Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File:                     dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier:          mqjTpLGf0e3fzs/nozMMBglQ3pKUlsSLSgZMt9XMs7g=
Subject key identifier:   DE:07:74:3E:33:FC:7C:E5:82:C6:4D:69:BD:17:E5:8D:35:02:61:F4
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer:       /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial:       0197462FD024553870FB6DC3547593DD9D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number:          1580
Signing time:             Fri 06 Jun 2025 17:00:27 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:27 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:27 +0000
Files and hashes:         1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
                          2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: TfGHwUkKtbAIPgpHqFP28pgU0ptTjkWY8wJmnFTgmow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:d0:24:55:38:70:fb:6d:c3:54:75:93:dd:9d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
        Validity
            Not Before: Jun  6 17:00:27 2025 GMT
            Not After : Jun  7 17:00:27 2025 GMT
        Subject: CN=de07743e33fc7ce582c64d69bd17e58d350261f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:5e:7b:55:f8:ee:ca:3d:58:63:37:c7:01:
                    a5:7a:03:b2:f6:4f:44:a4:40:40:9a:c4:42:55:c6:
                    82:46:9c:60:0b:57:35:02:57:87:96:da:8c:71:e7:
                    fd:31:22:ae:ae:ae:ff:73:ce:b0:b9:23:9c:f6:c3:
                    40:01:6e:1a:d9:8e:e9:ce:9a:12:e6:dc:fc:64:bc:
                    1e:72:53:61:b6:0b:7e:e0:6a:1f:d4:72:70:26:78:
                    9a:20:cd:da:0b:67:05:b8:1a:a0:5e:a7:4a:d7:25:
                    6d:3f:29:8d:8a:aa:1a:53:11:58:3e:b5:bf:2c:65:
                    b8:db:7d:14:b4:c6:0f:df:62:05:27:a5:90:6a:77:
                    88:e0:d1:65:0b:90:91:30:c9:7c:30:65:0a:45:7c:
                    a2:22:15:a7:fe:ac:f6:4b:69:9f:21:0d:3d:ae:73:
                    fa:fa:5d:3f:06:1c:bf:6f:35:a2:0b:b1:0c:88:c4:
                    35:63:d9:ff:e3:e4:65:a1:64:8d:5e:c6:f4:24:ad:
                    51:be:52:f6:5a:03:8f:52:51:42:d8:f9:d0:96:e2:
                    8d:19:bd:07:4f:cc:4e:f5:62:d3:b5:56:dd:fa:5b:
                    1d:de:d6:f3:73:c1:2b:6c:56:30:43:07:a5:38:8f:
                    17:89:ff:76:be:4a:53:db:3e:df:5b:d9:d0:b9:38:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:74:3E:33:FC:7C:E5:82:C6:4D:69:BD:17:E5:8D:35:02:61:F4
            X509v3 Authority Key Identifier:
                keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:b7:cf:68:59:67:19:8c:64:10:3a:b7:45:73:96:5e:95:
         7e:dd:1b:8f:13:f1:fe:35:aa:e7:e0:95:d0:19:81:f3:c7:82:
         be:16:8a:00:77:66:83:8d:3b:e7:03:ad:22:e8:dd:12:3e:25:
         c6:26:60:f3:6f:96:ab:80:74:8a:b4:89:c5:ab:dd:26:04:39:
         20:3a:5d:69:60:e2:5c:8f:b7:18:9f:2b:73:9e:e5:b1:cf:e1:
         ab:0a:ef:4c:38:b3:3e:44:13:3d:bd:92:99:35:62:66:b7:37:
         ab:20:ae:3d:59:28:12:78:3a:27:01:b4:8b:8e:a4:7d:49:14:
         f7:23:01:ce:28:20:05:25:08:85:c6:c9:5d:8b:89:04:6e:e7:
         23:e1:6c:d3:0e:01:31:c9:90:5d:a6:84:4b:77:c0:0f:5b:0f:
         55:63:39:c2:01:38:0a:79:42:ac:e7:bd:14:14:89:64:1e:d6:
         4b:92:37:42:89:17:99:1b:c8:fb:b4:1c:12:68:e5:86:94:12:
         c3:de:90:c7:22:59:98:1f:3d:03:04:5f:25:0c:83:35:13:d5:
         dd:5d:7a:1d:20:54:ab:be:a8:80:1f:63:d2:de:55:3e:4c:68:
         d2:5c:dc:9a:ec:98:02:0d:9a:7f:21:e8:69:f9:b5:a8:93:c0:
         56:6f:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:45 2025 by rpki-client