Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File:                     h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier:          ZiDYpuO/ISXFW1BjH84S2ZH/Iw/pUC0HfOAeuJOGpkk=
Subject key identifier:   94:B4:C4:07:67:E2:FF:1F:74:99:0E:23:A5:EB:62:74:D7:37:4F:82
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer:       /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial:       0197488D253581ABE2F92F06199C11EF0ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:01:39 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:39 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:39 +0000
Files and hashes:         1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: B11PqPW8DcQ3Lru5Gb4UNo3DoANo/phnbdOI468fmT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:25:35:81:ab:e2:f9:2f:06:19:9c:11:ef:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
        Validity
            Not Before: Jun  7 04:01:39 2025 GMT
            Not After : Jun  8 04:01:39 2025 GMT
        Subject: CN=94b4c40767e2ff1f74990e23a5eb6274d7374f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:37:f4:29:4d:7d:d4:91:50:68:7b:e3:9e:
                    b5:02:12:aa:26:80:a4:f1:be:a3:93:6f:3d:11:40:
                    ac:92:35:c6:a6:61:4a:53:44:68:31:d7:68:ce:c1:
                    90:40:b3:52:34:a6:65:60:4e:b5:6c:7e:9a:9e:c6:
                    a2:e6:59:23:3a:74:7d:6d:ab:9c:54:16:27:3d:da:
                    7a:ac:df:2e:35:dd:2d:be:53:81:3f:bc:b1:81:ab:
                    33:e6:f7:ed:d7:6e:ab:bc:e9:ea:2b:b4:d9:2a:70:
                    e8:95:1c:59:89:90:29:d9:c5:7c:a6:a4:d6:03:ed:
                    44:0a:5c:d2:3b:82:bb:e3:25:33:24:e6:1e:38:d7:
                    11:2e:9f:92:77:ba:13:14:06:56:a6:98:f2:08:f1:
                    85:3a:0f:3a:68:de:59:a3:ee:31:52:ba:a1:18:3a:
                    62:81:a0:dd:e7:0b:3f:c4:c4:54:3a:5b:21:8c:ef:
                    78:8d:b2:ef:9e:70:c6:fd:ca:e8:fc:a0:b1:71:df:
                    ba:c9:d1:8d:64:bb:a3:16:45:03:dc:61:8b:21:89:
                    56:45:4e:93:fd:fd:d8:7b:15:5e:87:42:78:24:9e:
                    14:2f:f2:22:03:f3:88:13:72:7e:ee:f0:c7:45:92:
                    2e:ff:47:98:05:8e:e7:9a:eb:93:48:fc:dc:eb:ad:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:C4:07:67:E2:FF:1F:74:99:0E:23:A5:EB:62:74:D7:37:4F:82
            X509v3 Authority Key Identifier:
                keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:1e:a8:19:2d:4d:d1:98:cd:b3:64:bd:b7:f6:36:65:6a:
         33:cd:81:73:fc:be:e8:69:a6:88:09:52:8b:25:48:8e:f3:e8:
         a6:ba:e9:fd:e4:bf:bf:2a:aa:a6:8a:c3:1f:f0:b7:2d:26:84:
         a3:83:70:bc:05:80:fb:e3:ee:2f:3e:3e:c7:df:e9:8c:c2:4d:
         ab:44:06:2e:cf:c7:6f:fc:b2:a7:cf:9d:4d:fb:a0:74:29:c2:
         3c:3b:65:65:97:34:d6:19:72:d5:27:7c:66:5b:09:c4:f6:ac:
         51:dd:b5:08:90:39:37:9b:39:a9:0c:1e:ab:15:8e:36:ff:08:
         8f:a5:16:4a:95:de:cc:9a:56:4f:8d:54:a7:c5:eb:11:fe:21:
         46:cc:fe:7f:43:1b:9a:c1:5c:8a:86:49:14:80:6a:c7:22:cc:
         4b:f1:6f:fc:b3:bc:b2:c0:2b:e6:00:42:54:ef:70:e0:8b:09:
         d7:1e:47:c6:5b:9e:ed:cb:d9:12:f1:c0:0d:6e:ca:c2:12:68:
         b5:57:39:03:df:d7:b8:40:f3:40:0a:6a:af:9c:c8:64:4e:63:
         2f:b1:9f:ad:e0:c6:8d:f0:bb:11:0c:91:75:55:34:6b:ac:bf:
         d2:04:97:69:4d:c5:ad:42:bd:f1:9e:e2:33:e8:c8:aa:eb:f3:
         d7:b8:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:02 2025 by rpki-client