Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File:                     dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier:          FEeKIq6kB3OHZDLtWIadlnlwitsUE0B++1u96uEhBsI=
Subject key identifier:   40:1B:58:60:BD:82:B5:37:4E:D3:C7:65:B3:5B:51:89:E6:F7:F9:7B
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer:       /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial:       01975948C7D498369BC0078570C4DD022EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number:          1580
Signing time:             Tue 10 Jun 2025 10:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:31 +0000
Files and hashes:         1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: vTab1xy7AWoHAVeSRcyyJmQi12gL/LYEGpN01M89Iac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:48:c7:d4:98:36:9b:c0:07:85:70:c4:dd:02:2e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
        Validity
            Not Before: Jun 10 10:00:31 2025 GMT
            Not After : Jun 11 10:00:31 2025 GMT
        Subject: CN=401b5860bd82b5374ed3c765b35b5189e6f7f97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:b8:d2:73:50:01:18:75:9f:3b:46:e6:9b:
                    b3:9f:d5:10:62:b7:6f:bd:7a:b1:8e:7c:3f:01:9d:
                    c3:9d:bd:e7:54:fd:98:62:3b:1c:4b:29:1f:13:7a:
                    2b:51:4e:b1:e9:e6:94:b2:60:d7:6f:84:d6:19:71:
                    43:00:9f:55:19:42:a1:2a:4a:60:27:9a:8d:5b:ea:
                    64:ae:83:d1:88:b7:46:66:39:d7:83:3e:80:70:39:
                    8d:0d:52:de:89:db:57:79:4d:2d:be:cf:11:f1:0e:
                    ca:56:d7:4b:5f:ea:26:a4:ae:cd:f8:4c:36:f9:b9:
                    98:24:0c:2c:a4:70:68:b0:3b:f3:c6:33:ef:1d:2a:
                    85:b6:a9:8e:cc:d1:25:d2:5d:c4:a1:99:8d:df:ec:
                    ea:f8:3c:9f:3a:25:e2:af:01:38:4d:f0:7a:60:69:
                    ae:ff:bb:63:6b:2e:72:13:46:95:c1:c8:35:5a:85:
                    5c:25:07:05:3d:c6:50:34:9e:ca:20:ea:0c:8b:d7:
                    17:3c:41:36:35:6a:db:a6:69:db:6b:3a:e2:bb:70:
                    87:e7:41:8e:02:1f:0b:c8:d0:16:8b:2e:bb:d3:94:
                    0a:37:30:9f:a1:f3:17:13:17:3f:5e:1a:77:43:5a:
                    61:f8:92:00:de:05:6f:be:6d:0b:e8:02:64:d0:84:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1B:58:60:BD:82:B5:37:4E:D3:C7:65:B3:5B:51:89:E6:F7:F9:7B
            X509v3 Authority Key Identifier:
                keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:12:e2:6b:2f:97:f4:1f:52:a0:6a:0a:6d:17:af:82:18:93:
         63:41:0c:e1:77:d9:5f:e5:f2:ca:8d:3c:7c:b9:d0:83:ea:60:
         66:45:c2:b8:0b:ef:ff:8c:1d:67:88:ad:80:a1:8c:17:bc:43:
         a0:e3:87:70:d7:bc:f3:03:e6:df:06:bf:8e:10:07:6e:97:aa:
         a1:de:f6:fc:ee:01:ed:43:2f:dc:f0:64:7d:c2:e0:62:5b:fe:
         06:db:8e:c1:51:91:ee:5e:43:63:51:73:65:d5:1b:b8:c4:3c:
         b6:6d:cf:0a:cb:be:54:71:00:45:95:26:c1:6b:6e:f0:ab:cc:
         44:b3:29:0f:30:3a:e4:40:47:9e:31:b0:f1:48:f9:27:4a:14:
         24:dd:e3:f2:b9:7e:f2:28:cb:29:52:8e:2a:66:d0:c5:38:ad:
         19:87:03:5f:b6:a5:34:71:85:82:81:7e:98:5f:63:b3:63:05:
         86:b1:59:ec:b3:9a:be:6e:ea:9c:ff:56:34:c1:99:cc:4d:7a:
         2a:13:f5:22:84:5d:a6:50:cc:ed:e2:96:eb:f4:72:35:d6:00:
         6f:8d:71:f4:c2:78:46:50:86:77:99:4f:c9:a5:db:86:b2:03:
         b2:41:48:f4:b3:bc:2b:d2:e1:22:05:0b:00:71:e1:c3:de:8a:
         d3:52:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:38:42 2025 by rpki-client