Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          nMEoJIoMCnF25vNRtRktMjcgWN9zXYFSLiX/QHWkyXc=
Subject key identifier:   8F:A7:72:7C:0E:CB:C8:F1:83:E8:99:EA:16:36:35:38:B8:F7:25:6E
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       0197488D391F0F5C40250B03279841B98338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 04:01:44 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:44 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:44 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: NlSwEdAa+o3gzWKKrBTsl02j2B/uG94eVOnu1bTeRPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:39:1f:0f:5c:40:25:0b:03:27:98:41:b9:83:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Jun  7 04:01:44 2025 GMT
            Not After : Jun  8 04:01:44 2025 GMT
        Subject: CN=8fa7727c0ecbc8f183e899ea16363538b8f7256e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:07:5e:bf:40:95:3b:ca:5a:65:93:e8:8c:
                    53:fc:1b:6c:80:80:5c:ee:8a:e0:a7:3a:59:16:3e:
                    8d:a4:17:46:1a:1a:0a:c6:ab:cc:38:03:0f:a5:6c:
                    6a:6a:6b:07:5f:ef:87:28:0a:2c:50:7e:4e:58:fb:
                    98:c6:c4:0a:f8:7c:90:9f:9c:b6:9b:f6:30:0f:d5:
                    68:5a:36:53:1d:d8:96:a3:4a:5c:71:09:11:91:57:
                    79:ff:6d:58:5c:89:2a:ba:11:9d:8f:ba:48:7a:4b:
                    a3:bf:1f:8e:0b:4c:83:02:ff:a0:dc:dd:0f:60:70:
                    28:6e:d3:41:05:e7:3e:98:79:a7:93:6d:9d:ce:79:
                    f0:76:71:a3:ab:4b:27:f7:e1:41:bd:66:83:d5:32:
                    6d:ee:a9:54:97:0e:81:be:25:dc:d1:07:cc:a4:ab:
                    77:d7:e6:52:a6:c7:09:57:ef:f3:30:8c:82:4c:91:
                    24:d2:2e:51:70:94:6a:b9:63:44:29:10:3a:54:b3:
                    c6:d9:19:69:0c:b1:24:30:62:b4:2d:1b:70:eb:23:
                    cd:67:a9:fd:c0:1e:0e:fa:c6:de:8f:7a:f4:74:ea:
                    35:ac:ce:0a:da:95:07:33:78:03:19:e5:34:9b:0f:
                    d9:7f:c5:74:55:e1:2e:57:39:6e:55:28:b7:c6:39:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:72:7C:0E:CB:C8:F1:83:E8:99:EA:16:36:35:38:B8:F7:25:6E
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:d1:35:44:4d:0b:dd:0a:6c:b2:90:88:1e:c3:b9:67:4a:
         bd:57:f3:14:76:e1:52:ce:22:58:5f:65:ac:ba:40:06:07:a1:
         ac:ca:2e:1d:b5:86:d7:de:3c:d9:88:3e:80:08:8b:bb:83:21:
         30:d2:f1:d7:8b:7b:31:4d:cb:46:60:b2:96:ef:ed:10:bb:9e:
         31:31:8a:c3:19:8e:fb:97:5d:3a:12:6b:8e:57:9f:25:65:54:
         20:8b:2c:48:f4:48:f4:20:41:8c:ee:ac:39:72:f0:1d:7d:44:
         3e:10:0b:50:dd:62:c0:04:d0:86:1e:ee:9f:86:a3:a4:02:0e:
         aa:a4:e2:47:b4:27:6f:58:b8:22:a6:cb:1d:26:9d:e6:da:ca:
         8c:a5:3b:6a:d8:45:54:12:d0:1e:f3:47:76:1d:89:04:5a:23:
         c9:35:36:7f:11:91:7e:ef:59:24:4c:1c:c0:3e:66:cd:37:47:
         02:5c:d9:a7:bb:39:50:d0:b5:1a:f2:20:39:aa:5d:48:13:c5:
         58:c3:38:c5:5f:50:4e:36:bc:8a:48:1f:13:49:69:ee:ff:ce:
         e9:fe:96:cc:46:62:82:80:8e:cf:e0:3c:21:6b:a8:c0:70:b1:
         df:bb:6a:ed:ee:27:1f:a7:a0:d4:19:cb:2c:bf:38:20:94:26:
         df:39:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:04 2025 by rpki-client