Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File:                     IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier:          qzpDhkp3Kk56R+g0cyB/ype+miDBHN6/TnRubbA5DWE=
Subject key identifier:   0B:BF:7E:F6:2A:17:09:EE:FF:4B:9C:0D:D0:2F:CD:28:82:69:47:F9
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer:       /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial:       01974D0E336A2070985E4E1B988419831D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 01:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:05 +0000
Files and hashes:         1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: t+fEerOTW80dLfseZSVJmAIF9hfAn1N7kFuBftMJow8=)
                          2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:33:6a:20:70:98:5e:4e:1b:98:84:19:83:1d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
        Validity
            Not Before: Jun  8 01:01:05 2025 GMT
            Not After : Jun  9 01:01:05 2025 GMT
        Subject: CN=0bbf7ef62a1709eeff4b9c0dd02fcd28826947f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:00:16:16:29:90:e7:5b:de:2a:7d:f0:7e:
                    09:0a:4d:3a:81:2c:63:99:19:2c:18:d8:07:d3:e0:
                    2a:57:96:01:79:ff:5d:df:93:05:08:3a:c2:14:32:
                    7b:3b:04:94:a5:63:b3:84:67:31:34:e6:88:cd:b7:
                    52:85:0f:10:23:62:b5:76:0b:96:b4:3e:87:7c:77:
                    65:fb:ef:78:b6:3c:7c:61:fa:77:9c:de:3b:c1:57:
                    cd:f9:d5:10:12:56:07:be:d5:a9:bd:03:56:ea:e1:
                    34:4f:bb:e0:88:46:52:41:58:81:f3:8f:76:fb:ba:
                    a8:83:00:03:1b:a3:4f:f3:4c:47:79:07:e7:5c:5e:
                    eb:ec:10:40:f6:18:b2:25:d4:99:cc:b4:42:00:ce:
                    6d:78:3e:3e:5d:b4:83:40:d4:c1:c9:d2:26:07:1a:
                    9f:14:49:fe:69:47:a3:40:44:bc:79:79:50:63:8f:
                    7e:46:26:7c:95:6a:f0:3b:2b:cf:a6:45:7e:a2:71:
                    bb:f2:0b:1b:3c:45:f9:4f:cd:d2:f4:57:b4:af:8f:
                    0e:65:47:a4:01:ce:79:fb:a9:e0:eb:da:2a:ab:d7:
                    12:5c:b6:63:a9:cb:3e:90:93:4b:d8:e0:03:80:30:
                    a7:8d:98:db:be:9d:a2:80:e3:b6:67:e5:3e:56:b4:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:7E:F6:2A:17:09:EE:FF:4B:9C:0D:D0:2F:CD:28:82:69:47:F9
            X509v3 Authority Key Identifier:
                keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:d4:e0:b2:1a:ba:52:78:b4:f1:2d:68:ff:6f:c4:cd:26:
         a1:95:a7:bf:bc:09:43:ef:f6:6d:30:6f:f8:54:0e:31:3e:ec:
         a7:8b:be:b8:e3:21:8c:c2:8b:39:0d:87:79:07:77:67:28:b8:
         ef:f9:a4:ee:e5:44:f4:45:0c:e5:5c:71:e6:2e:ff:2f:49:9b:
         0e:56:50:5e:99:a5:ab:05:2b:f7:e1:d4:27:70:81:70:27:00:
         9c:af:17:af:cb:d3:51:7c:9e:2a:40:0c:b1:de:e9:f9:6b:11:
         05:06:36:53:c2:1c:fa:8b:f0:d8:07:1f:48:ae:81:9c:f9:ee:
         75:87:7a:fb:b1:a5:90:65:66:e4:ff:6b:e6:e8:cc:78:b6:81:
         3f:0c:c7:03:12:c6:c5:13:b3:9b:3e:2d:04:29:db:08:6e:3b:
         78:02:79:2b:7e:ee:34:fa:83:89:55:b2:a8:d3:02:d7:21:4a:
         97:61:bd:59:dd:a1:ae:6c:f6:23:b4:b0:8e:7f:c3:c2:eb:3e:
         43:17:a3:5a:a5:a3:b3:16:ba:2f:a8:9f:8e:20:f0:16:88:9f:
         9c:f0:4c:93:15:b3:c3:19:33:f5:ad:3d:56:68:b4:3b:e4:2b:
         2c:04:02:4b:70:bd:9f:71:ab:ce:22:ab:6f:4f:bc:d3:82:13:
         95:58:79:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:06 2025 by rpki-client