Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          RPy0Pkn6uuTPr85+d/X/mYbXRpHps2xX09HnmCmXO54=
Subject key identifier:   D1:CE:7A:95:4D:BC:ED:24:BE:29:F4:F9:83:33:93:77:2D:1C:97:73
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       01974A0C7C58355C975395B531871BF9EB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 11:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:21 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: GRgtYD8kBsouOM02KI2kGaziChZqfqG/EuAZcbYml/U=)
                          2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:7c:58:35:5c:97:53:95:b5:31:87:1b:f9:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Jun  7 11:00:21 2025 GMT
            Not After : Jun  8 11:00:21 2025 GMT
        Subject: CN=d1ce7a954dbced24be29f4f9833393772d1c9773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:f4:51:cc:15:a3:19:85:dd:4c:bb:49:94:
                    28:58:dd:2a:70:37:16:20:f3:08:f8:3b:20:15:b8:
                    42:43:a6:ab:9f:bd:ee:db:b9:6f:3b:82:d7:e6:a3:
                    cd:4e:b2:d5:81:49:73:e9:01:1c:07:67:0d:4a:91:
                    f3:76:13:af:7e:31:4c:c4:2f:d1:b1:01:5d:a6:11:
                    b8:47:26:9e:2b:d0:02:a8:2f:78:6a:e4:62:c1:b9:
                    05:7e:54:12:a6:68:11:f2:62:42:5f:89:5a:18:40:
                    26:cc:81:79:a9:38:1a:68:37:fb:ba:a6:97:63:33:
                    fa:1f:46:41:19:27:7c:04:88:d4:01:f6:62:a7:15:
                    30:e8:e0:00:f7:cd:d6:a0:d7:ec:11:65:c2:66:61:
                    37:7e:6f:de:26:89:0a:a2:53:af:0e:6e:d9:88:cd:
                    0f:ca:e0:3b:b1:55:30:2d:68:36:81:28:8f:23:1e:
                    5d:31:1a:c7:02:3a:3d:f2:9b:d0:dc:ad:66:91:a4:
                    09:61:a0:01:30:4f:cd:a4:12:51:af:92:33:50:5e:
                    fa:39:1e:ed:25:37:0c:85:44:fd:f2:bb:6b:f4:3e:
                    62:b2:10:cc:2f:d0:2c:f2:6b:85:90:1c:5e:e9:68:
                    7c:f1:88:af:14:9f:98:b5:77:47:4a:0b:eb:ea:bc:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CE:7A:95:4D:BC:ED:24:BE:29:F4:F9:83:33:93:77:2D:1C:97:73
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:d4:84:b2:af:81:33:c6:50:f8:09:48:65:3b:f6:41:43:
         53:84:3f:a7:7e:49:3d:59:e6:45:64:03:49:6a:90:51:04:e5:
         51:db:d6:4b:14:9f:3e:39:35:c0:c4:8d:28:4d:d3:5b:7f:45:
         72:3c:ae:aa:59:d3:6f:49:fe:27:38:54:5c:21:ce:26:c6:9b:
         94:db:8d:86:f5:68:34:2f:76:83:02:bd:18:55:d5:a2:3e:63:
         50:f5:94:38:b3:d8:d5:77:8f:d1:4e:f1:33:26:ce:95:9d:15:
         4a:c2:f4:12:b2:d3:93:89:23:c0:bf:3a:bf:99:b2:9c:73:8d:
         8d:23:05:5d:06:51:b5:8a:a7:94:73:ac:3e:80:b5:42:4f:ba:
         eb:5f:78:63:73:3c:7e:2f:12:a9:42:88:8e:27:05:ce:85:16:
         92:9e:b2:69:d8:c3:bd:e4:da:85:58:b4:82:78:29:d2:28:65:
         b9:93:97:85:60:d4:26:e7:32:7d:01:76:3a:d5:d9:f2:c1:43:
         5d:cc:4c:4b:63:44:b3:2b:cb:04:e3:52:15:1e:b4:13:61:af:
         58:5d:f0:20:3a:d6:7d:86:7e:ec:3f:6f:af:f1:b0:ff:6e:66:
         87:54:a2:d5:b4:e5:46:de:ef:90:5b:db:70:83:22:56:7e:74:
         7d:df:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:35 2025 by rpki-client