Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File:                     MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier:          LqFJp/9oLVM/7WuSUOm9WMfkIKNdr3S8N2eIs30J7XY=
Subject key identifier:   51:F7:30:82:75:77:05:F9:05:89:A5:DD:E0:01:AE:96:B3:69:3F:54
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer:       /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial:       0197462FC786FA7E04ED71FAF8F560310127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 17:00:25 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:25 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:25 +0000
Files and hashes:         1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: 0tMKu9Sts1r05Yy+uyLiPDZKGS7IDbrYlD/+0SYYZdM=)
                          2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:c7:86:fa:7e:04:ed:71:fa:f8:f5:60:31:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
        Validity
            Not Before: Jun  6 17:00:25 2025 GMT
            Not After : Jun  7 17:00:25 2025 GMT
        Subject: CN=51f73082757705f90589a5dde001ae96b3693f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ff:0b:a3:b8:b1:a1:08:43:54:b2:dc:e1:bb:
                    b3:92:e2:6a:04:db:97:54:d4:ea:41:36:55:29:e5:
                    ba:b5:b8:cc:07:7c:c5:77:ac:5c:1a:a9:a2:42:5d:
                    2a:5a:51:6f:e7:7f:5f:82:95:97:6e:3e:9a:f6:10:
                    82:dd:e9:49:c0:33:91:06:18:9d:c9:9d:62:4f:f1:
                    4e:a2:8a:d3:49:d0:af:e2:81:d3:2c:1c:86:73:6d:
                    03:d2:b7:68:60:5a:d1:90:e9:a4:c6:02:8e:cb:32:
                    ce:ce:2d:4b:d0:cf:e3:d1:38:02:af:89:c1:c8:fa:
                    c2:d3:e0:5e:ba:e8:a6:a6:05:38:6f:b7:39:f0:3c:
                    b4:70:50:5c:6f:24:41:b5:00:04:a5:ee:c2:bc:72:
                    0d:02:44:88:33:fa:ca:be:e1:30:73:11:ef:a6:fe:
                    97:3c:33:c2:72:0c:f9:6d:70:0c:54:64:eb:92:39:
                    8a:0e:cd:ca:3c:70:24:80:9b:3b:e8:11:5e:21:5e:
                    1d:74:f0:61:4a:8d:e7:f6:7d:17:15:d2:ad:b9:10:
                    3e:7f:49:46:8e:82:ae:cc:ca:2f:bd:6a:91:e1:c8:
                    9e:d6:2b:55:60:9a:2d:17:5d:77:58:43:a2:9f:b7:
                    ef:e1:e7:2e:93:be:40:2b:a7:5b:6b:0a:97:40:5e:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F7:30:82:75:77:05:F9:05:89:A5:DD:E0:01:AE:96:B3:69:3F:54
            X509v3 Authority Key Identifier:
                keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:b6:c8:66:a8:3a:04:5b:6c:15:d7:04:28:06:1d:09:33:
         2f:2b:51:67:db:b6:55:be:1a:2c:ea:2e:a7:a8:4e:c1:34:bd:
         1e:84:68:62:60:80:c7:81:87:2e:1b:ca:24:68:4b:ae:45:7f:
         f6:ba:b0:b0:72:c8:8e:16:b7:d4:4a:25:ec:b4:01:57:5d:9d:
         2c:10:b0:5a:2b:07:4e:44:ed:bf:ae:8a:85:0e:1f:69:50:5d:
         24:70:ba:db:aa:40:de:80:a1:8a:7e:67:d1:ee:20:74:78:8d:
         88:46:32:1e:9e:6a:08:47:23:74:cc:ce:c4:97:8d:a0:e7:b8:
         7d:94:fa:15:21:fd:33:96:6a:1b:7a:6b:6e:cd:24:fb:d1:21:
         f3:ca:20:24:bd:9f:75:d8:e0:3e:81:2a:43:f9:36:2b:c6:7f:
         3d:37:d7:7c:87:41:31:8b:d2:4c:17:a8:a2:1b:02:b5:f9:fc:
         4b:38:1d:27:cf:ad:a5:25:20:7b:32:f4:eb:4e:82:9f:81:e2:
         ec:92:4d:6a:b8:38:84:d9:62:fb:15:0a:27:8b:1a:94:a9:86:
         84:c9:a8:5d:25:db:39:6f:6d:45:22:a8:e0:17:ba:f9:35:20:
         d9:bb:39:30:a8:a0:ae:7e:1c:cc:16:2f:5f:53:3d:2f:d5:8e:
         70:7e:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:45 2025 by rpki-client