Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File:                     iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier:          ObY5V/T4JLI23hOINTRoaDqDUK3p1tuxmA3DhwBSZWk=
Subject key identifier:   97:3D:B5:08:9D:61:63:49:E3:0E:2D:C4:5B:97:B2:10:B4:A1:37:47
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer:       /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial:       01974E57B1C9451A772B382B2E4073DD01F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 07:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:59 +0000
Files and hashes:         1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: 5KrCZNK/GtT820ItNJak6TCoqjCdadBa1tUOyw1aIpc=)
                          2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:b1:c9:45:1a:77:2b:38:2b:2e:40:73:dd:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
        Validity
            Not Before: Jun  8 07:00:59 2025 GMT
            Not After : Jun  9 07:00:59 2025 GMT
        Subject: CN=973db5089d616349e30e2dc45b97b210b4a13747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:1f:fc:3b:a7:3b:35:c5:72:3e:8b:8e:ec:
                    52:02:42:27:31:d8:7a:e3:30:e6:45:60:fe:43:f5:
                    98:a3:02:e7:cf:55:e2:c0:4b:d2:bd:ac:33:ac:dd:
                    09:f4:c0:d4:c9:b3:fa:05:1b:7e:6c:ad:cb:c9:17:
                    b6:45:66:a4:f8:8f:43:32:d6:d0:29:53:95:99:d7:
                    07:f5:20:c8:9e:e8:50:f3:58:72:b4:d6:99:22:f8:
                    b1:bc:8d:61:d4:d9:9a:45:ea:29:21:c4:ca:1f:0e:
                    ea:89:35:0d:59:b2:bc:65:7e:fd:e2:f9:0a:f1:d4:
                    59:95:46:a3:ed:d2:97:5c:15:31:56:14:47:5e:79:
                    df:da:e5:c9:1d:a5:fb:8c:9e:1d:d6:9f:d7:f7:3b:
                    47:14:7e:db:78:c0:68:f4:53:e7:a5:52:9b:ed:47:
                    11:ca:0a:ee:15:b3:94:59:66:62:2f:bc:97:87:7d:
                    33:9a:03:e8:bd:90:e1:9f:c5:c2:e8:77:e8:83:b1:
                    24:bd:7b:b1:af:4f:96:41:dd:34:9e:50:65:21:b6:
                    93:7c:f2:76:0a:d7:8c:be:87:26:52:10:58:b8:53:
                    e9:9b:a4:92:01:cd:54:9e:61:5a:cd:db:46:60:fc:
                    83:d9:2a:9b:c6:d8:44:91:e2:bd:c4:41:69:56:b5:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3D:B5:08:9D:61:63:49:E3:0E:2D:C4:5B:97:B2:10:B4:A1:37:47
            X509v3 Authority Key Identifier:
                keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:12:fb:00:e6:e0:fb:64:a6:98:73:5f:1e:96:32:a4:0e:
         63:a2:83:0a:1a:69:35:41:11:6f:28:0c:3c:73:88:f2:b6:21:
         c8:96:c3:09:0d:3f:e3:f5:7e:19:0b:fa:ec:07:e8:ea:91:94:
         09:45:ab:b9:e2:d5:62:de:3f:d7:7c:f7:ed:9b:bf:c6:ef:95:
         46:88:be:98:4a:d6:99:a0:d1:66:ae:d2:ce:f6:48:56:96:56:
         7a:53:a8:f5:1e:fe:aa:d3:ce:61:16:fb:e7:29:a3:4a:58:71:
         ca:8c:33:49:61:81:c0:13:d9:28:37:44:a4:c8:34:22:e7:13:
         09:fe:01:cd:22:e4:7a:b5:9d:db:7c:81:1c:87:f0:93:3d:ec:
         36:4c:83:e4:1c:b2:f2:da:97:40:6a:58:fc:ef:c8:5f:6e:21:
         77:0e:94:9d:29:63:64:84:47:63:8b:93:04:88:33:ab:6e:bd:
         01:f5:a5:30:48:07:10:d9:46:71:79:35:6d:bb:d9:4e:d0:c9:
         0c:10:35:80:c2:9a:3c:2a:31:8a:59:17:94:25:ed:9b:30:5c:
         a4:c2:1c:3f:aa:b8:11:db:da:7b:b9:73:77:1d:2c:81:6c:e4:
         cc:ef:87:7c:31:77:7a:9e:4a:eb:04:67:87:bf:49:eb:14:41:
         88:87:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:52:23 2025 by rpki-client