Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File:                     clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier:          kYpfx4OdYrpTr+cBMaHOS4d/kDfZyt4/Th4eRUVuL5U=
Subject key identifier:   54:CA:E4:94:6B:F6:15:1F:31:29:17:E0:95:9B:9D:E4:A1:58:6B:18
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer:       /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial:       0197470C05E63056FB2202DF0BB1FB236774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 21:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:59 +0000
Files and hashes:         1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
                          2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: RJrcBc2xRdPJYZqMHbrjRFiwrCf+wnyxuTKJL5J0Nok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:05:e6:30:56:fb:22:02:df:0b:b1:fb:23:67:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
        Validity
            Not Before: Jun  6 21:00:59 2025 GMT
            Not After : Jun  7 21:00:59 2025 GMT
        Subject: CN=54cae4946bf6151f312917e0959b9de4a1586b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:34:38:59:d8:8c:f6:99:c1:57:f9:64:bc:
                    ca:ef:d2:c6:d4:fc:9a:07:a1:d6:d1:19:9c:75:8d:
                    48:1d:1f:fa:c1:fa:b5:95:fe:86:b1:fd:44:73:5f:
                    f6:1b:f4:35:5f:95:3a:28:53:28:88:14:4b:66:c8:
                    48:ba:24:a9:c1:fc:e2:b2:27:c5:10:0a:4d:06:b4:
                    af:7e:42:e1:a5:89:1e:d4:5b:fd:0d:e0:56:0a:4d:
                    67:8d:de:03:38:9c:5a:3d:48:69:92:54:18:bd:83:
                    93:a0:9f:f7:6d:d9:6c:9d:b7:a4:2f:75:77:b8:67:
                    b6:02:19:46:09:24:6e:61:11:e4:1d:2a:b2:71:02:
                    25:02:c7:6a:60:c7:66:67:ca:3e:22:04:f9:ff:40:
                    b8:d7:32:b5:80:3b:63:b2:d3:9f:6f:3b:53:dc:f7:
                    e3:80:8d:52:94:b2:f8:bd:98:0f:33:78:c9:26:5e:
                    ec:c9:3a:e3:92:7f:23:9e:d2:79:fa:7a:58:b2:64:
                    81:66:da:2f:e2:a1:4f:db:05:92:0a:61:c4:97:49:
                    c2:fe:ab:61:4d:f1:f0:9b:4b:93:f6:42:a5:85:6f:
                    56:02:ba:5a:02:47:2f:71:9c:73:c9:0f:0f:f9:69:
                    fe:d8:32:dc:28:4c:82:38:a7:7d:dd:16:50:19:6e:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:E4:94:6B:F6:15:1F:31:29:17:E0:95:9B:9D:E4:A1:58:6B:18
            X509v3 Authority Key Identifier:
                keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b7:10:af:dd:12:3d:59:1c:a9:f7:ec:79:62:09:67:f6:49:
         64:5b:f1:51:be:f7:24:0a:f4:96:bc:ab:7a:eb:21:31:73:bc:
         31:8d:d2:ce:ab:dc:52:28:05:85:7e:33:6a:23:27:cb:84:b4:
         6a:b6:1b:9d:99:ed:6c:5f:a1:73:1f:d8:2d:8d:03:4d:bd:15:
         36:4f:f8:4a:f6:1b:c6:aa:1d:ff:1c:9e:1a:7e:23:f0:e3:f7:
         d1:cb:46:fa:63:61:c0:19:4e:00:c7:1a:54:2a:a5:15:3b:20:
         c2:a5:fc:11:15:3c:dc:2d:7b:78:ad:67:89:dc:c8:65:79:45:
         d0:3d:dd:20:94:fd:d7:32:f6:5b:93:7f:df:68:ec:d5:c3:c9:
         14:bd:97:8e:1a:81:47:d1:3a:92:06:8f:64:e1:70:6a:65:2c:
         76:e3:97:07:86:93:ea:85:37:83:a5:27:6d:73:60:d4:f9:d4:
         6e:e0:a6:65:0f:b7:f5:df:b7:5c:38:a7:bf:ea:b7:be:18:d6:
         e7:b1:2e:48:3a:67:df:8c:26:65:3b:77:d5:84:03:4d:a9:ec:
         c0:a2:e5:c2:3b:d1:59:41:5c:9e:3d:71:f8:55:6f:59:b2:f3:
         08:de:e8:63:bd:96:2d:ab:fc:fb:27:21:bc:3c:60:87:ce:7a:
         da:d3:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:40 2025 by rpki-client