Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
File:                     npWzJ2xWYmGPOcvBVYdAy-76GC0.mft (raw, json)
Hash identifier:          qbDYCdi97ao17FB43gkfQrR6ua/BsG3PFWnUEIfQTYk=
Subject key identifier:   42:F3:51:59:09:28:3B:05:D0:67:C6:30:B8:07:D5:26:A9:D8:DE:6F
Authority key identifier: 9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D
Certificate issuer:       /CN=9e95b3276c5662618f39cbc1558740cbeefa182d
Certificate serial:       0197488CA181B3D0B6D77CAE25A178C8CB5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:05 +0000
Files and hashes:         1: npWzJ2xWYmGPOcvBVYdAy-76GC0.crl (hash: /WOuZx7aemwR9mJVGpOtDiqFU/lplMwaaSzUj/9XJzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:a1:81:b3:d0:b6:d7:7c:ae:25:a1:78:c8:cb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95b3276c5662618f39cbc1558740cbeefa182d
        Validity
            Not Before: Jun  7 04:01:05 2025 GMT
            Not After : Jun  8 04:01:05 2025 GMT
        Subject: CN=42f3515909283b05d067c630b807d526a9d8de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:44:dc:2a:54:db:94:22:a9:c1:c4:16:35:
                    29:96:e7:f4:8c:fb:62:46:01:09:5a:1f:a2:4c:9b:
                    a5:cb:d5:40:f1:dc:b2:e5:a7:e7:56:97:d8:30:03:
                    ae:b2:79:45:23:14:ab:bf:05:ba:be:93:c6:18:a9:
                    8b:34:e7:14:13:58:bf:04:68:11:91:b5:70:96:9a:
                    69:93:e0:38:93:c5:f5:92:30:f2:99:1a:5f:d0:9c:
                    15:c9:bc:60:ac:b4:7a:d5:7c:4a:d6:fa:5d:6f:10:
                    e9:ef:8b:44:a2:fc:07:3f:ec:97:18:43:f4:7d:f2:
                    e5:87:8a:cb:08:e6:48:92:c4:bf:29:83:09:cc:38:
                    86:a5:52:77:87:4f:df:85:32:1a:42:1e:41:49:73:
                    a4:da:b8:c1:56:20:0a:ce:96:e0:18:9f:80:78:15:
                    38:c2:d0:fd:22:d1:ce:88:fd:96:25:b2:9c:73:15:
                    d8:7a:b9:ba:c3:2d:d0:53:36:4a:a7:12:0a:9f:88:
                    50:5d:9a:e5:24:9f:c2:bf:6c:6a:53:59:79:68:13:
                    5e:27:61:8f:a3:66:eb:d0:d1:2d:9c:b0:44:5b:bb:
                    5e:8d:ba:fe:6b:23:18:bc:a6:75:7b:ae:0a:80:5c:
                    f9:de:c3:81:56:c4:73:70:84:87:2f:d6:de:27:36:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F3:51:59:09:28:3B:05:D0:67:C6:30:B8:07:D5:26:A9:D8:DE:6F
            X509v3 Authority Key Identifier:
                keyid:9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:45:81:9f:1c:f0:8d:e3:32:fd:9f:9a:f4:ae:25:4b:ae:dd:
         d8:f8:6d:23:d8:68:62:9d:77:09:7b:5b:eb:a3:91:72:56:08:
         7e:1c:1d:41:ab:26:a4:50:f1:da:3e:87:39:88:86:76:da:84:
         90:d7:66:9a:bb:32:bb:d6:8c:5d:c6:44:12:17:20:fb:b0:24:
         da:cd:5f:cf:a9:01:4c:3c:51:48:60:14:bf:b0:5d:0a:f1:01:
         04:f8:9b:e5:c5:80:3a:a3:76:c9:8a:18:4b:7d:46:83:0b:42:
         32:4f:55:06:1e:e3:1b:f2:9d:bb:7b:e5:71:aa:d7:ee:78:92:
         d7:69:11:a8:72:a6:5c:ef:7c:2d:9b:6f:65:75:43:ee:b5:92:
         d3:23:82:ee:fd:e3:da:0a:00:79:bf:4e:e1:81:c9:4c:b8:be:
         50:48:0a:24:fc:33:52:43:8f:e0:c5:ec:62:28:47:af:1b:29:
         36:0d:18:5c:68:06:49:7b:dc:8f:be:6d:e6:5d:ab:27:ac:a2:
         48:30:83:ed:20:84:e8:69:09:bd:e1:0e:ff:f9:49:77:61:88:
         d3:f8:8a:da:8e:94:ed:10:ec:21:51:3b:af:62:be:26:5e:86:
         8d:5f:9d:cd:69:c9:f3:17:7b:73:9c:75:99:0b:49:72:c5:ae:
         f3:0f:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:09:56 2025 by rpki-client