Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File:                     A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier:          hYB9ew8tFdu6G/V7h9LoY4TVD6LC13Wupc61R9ap370=
Subject key identifier:   30:5F:42:B4:F7:3D:50:59:7D:B1:A3:B6:95:9E:90:F4:AF:55:CE:A4
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer:       /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial:       0197488C5705B3DED86F8D8D12441BBBE427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:46 +0000
Files and hashes:         1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: /+PUCL8ujTkJUXYK/kMZGCgAHhF+SCeLLgeVCM3LQ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:57:05:b3:de:d8:6f:8d:8d:12:44:1b:bb:e4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
        Validity
            Not Before: Jun  7 04:00:46 2025 GMT
            Not After : Jun  8 04:00:46 2025 GMT
        Subject: CN=305f42b4f73d50597db1a3b6959e90f4af55cea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:a5:82:f4:01:86:44:ef:44:5f:f4:8f:1f:
                    8b:5d:98:b4:cd:1c:ec:a9:0a:4c:98:b4:ba:10:b8:
                    e5:55:7a:a0:e5:9b:a2:96:55:5d:83:2e:6f:12:e9:
                    32:83:d7:99:e9:8a:77:82:4c:d5:54:a2:de:d2:05:
                    5f:14:4e:18:f8:1e:41:e7:15:1c:cc:98:b1:fa:68:
                    f9:88:23:b7:7a:c0:05:e5:1f:ff:42:3a:5a:ee:6f:
                    47:ff:3a:59:6d:c5:fc:6b:d2:86:ed:28:dc:00:7d:
                    c8:57:0d:ae:ae:2e:82:b4:af:35:86:9a:03:e2:fe:
                    d0:fb:a5:36:0e:17:f6:02:a7:57:8c:e7:31:d1:44:
                    69:0c:5d:90:f3:41:d4:77:c7:e1:f3:dc:51:83:9a:
                    c6:f0:72:77:75:25:2e:25:3b:a9:85:8c:d7:0f:58:
                    e6:2e:10:d4:df:43:d8:cd:33:4e:eb:3c:7c:c8:71:
                    bf:4e:ea:72:78:43:26:0b:4a:55:85:b1:db:71:61:
                    61:2b:4f:1d:cf:94:11:a5:1b:51:35:e0:b8:29:48:
                    59:cc:96:96:4f:d7:42:a1:4c:e0:ab:2c:4f:4d:18:
                    d2:f1:f0:22:85:41:ef:24:af:f7:37:27:2c:19:7c:
                    82:28:fa:bb:6b:a7:05:01:96:ba:29:62:2d:9a:e6:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:42:B4:F7:3D:50:59:7D:B1:A3:B6:95:9E:90:F4:AF:55:CE:A4
            X509v3 Authority Key Identifier:
                keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:09:14:e2:21:b9:d2:c1:e0:7e:e3:30:18:ab:db:3c:3f:32:
         d4:0f:d7:96:8a:2a:40:14:c0:dd:fb:fa:6f:8d:20:41:0e:3f:
         43:bd:e0:a4:ec:a9:6e:d3:af:41:e9:24:62:05:29:9b:66:20:
         5d:65:7a:09:95:28:13:4f:87:32:b9:a1:01:ac:6c:28:89:53:
         c5:63:42:4e:b1:bc:3b:51:07:f7:05:2c:09:44:fa:eb:e9:82:
         9a:51:79:0c:c8:6b:87:8d:ff:ea:d4:5a:62:01:93:c5:18:48:
         db:b1:86:cf:00:31:1b:cf:70:15:ef:ea:5b:29:2b:a5:3b:d5:
         d4:4d:73:fc:92:23:07:38:d9:b6:f3:08:4a:0c:8a:25:09:39:
         ae:bd:b1:a5:87:ba:58:85:d7:11:30:eb:17:48:51:d8:b4:25:
         64:de:7e:9f:b7:15:6d:f1:ff:99:c3:34:09:9c:04:89:17:41:
         58:3b:d5:6e:0e:96:96:09:07:db:ea:49:c0:48:e3:66:f1:ae:
         8f:c7:2b:73:61:1e:fa:7b:7c:2d:a6:8b:bf:ef:36:b4:a1:4a:
         6a:b5:43:88:19:a0:93:bd:6e:b8:03:39:82:0e:74:d1:37:b6:
         6f:e4:43:a7:4a:a3:bd:7b:e7:52:fa:2f:3d:f1:b5:2c:1b:c2:
         15:72:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:33 2025 by rpki-client