Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          pvOPDyydDt/mw6BNqtyfxN+p4FPJdzW9VlzvgHy8fqk=
Subject key identifier:   35:09:72:BC:AD:B4:65:07:06:E1:60:FF:D5:78:9E:16:5D:FD:63:DF
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       01974E2029F2182D31502F874DA0097379F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 06:00:19 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:19 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:19 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: Fuia2mDeixn3F/UEODoZjVT8xI0rJu0kS5hZcxmgjTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:29:f2:18:2d:31:50:2f:87:4d:a0:09:73:79:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Jun  8 06:00:19 2025 GMT
            Not After : Jun  9 06:00:19 2025 GMT
        Subject: CN=350972bcadb4650706e160ffd5789e165dfd63df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:ac:97:b2:62:df:b1:ec:29:18:0b:05:a8:
                    d5:a3:a6:f2:8e:d1:9f:a2:50:16:30:64:0a:7b:ee:
                    3c:79:33:d8:db:7d:c0:84:fd:e5:f0:5e:9e:a1:64:
                    41:5a:72:66:45:3f:1a:ea:6c:92:6f:77:29:c8:80:
                    cc:8d:b7:73:5d:e3:8e:e8:7a:cd:f8:c2:e5:76:79:
                    0c:6f:f7:c6:4e:d7:c4:5e:7c:b0:8e:b0:6d:59:b6:
                    ec:d6:a1:53:91:b0:73:65:2e:1f:1d:43:79:f5:c0:
                    d3:c5:ae:bf:c5:76:c6:77:12:91:75:07:ec:2a:69:
                    0d:a3:ab:61:7a:dc:46:8c:87:de:9d:18:f3:53:e6:
                    2f:c7:72:44:0b:e7:16:77:12:5c:61:ef:52:b1:14:
                    75:a2:88:09:2a:e2:1f:de:1b:d2:15:43:26:95:5c:
                    3c:aa:9e:0c:4b:c5:29:6e:38:47:fd:3f:a4:ac:ef:
                    61:24:f6:aa:84:15:f8:58:7b:e7:cb:6d:7f:ac:d6:
                    49:81:37:6b:d4:4a:5d:ac:ef:c6:ee:6a:54:91:1b:
                    07:eb:eb:56:a6:97:de:9d:ee:cf:15:0f:93:9e:89:
                    10:93:8a:e4:f3:2d:5e:a0:62:f2:22:bd:86:4a:f7:
                    e7:5c:4a:3c:ee:c3:ab:dd:7e:10:44:b4:7b:c1:e8:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:09:72:BC:AD:B4:65:07:06:E1:60:FF:D5:78:9E:16:5D:FD:63:DF
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:9e:98:a7:10:b3:3e:41:d3:ca:da:79:3a:0e:89:39:5e:
         9b:84:5c:53:ed:f4:e7:31:66:23:4f:f6:72:39:aa:fb:8f:d8:
         de:ed:82:80:79:2a:87:e3:39:3c:70:10:4e:5e:ee:83:6f:1e:
         de:2e:1d:54:cc:4c:5c:4a:8e:31:e4:dc:35:02:e1:e4:e5:91:
         06:e2:17:03:f5:ed:a9:19:7a:8c:87:d4:f5:ff:35:aa:7a:18:
         f8:33:6f:a7:21:66:69:8d:06:55:9f:e9:90:2c:7b:3b:b0:ac:
         e9:68:00:ec:f8:1d:13:10:2f:36:16:10:40:d6:3b:83:46:bc:
         db:03:76:6a:a5:11:ce:f6:99:6d:a3:0e:d3:ab:fd:61:45:d5:
         95:03:08:da:65:e2:ee:f8:4e:a9:cf:29:2b:ae:97:f6:d1:57:
         da:78:a9:2d:33:28:8c:5a:cb:02:a5:10:8b:dc:ae:47:ac:1d:
         77:87:bb:a6:92:ba:aa:21:83:96:48:0f:eb:a5:4b:4d:8e:cb:
         be:8f:a8:50:09:f7:e8:fe:6a:c2:bb:01:e2:68:47:cf:f5:d9:
         ad:22:df:7c:2f:45:52:63:70:96:37:63:9c:9e:41:3c:fb:90:
         f5:e2:a5:ae:92:4e:60:09:52:96:c7:8a:5d:ae:66:9a:2d:07:
         20:38:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:19 2025 by rpki-client