Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File:                     PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier:          z3xjyMhIBWpJraWEYz05XdHlT18BmSmKorxZk+RJvKo=
Subject key identifier:   FA:25:F5:F1:86:96:50:1A:FC:EE:EC:EE:1F:E3:CF:C4:AD:08:88:CD
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer:       /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial:       01974931835033318859574B86FA4D3F7B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 07:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:10 +0000
Files and hashes:         1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: rmLgPwSWqmpvxT68YYPW1U5+vJPk2x1OizQZI8aiPdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:83:50:33:31:88:59:57:4b:86:fa:4d:3f:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
        Validity
            Not Before: Jun  7 07:01:10 2025 GMT
            Not After : Jun  8 07:01:10 2025 GMT
        Subject: CN=fa25f5f18696501afceeecee1fe3cfc4ad0888cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:b0:61:f9:56:ae:20:df:8c:48:b3:bb:57:
                    3a:f8:96:f5:f9:cd:93:06:29:0c:15:0f:ae:b2:31:
                    b5:24:68:ad:71:8a:48:ef:7a:0e:60:d1:e9:33:ff:
                    d1:b3:90:ae:e4:a9:e4:8e:36:c5:b6:b9:15:e3:d9:
                    6b:41:51:d6:78:f9:16:fa:0b:be:90:b9:ba:68:1b:
                    33:20:b3:8f:d9:43:a9:22:5e:3f:53:f6:4d:1e:74:
                    15:ac:38:62:74:54:4b:a9:c5:88:a3:52:0b:97:18:
                    9d:fd:d7:d7:0b:65:54:ee:af:e7:67:e4:ff:34:54:
                    22:dc:5a:c9:ec:de:bc:45:7b:79:01:55:9e:f1:7d:
                    f0:30:ae:b7:24:67:b2:f3:19:49:3c:5f:ba:7d:58:
                    c9:09:45:66:26:76:fa:8c:83:9e:78:85:89:77:9e:
                    47:6b:0c:7a:7c:8b:bf:fa:a0:39:15:0f:40:30:ca:
                    50:73:4a:a9:58:21:a8:ff:4a:86:f5:41:0d:e0:d3:
                    33:72:45:cd:c3:ad:b4:e5:22:9e:1f:82:af:eb:d6:
                    4c:2f:17:4f:fc:37:be:df:a6:73:50:e4:cd:be:97:
                    9c:a7:c9:3a:f9:de:1d:d6:6c:b7:97:72:4d:be:7c:
                    24:ca:64:b2:af:ef:cf:bd:42:19:22:33:40:2f:01:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:25:F5:F1:86:96:50:1A:FC:EE:EC:EE:1F:E3:CF:C4:AD:08:88:CD
            X509v3 Authority Key Identifier:
                keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:ee:81:b3:a2:e3:5b:7a:5a:f5:3d:db:67:22:f4:0d:60:
         b6:da:95:68:c9:a8:56:56:25:e3:c0:6f:c9:c6:0b:e5:f5:73:
         a5:92:c4:4e:be:47:e7:44:2f:f4:73:65:1f:08:b2:57:44:01:
         05:d1:59:ad:a1:80:1e:33:7a:17:c8:04:e6:a6:6e:53:f6:9b:
         1f:eb:71:56:ed:dd:9e:2a:10:22:37:c0:54:c8:2e:00:18:cb:
         ff:70:9e:86:d3:62:e2:87:ee:e4:da:99:78:db:9e:fa:3e:9b:
         d0:f1:8c:2c:98:ba:b7:f2:1c:ed:b2:56:44:28:70:44:aa:1b:
         80:06:32:5f:24:b3:fe:b8:3f:74:6e:79:13:12:a9:e5:8d:20:
         62:23:fc:32:64:0d:73:bd:1a:49:31:b2:2e:71:b8:bb:f8:c0:
         fa:4b:0b:3a:bc:78:0b:d0:47:ba:55:46:5b:0a:03:31:42:28:
         6b:14:7b:56:78:b9:af:2f:36:7f:06:cc:ad:1c:4f:2f:9f:de:
         af:be:43:b8:be:6c:d8:d5:4d:cf:fb:7e:6b:64:5b:81:50:f8:
         37:9e:d5:e4:74:df:94:40:57:3d:12:68:e0:25:b4:c4:4c:e2:
         62:3e:c4:a3:33:1a:9b:d2:cf:a8:1c:bf:b3:f8:a4:45:77:54:
         0f:61:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:26:57 2025 by rpki-client