Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File:                     rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier:          8Wu+FJp97nqp+0zPOLDZqsdbRTTFaAk8VTViYNkYlMg=
Subject key identifier:   B9:DD:16:A7:D4:59:85:CB:F7:9F:56:65:97:D4:D3:07:A0:E4:2E:0C
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer:       /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial:       01974AE87155C7E2EA5B89275A00FB030230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 15:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:36 +0000
Files and hashes:         1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: jLEnF6Q1jpsvGppFSNQZ2voJ16whYdD5bNIDhqOJ9uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:71:55:c7:e2:ea:5b:89:27:5a:00:fb:03:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
        Validity
            Not Before: Jun  7 15:00:36 2025 GMT
            Not After : Jun  8 15:00:36 2025 GMT
        Subject: CN=b9dd16a7d45985cbf79f566597d4d307a0e42e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:cf:d4:e7:43:7b:4b:6a:0b:a8:57:5e:c5:
                    6e:15:1c:9b:f1:d5:a6:c3:94:5d:76:4f:e3:da:d0:
                    7a:44:52:98:57:e3:20:c2:95:c5:47:f4:9a:63:71:
                    bd:f8:9e:36:85:17:bf:12:19:ed:01:49:d3:b4:1c:
                    df:e7:d6:91:fb:3e:3e:7e:41:13:78:1c:49:fb:f5:
                    49:88:31:5e:5e:8e:46:ad:8a:11:95:e1:2e:ea:a7:
                    ff:5d:3a:c4:cb:81:47:5e:38:6f:cc:f5:1b:50:9b:
                    b0:b1:f2:17:df:85:df:c4:8b:c0:f7:3a:ee:01:7c:
                    29:87:28:8d:8c:cf:f9:0d:b5:62:e4:e0:dc:0d:c4:
                    ca:d8:79:c9:f5:c6:7f:4f:6f:1a:a9:fe:42:83:c6:
                    ee:fa:d0:53:5e:fd:74:ad:3c:17:7a:f8:b6:2a:02:
                    71:ac:23:e5:3d:13:b6:8c:8e:8f:3b:0d:db:ed:53:
                    58:eb:be:cc:69:82:71:a0:9f:59:aa:b9:60:36:86:
                    1a:3f:89:b2:f2:59:c1:e3:3f:34:4f:da:a1:7c:84:
                    f2:ec:e1:21:a6:b0:d4:00:1a:68:d6:56:7a:4d:7e:
                    91:2f:fb:ae:cf:3a:b1:16:8c:00:0b:ad:7f:6a:a8:
                    16:a4:2e:cc:c4:d2:2a:c9:e9:56:3a:07:5e:4d:80:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DD:16:A7:D4:59:85:CB:F7:9F:56:65:97:D4:D3:07:A0:E4:2E:0C
            X509v3 Authority Key Identifier:
                keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:c1:0b:28:59:0e:1b:fa:8a:fe:31:a2:b9:8e:de:5c:a5:
         4a:28:a1:e6:0c:2e:a2:2b:c7:44:dd:9e:c9:6a:1f:c6:6a:f9:
         96:eb:a7:41:1a:ff:97:06:21:11:0b:eb:d5:1d:80:04:7c:0c:
         08:bd:91:e9:86:c7:bc:7c:fd:29:cc:fe:f6:65:44:27:80:54:
         ff:59:07:02:4d:cd:45:96:1e:97:fb:37:48:0e:75:7f:ff:33:
         10:9c:80:95:43:f9:01:83:29:13:cc:ab:84:37:9d:53:3e:52:
         e9:ce:e8:6d:ed:bc:14:b3:05:76:82:99:a0:e9:74:aa:45:e7:
         87:fe:21:71:24:00:54:5a:cd:b4:aa:15:c4:85:e3:77:00:e8:
         32:4f:e7:0e:e3:b0:12:a1:5b:7b:b8:e5:29:c3:a7:97:9b:21:
         19:88:28:04:68:29:fe:f3:fb:05:0c:4a:55:45:6f:33:bd:e0:
         da:20:eb:ba:d5:23:d9:14:e7:65:99:19:55:86:a4:0a:3a:07:
         c1:b8:36:63:53:7e:74:4d:b4:00:82:b9:df:22:4e:31:4f:14:
         cc:0d:01:af:29:ac:94:1f:2b:e6:65:45:de:e1:2b:86:51:65:
         91:db:c2:64:93:69:f7:29:e0:d6:e3:d1:ec:51:0c:ac:8a:e8:
         0c:03:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:38:20 2025 by rpki-client