Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File:                     yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier:          G6PHjWcTHdyZ2Ux6m/Qe6md3URYxMV3xJFdExtTk3Lg=
Subject key identifier:   8F:30:DD:C8:D5:29:14:06:E5:C9:5C:11:69:EF:E1:95:C0:45:7D:B4
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer:       /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial:       019748FABD290791F63F3855725AFA3C6B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 06:01:21 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:21 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:21 +0000
Files and hashes:         1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: N5nGBWNjr2YnC55I60vHoMv28NKHML/7EEuzbrKYndQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:bd:29:07:91:f6:3f:38:55:72:5a:fa:3c:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
        Validity
            Not Before: Jun  7 06:01:21 2025 GMT
            Not After : Jun  8 06:01:21 2025 GMT
        Subject: CN=8f30ddc8d5291406e5c95c1169efe195c0457db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:af:03:ac:15:86:b2:26:ca:93:0f:33:97:
                    82:79:c6:2b:d9:e4:b2:cd:f7:86:5a:0f:a7:7f:ae:
                    0d:55:52:06:ea:d5:0c:ff:27:b4:25:11:c3:6b:ba:
                    17:cf:d6:35:6c:2a:9e:a0:2d:a1:1d:71:46:a3:42:
                    a5:df:6a:b5:2d:32:f2:75:9f:3b:13:f4:b5:66:31:
                    fc:59:d7:45:2c:dd:82:75:17:4c:ff:30:a8:62:e6:
                    61:1f:73:af:b5:f7:35:c9:28:63:ae:b8:2f:d3:16:
                    b4:27:19:30:b5:9d:b1:bd:47:63:c7:61:60:78:5b:
                    f0:74:1a:02:c0:e5:b2:52:7a:93:68:2d:8f:8a:6b:
                    f7:7e:25:26:7d:73:34:a4:a6:d5:af:75:f3:ab:27:
                    40:80:b7:10:fc:c2:d5:a1:9f:1c:5e:49:ad:1b:35:
                    94:a5:6a:4f:d0:d6:fe:87:43:9d:0f:87:05:21:75:
                    ba:e0:3c:1f:15:00:bf:dd:2b:b9:04:df:f3:a1:ad:
                    fb:ae:1e:0a:34:8e:2c:e5:c2:98:81:16:9d:19:8b:
                    cf:01:6f:d0:cc:ec:b5:f8:e0:59:1e:12:7d:22:e5:
                    64:b9:40:f4:09:52:2b:0a:dd:2d:4a:bd:28:58:dd:
                    0b:39:9e:6f:f4:4b:d9:6f:6b:c0:62:c1:1f:24:31:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:30:DD:C8:D5:29:14:06:E5:C9:5C:11:69:EF:E1:95:C0:45:7D:B4
            X509v3 Authority Key Identifier:
                keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:29:ee:e1:89:bf:f1:09:77:8f:8f:a8:29:e7:b8:ac:9e:b1:
         e4:59:0f:7f:28:a4:e3:da:38:13:cc:78:d6:f8:d9:f2:30:8c:
         3e:7b:b4:39:14:9b:75:35:b8:09:bd:c5:57:b3:09:45:c6:b1:
         14:83:6b:8a:60:c5:c3:6a:0b:f0:3c:60:85:61:ba:8d:30:ae:
         d4:30:c7:15:41:4e:9a:7f:b8:21:2d:5a:27:0c:e1:d1:00:94:
         32:a0:fc:58:98:23:f7:49:e3:da:2c:2f:eb:ae:3f:66:7c:1d:
         24:68:fa:d8:ff:30:40:d9:8c:4f:6d:54:67:c0:6f:20:fb:ae:
         2a:50:a3:e3:09:99:0b:4d:aa:15:ec:0f:d2:d4:f0:50:4d:ed:
         41:c5:86:4b:53:6e:70:aa:39:19:a5:bc:d5:0c:11:54:84:1d:
         10:d7:40:70:a0:f4:66:76:7a:49:54:15:1b:c1:cc:88:93:c4:
         29:1e:77:16:37:be:1d:1f:76:6b:e5:0c:80:ce:76:47:5a:7b:
         b4:43:a1:5a:09:c8:3c:b2:4f:78:e0:32:4e:9b:23:d9:d6:73:
         ec:0e:2c:a7:0c:f6:10:e6:85:71:af:bd:b4:8b:95:b7:9d:9c:
         eb:3a:7f:dd:e3:28:27:0c:cd:6d:3e:aa:7b:17:68:c7:e8:87:
         12:cd:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:45 2025 by rpki-client