Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          cjtoJnzNkU6zpdo3qmI/VKS27CfwQjI8cdqqExv8aXk=
Subject key identifier:   F3:AE:77:01:57:BC:96:9A:4C:EB:6D:65:45:97:55:A3:FD:2B:84:B5
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       01973B7590DF714B303D1BE37C11742AD949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          1581
Signing time:             Wed 04 Jun 2025 15:00:49 +0000
Manifest this update:     Wed 04 Jun 2025 15:00:49 +0000
Manifest next update:     Thu 05 Jun 2025 15:00:49 +0000
Files and hashes:         1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
                          2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
                          3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
                          4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: cx0ymIZCSTM1OcpZW3IHB0jnKFN3fNdakd1yNckzjtE=)
                          5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
                          6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:75:90:df:71:4b:30:3d:1b:e3:7c:11:74:2a:d9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Jun  4 15:00:49 2025 GMT
            Not After : Jun  5 15:00:49 2025 GMT
        Subject: CN=f3ae770157bc969a4ceb6d65459755a3fd2b84b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:b5:3a:88:df:42:c1:fa:df:8e:13:20:f5:
                    ca:31:70:e0:86:1f:41:ee:cc:4a:d1:a1:fb:f8:e3:
                    f6:d2:4c:31:cb:e5:5e:77:0a:51:ef:f0:7a:06:5b:
                    3c:c1:9d:a3:1d:cb:0e:40:af:ac:89:02:00:12:20:
                    3c:0a:1b:36:7a:01:92:14:1f:ce:7f:52:22:7b:8c:
                    6a:aa:de:ba:3c:9b:3b:0b:f3:48:74:d2:44:fb:8f:
                    8e:94:7c:2c:55:15:37:8a:5b:08:ab:c4:26:ab:85:
                    05:cf:00:c3:4d:4b:09:8c:23:50:39:49:b0:cd:fd:
                    e8:80:4e:b0:9d:40:2b:c0:c4:2a:4c:28:c5:cb:1d:
                    e1:81:21:ec:f4:ae:77:33:9e:90:de:d3:09:97:cd:
                    87:3a:7b:8f:80:39:30:6f:1e:cf:6e:42:9b:66:8d:
                    8e:9e:5a:11:2d:6e:4c:08:d8:a0:d8:88:74:c1:0a:
                    59:4b:e1:8a:d6:b0:e1:c0:d5:2a:0e:a3:1c:e9:34:
                    0c:4f:fa:18:39:a2:ae:e4:52:07:e1:3f:b1:db:df:
                    de:de:60:43:c1:ca:1c:1d:eb:6f:63:bc:de:2c:92:
                    76:79:94:aa:e0:a0:c8:01:17:1e:aa:8f:66:a4:98:
                    49:0f:e2:d3:cf:22:d3:47:be:7f:84:03:45:5c:75:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:77:01:57:BC:96:9A:4C:EB:6D:65:45:97:55:A3:FD:2B:84:B5
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:3b:c3:99:79:2b:20:28:88:01:20:6a:b4:9a:f3:91:7f:
         30:d9:12:b5:45:9a:76:ae:ac:75:b7:a6:ad:58:ab:65:af:95:
         43:a5:21:81:fa:22:bd:c9:38:26:be:e7:72:09:5b:91:d2:f9:
         d0:26:d0:ef:90:43:b1:f0:bd:db:78:10:2d:46:ab:2a:34:fa:
         01:40:14:c5:21:88:c7:a6:82:b4:10:1c:79:64:d1:6d:ec:67:
         4c:60:a3:23:4b:0e:9a:4a:2d:05:7c:2c:1b:2e:09:37:c5:09:
         51:78:12:e6:b2:9c:0d:49:81:08:79:8b:13:e2:f8:d9:58:1c:
         22:d9:0e:3a:da:ad:b4:ba:ec:cc:7c:58:a3:e8:f3:93:c6:69:
         e6:de:f5:39:66:68:0f:e9:e9:28:12:59:48:2a:b9:85:2e:bc:
         26:97:00:ca:ca:3f:3e:3f:8e:9a:58:5c:9f:f2:7e:f7:17:06:
         db:15:75:98:a4:8c:dd:ae:40:66:c2:95:44:39:48:18:42:0f:
         7b:e0:40:68:bb:b3:90:5c:1f:32:9d:a7:b9:1e:48:cf:97:8b:
         07:83:bc:f4:f9:d5:85:61:69:86:11:40:37:28:3f:96:49:4a:
         38:8c:97:4f:cf:dd:a6:13:e1:6f:e1:4d:66:c0:c3:6a:fc:fe:
         4a:40:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:24:07 2025 by rpki-client