Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          WlO19V/2YiQT0cPZcjec2pyBIyYI1bcyLH7MDxCu3ew=
Subject key identifier:   45:53:C2:2C:AD:6C:39:09:99:93:D2:14:38:C3:F1:7C:45:10:38:6C
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       01976B187D1623B2E28A592431C267C48612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 21:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:56 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: fJUAeYaDOWatHcFmdJyvBe/dWlCUuDRp7V0886QuX2Y=)
                          2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:18:7d:16:23:b2:e2:8a:59:24:31:c2:67:c4:86:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Jun 13 21:00:56 2025 GMT
            Not After : Jun 14 21:00:56 2025 GMT
        Subject: CN=4553c22cad6c39099993d21438c3f17c4510386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:a5:69:0d:65:9c:fe:b5:af:b7:7c:55:a2:
                    8d:8c:d1:6a:e1:fa:7c:28:3d:9a:82:c6:91:1d:14:
                    8a:e7:9e:b2:01:b1:6b:77:41:c6:5d:4c:b3:d3:7f:
                    00:41:e0:e3:b5:fd:99:dd:eb:ec:5d:11:a1:5d:e6:
                    68:24:af:1c:16:a6:94:b7:f7:b2:ed:ac:08:a5:8b:
                    0e:8f:80:c8:cf:c1:34:5c:eb:1d:a5:fc:12:5d:7e:
                    33:43:0b:a3:28:85:86:54:8a:c4:be:1a:a7:04:3f:
                    6c:bc:92:60:34:b3:d0:02:62:13:0c:db:59:33:34:
                    fa:73:60:85:50:03:e9:7b:6a:5c:e4:1a:c2:eb:d5:
                    a7:70:0b:b6:d0:dd:06:7e:74:1b:b9:a9:2d:0d:9a:
                    06:c2:b7:8e:68:2c:12:77:6b:2f:03:7a:f1:32:ad:
                    66:e6:a7:b8:c2:15:4d:b4:f6:dd:18:98:45:c3:d0:
                    32:f7:a9:9b:3a:7d:27:d1:bf:e5:3c:cc:d8:49:07:
                    13:58:f7:63:fd:09:7e:38:55:44:6d:e0:b2:f7:fa:
                    79:da:67:1d:25:5c:bb:09:8d:8a:21:d8:81:1b:ce:
                    3e:e7:84:0f:ae:16:09:f5:76:d6:38:4c:13:a7:ca:
                    c3:2d:be:c2:cc:cd:92:fa:3e:89:48:a3:8e:7e:b2:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:C2:2C:AD:6C:39:09:99:93:D2:14:38:C3:F1:7C:45:10:38:6C
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:e6:8e:a7:f8:c3:c3:f0:92:1c:d5:b2:06:b9:07:dc:04:
         03:7a:76:94:6a:e7:ef:0d:0b:7b:fd:65:a3:4e:4e:f6:52:05:
         10:76:a7:e1:fc:a2:99:70:6a:a6:eb:94:5a:6d:2b:19:18:bd:
         22:3d:7e:d5:d6:f1:6f:ec:1e:ba:21:50:c7:f0:30:5e:55:36:
         ea:5a:6d:3c:9a:fb:75:7b:42:ff:2c:a5:63:b3:03:94:df:83:
         9d:40:ac:0f:a3:e5:cd:0d:50:81:51:bb:c7:9b:ae:d8:63:bd:
         1d:58:d6:ee:52:a5:de:1f:d3:e0:1a:db:0a:4c:74:72:e4:48:
         38:f6:0a:80:9b:43:e6:f1:09:ae:4a:eb:af:2b:78:30:07:a8:
         e6:30:02:95:c5:7b:ee:0d:68:4d:80:cf:64:0a:4a:5e:8e:21:
         da:c0:66:0d:74:fa:0c:24:87:90:eb:46:71:80:6b:09:04:c1:
         fb:51:82:e4:7b:39:23:fe:fd:9f:e1:65:5e:20:02:36:ef:72:
         84:0d:03:07:10:52:cd:3b:dd:a5:1b:e3:af:be:67:e5:f0:62:
         b9:5f:8c:a3:71:7a:ad:26:8d:5c:45:00:99:05:1e:f5:73:3e:
         8c:3f:9b:90:03:e4:cf:b9:60:53:67:d6:45:9e:76:a1:b6:4c:
         3b:71:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:58:19 2025 by rpki-client