1a:66:
                    5a:e3:52:1c:6d:fc:83:69:28:2a:12:ef:90:d7:61:
                    47:5b:b6:a8:58:f7:bd:39:19:04:85:34:07:16:4d:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:4B:86:1A:46:4A:A7:0D:01:AA:52:8A:A1:D3:96:B1:91:2A:FF
            X509v3 Authority Key Identifier:
                keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:85:49:fd:0e:17:30:c8:ed:0d:c5:39:2c:a1:4c:1a:e1:21:
         2e:61:b6:c3:8e:ec:43:72:2d:8a:02:94:1b:5c:9f:c1:04:4a:
         94:24:0e:89:64:1c:7c:33:f4:81:ec:41:a6:01:d5:43:26:5b:
         e6:cd:56:87:e4:28:0c:2c:0d:6c:e1:12:ad:7e:39:23:d4:0f:
         65:c9:e4:93:5f:95:28:86:a3:20:bd:0c:d4:2a:87:a8:fd:21:
         ef:cd:af:e7:17:33:ef:4e:01:0e:c9:74:1b:48:fa:c2:18:e9:
         8f:fd:26:91:68:b4:2a:8f:b7:fb:22:2d:e8:62:ac:43:7b:fa:
         ba:09:81:fb:75:cb:f3:cd:7f:db:4b:bf:08:29:be:5d:4e:8a:
         42:21:f8:4a:11:1d:c9:84:fe:f3:2c:fb:bf:f4:ad:f5:ea:27:
         d5:91:1a:16:a7:37:c7:0a:71:b6:6e:7d:1f:df:6a:80:34:d3:
         c0:6d:7f:e3:2a:c4:44:d2:c0:bc:25:15:f5:36:17:c4:04:a3:
         5b:4e:4c:97:32:df:03:bd:f0:b7:99:22:f3:3c:c3:b0:2f:fe:
         1f:76:2f:32:e0:68:eb:b5:09:86:13:7b:74:70:f9:7d:56:55:
         37:0e:41:91:ad:bf:b7:be:5a:03:80:5c:d2:43:73:e4:2e:99:
         cc:85:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:48 2025 by rpki-client