Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          GZjRi1RoDYDsz3OLZF9KV8rOveksCtWp8iLSLV/lJhc=
Subject key identifier:   76:E3:B3:C7:1D:84:A5:02:03:B6:B5:BE:D0:FA:18:DF:10:94:45:A0
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       0197469E07B121BEDB7BF49EE084202302CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 19:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:51 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: OP3/nWaVQvGSpTcQOjN0z4cKsI5quLOh3+WSDLVxtZo=)
                          2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:07:b1:21:be:db:7b:f4:9e:e0:84:20:23:02:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: Jun  6 19:00:51 2025 GMT
            Not After : Jun  7 19:00:51 2025 GMT
        Subject: CN=76e3b3c71d84a50203b6b5bed0fa18df109445a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a5:10:1d:e3:e3:20:4b:09:0c:53:73:bd:97:
                    3f:9e:92:31:2e:e8:25:50:a2:8f:10:6e:ac:51:aa:
                    16:b5:63:5c:75:7d:75:6b:b5:6c:ad:3f:5a:ee:98:
                    10:97:fd:ec:a5:39:0e:f7:1c:b1:36:9a:f2:36:ca:
                    48:d2:3c:8d:90:2e:67:68:78:a4:29:98:e1:95:8a:
                    b9:86:4c:89:f4:0d:ad:88:96:8e:91:06:2d:5f:5a:
                    e6:7c:a5:12:47:50:83:67:a6:1a:4e:a4:b7:a6:ce:
                    b9:48:24:29:33:71:5e:e4:a0:a4:7d:96:80:8a:0f:
                    fc:2b:fb:42:31:cf:b4:23:a7:3f:21:04:e5:cb:ee:
                    b6:ae:84:93:9b:f9:99:8d:03:61:38:33:5f:e7:d0:
                    22:22:a4:bf:50:a6:2e:f5:9c:f7:48:b8:81:80:25:
                    9e:71:fc:ce:dd:e0:f6:13:20:2f:78:c6:af:a7:21:
                    99:e5:00:d9:ec:31:b5:28:c1:5a:3e:a6:7f:62:2c:
                    77:b9:e3:7e:dd:ea:bf:aa:a7:dd:b1:90:97:1f:14:
                    ba:a6:85:b2:64:8f:9b:69:aa:8d:5b:f6:33:db:cf:
                    2d:7f:91:50:fd:ce:da:3d:17:ee:80:81:00:d1:77:
                    fe:e5:3f:21:70:f2:37:32:69:c5:72:fe:ed:a0:05:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:B3:C7:1D:84:A5:02:03:B6:B5:BE:D0:FA:18:DF:10:94:45:A0
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:18:0a:66:90:d4:73:22:8f:8c:16:16:0a:5c:ec:6a:d9:
         18:ae:10:02:fb:7d:f9:37:98:51:9f:89:fa:51:31:d9:e6:e6:
         2f:1e:bd:a3:21:7e:2d:d3:18:64:70:18:35:d9:48:a7:09:3b:
         b0:da:d6:d1:bb:46:ef:fa:28:95:68:88:20:f8:9d:6f:16:36:
         23:42:bb:8e:4a:4b:e4:3e:78:6d:a7:b6:d9:8f:b8:b8:01:f0:
         e1:85:38:0d:b8:33:16:1f:da:03:8a:28:9f:b3:41:04:89:23:
         35:da:0f:19:76:12:8d:c2:07:4e:82:0c:04:d2:51:c0:8a:5f:
         f3:72:9f:fa:49:80:24:c5:b3:c2:74:12:64:8d:24:8b:ea:36:
         0b:c7:2c:09:8b:19:21:4d:8a:f2:11:c7:47:29:db:76:39:44:
         3a:fc:dd:d0:f5:46:17:20:45:0e:22:a4:7c:07:94:00:d2:6e:
         ac:60:66:4a:ce:84:19:02:ab:08:1b:0a:15:ee:86:e2:57:8b:
         16:f3:18:41:65:4c:9c:b5:05:ec:37:c7:44:6b:07:d6:e4:bb:
         f8:ee:69:09:28:a4:65:57:6a:12:71:cf:e9:8d:35:df:64:1e:
         f2:54:bd:e1:15:94:cd:e6:ad:46:75:18:cd:24:d5:e4:84:1a:
         92:69:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:59 2025 by rpki-client