Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File:                     Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier:          sAiwNdaVkg7iBBrd0tuIoI+TMUBbC0BPQYBQ0AiIwbA=
Subject key identifier:   D2:84:11:60:E1:2B:81:5E:49:6E:9B:F7:45:31:AE:EF:A8:01:B2:85
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer:       /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial:       01975791661F7F015A2D4058B491675D9D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number:          1586
Signing time:             Tue 10 Jun 2025 02:00:36 +0000
Manifest this update:     Tue 10 Jun 2025 02:00:36 +0000
Manifest next update:     Wed 11 Jun 2025 02:00:36 +0000
Files and hashes:         1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
                          2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: MKbnLWT79rdX7tD9VIeJjWAw4ScENNVrXIXDaZFjA94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:91:66:1f:7f:01:5a:2d:40:58:b4:91:67:5d:9d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
        Validity
            Not Before: Jun 10 02:00:36 2025 GMT
            Not After : Jun 11 02:00:36 2025 GMT
        Subject: CN=d2841160e12b815e496e9bf74531aeefa801b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:bc:77:01:47:28:76:c6:1f:35:8a:d7:0f:ec:
                    cb:dd:fe:20:a9:f0:58:85:32:cc:2f:6d:99:b4:28:
                    0f:94:f3:56:1c:5c:97:ac:cf:b6:a2:5f:05:0e:c3:
                    08:2b:82:df:fd:52:64:ab:71:7f:e5:f8:bf:a3:3e:
                    a4:45:4b:34:22:45:50:1c:68:16:b5:bb:54:5d:89:
                    70:1e:92:85:40:5b:50:37:3a:62:b5:a4:28:76:06:
                    65:3c:c4:25:37:54:67:76:d1:6e:ed:84:72:57:ec:
                    ea:bf:db:44:a4:5b:da:d2:f8:86:a4:3e:45:2c:be:
                    62:c2:86:f0:22:d0:4e:fd:3e:f6:3a:a1:f2:5b:19:
                    23:21:f4:d3:8c:0f:89:88:62:20:1f:52:32:5d:95:
                    82:cb:ee:14:67:42:36:d5:56:e8:6e:48:0f:74:86:
                    38:b3:dc:fa:e5:5d:90:b1:3b:cf:ba:98:a4:eb:1a:
                    52:de:c3:7d:c0:35:8a:cc:0f:08:06:69:d3:cb:c7:
                    02:81:2a:30:00:eb:b0:2e:7c:19:22:20:f4:87:e1:
                    2d:e6:54:30:8e:3f:35:16:c1:7f:48:58:f4:df:68:
                    18:24:aa:b1:21:8e:d4:bd:1c:3f:da:5a:a0:38:5e:
                    04:f4:eb:e1:84:3c:66:5d:65:b9:22:a6:35:b2:bd:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:84:11:60:E1:2B:81:5E:49:6E:9B:F7:45:31:AE:EF:A8:01:B2:85
            X509v3 Authority Key Identifier:
                keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:6d:87:7d:1e:2c:5a:db:6e:38:d1:5c:95:6a:f8:6e:81:
         50:8c:f8:6b:f0:50:6c:bb:32:08:bb:66:2a:27:5f:27:ff:63:
         09:33:a3:75:15:8c:98:ec:72:2d:ff:3b:bb:b1:69:37:eb:cd:
         a2:18:07:7f:62:1a:fa:7d:ac:14:de:32:8e:c2:d2:28:2a:be:
         13:45:14:c9:84:88:11:51:4f:f3:0e:de:df:02:57:33:18:75:
         b3:80:ac:84:4c:a4:0b:7d:92:aa:20:8a:97:28:d9:1d:e9:d2:
         56:78:3e:34:e9:52:d5:0f:38:7b:1d:2e:a2:90:d7:19:80:26:
         15:ab:17:9a:e4:87:24:5d:ed:d5:35:11:89:b2:f9:92:f1:fe:
         fd:2c:cb:ef:40:75:a3:ed:dd:06:25:2e:71:ad:e7:a1:38:dd:
         94:ad:75:7f:77:d2:6b:69:a9:62:e2:85:d9:ed:53:3b:66:d9:
         70:c7:91:2b:b3:11:25:93:13:2c:71:2e:69:58:bb:9e:23:64:
         0b:90:95:d5:9b:6f:f5:5f:b8:84:8d:0d:51:b5:c4:9b:54:79:
         c3:6a:6b:df:69:05:2a:3a:69:9b:22:9c:ed:3b:82:0c:00:7c:
         62:fd:6b:54:44:92:03:a7:df:9a:37:5a:a4:c7:35:c6:76:93:
         dc:fe:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:14 2025 by rpki-client