Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File:                     1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier:          yE7MmKEa/QCs7kyCdJOFqtpO02dWPZo3iNZQRds4jEg=
Subject key identifier:   86:4A:6B:0E:68:D8:31:66:A7:9D:D9:8A:F2:F8:DB:2D:CF:F6:26:B9
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer:       /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial:       019753102D80045CA27C29AE29214002FC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 05:00:58 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:58 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:58 +0000
Files and hashes:         1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: h4/rZpegK03Ny8kFjY+yqroM6pYifcqn5OxEnEW4xcI=)
                          2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:10:2d:80:04:5c:a2:7c:29:ae:29:21:40:02:fc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
        Validity
            Not Before: Jun  9 05:00:58 2025 GMT
            Not After : Jun 10 05:00:58 2025 GMT
        Subject: CN=864a6b0e68d83166a79dd98af2f8db2dcff626b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:f5:2a:06:33:b8:17:b7:07:59:cf:a3:b8:
                    5a:62:12:07:bc:f8:a8:1e:35:a5:fa:8d:bf:f6:0d:
                    b3:d1:f6:21:0c:45:61:6d:0d:1b:15:4f:d8:d8:5f:
                    a0:5b:12:ee:49:ec:d3:2d:eb:56:c6:b4:5a:ea:f8:
                    5b:de:f3:9e:6b:4e:4c:ca:22:71:f7:c4:ae:2e:4e:
                    40:94:80:ef:78:df:00:1c:08:91:77:a6:3f:1c:b2:
                    d1:b1:82:1d:dd:5d:32:c2:95:e3:fb:b1:b7:c1:67:
                    0c:fe:42:0a:26:28:c9:3b:fd:cb:fc:b3:fd:04:f6:
                    78:d1:16:9a:e2:a8:6e:e0:ae:c2:30:79:63:77:d0:
                    f8:3f:49:56:09:19:05:eb:74:5c:3c:7f:a7:14:49:
                    11:d7:43:50:6e:42:38:7f:1c:9c:5a:40:8d:ef:16:
                    a3:21:ed:80:6c:ce:16:58:26:97:b5:a9:ef:c1:97:
                    9c:c4:39:32:39:c0:f0:b2:d2:1b:ab:34:76:f3:d4:
                    f2:d5:6f:3b:0a:15:d3:db:30:b3:9a:9b:9e:3f:0a:
                    e5:d6:27:5c:71:b3:88:e6:71:48:93:f2:a9:e4:cb:
                    ba:77:98:c5:4c:de:80:d3:b2:45:17:12:1b:d4:4e:
                    dd:07:12:ba:d1:90:e2:89:7d:20:6f:2e:71:bf:7c:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:6B:0E:68:D8:31:66:A7:9D:D9:8A:F2:F8:DB:2D:CF:F6:26:B9
            X509v3 Authority Key Identifier:
                keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:c9:c8:9d:65:71:7e:e5:d3:0d:f0:d5:a2:92:96:5d:3e:
         c5:20:2e:88:b4:8d:76:b4:d6:0f:47:f5:01:26:e2:f3:c8:9b:
         1c:88:b8:17:0b:9f:a3:b3:72:de:88:70:f9:94:a4:f3:5c:8e:
         71:53:7b:b8:dc:bf:10:94:e0:52:a9:4d:31:a3:80:34:0b:9d:
         6d:d3:42:6a:0e:29:38:be:61:96:66:f7:f3:2a:dc:02:7f:99:
         7a:27:52:f9:ac:b5:df:6b:0f:ca:ff:9b:fd:95:7d:93:e3:90:
         0a:34:69:b4:1a:51:83:74:b7:52:98:7f:a1:bb:17:8e:54:72:
         56:89:08:53:7a:e4:ed:35:f8:b6:32:e0:6b:65:5a:e5:6d:4d:
         b9:0f:72:1d:ef:65:6b:60:5c:f8:00:52:a7:b7:39:1f:f5:0c:
         97:54:e2:eb:9d:5c:e9:72:b5:67:43:ca:93:af:aa:a4:f3:3f:
         bd:be:2f:39:fe:bf:44:0c:cf:cb:82:2a:dd:60:89:54:03:e4:
         a5:64:71:eb:b6:33:b9:8f:49:a1:12:12:35:b7:18:ef:9f:56:
         e5:94:54:55:91:d4:2f:a1:75:53:40:32:41:16:55:08:65:6a:
         b9:e3:1b:e5:ae:f9:e5:63:d9:33:90:c3:47:fd:92:21:f1:20:
         41:38:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:50:27 2025 by rpki-client