Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File:                     r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier:          +YXNUCgDyq/bYaueP1x4FSCW2WRkC/4PDA2rEVMlATw=
Subject key identifier:   3B:D0:F1:65:75:B5:1F:D4:70:66:8E:06:77:DA:3D:28:84:AF:6F:60
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer:       /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial:       0197488C3FC373A4E236A60DEDF187885706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 04:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:40 +0000
Files and hashes:         1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
                          2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: zYd7Z2uVYqAAA45y+FkVfkwDSHGOz6/lDZp/iTfVNUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:3f:c3:73:a4:e2:36:a6:0d:ed:f1:87:88:57:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
        Validity
            Not Before: Jun  7 04:00:40 2025 GMT
            Not After : Jun  8 04:00:40 2025 GMT
        Subject: CN=3bd0f16575b51fd470668e0677da3d2884af6f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:5d:d9:84:d1:be:e2:8b:3d:13:a0:c6:33:
                    b0:33:78:7f:a2:cb:f5:1d:5f:64:9a:de:b3:37:20:
                    34:06:4f:a4:13:9c:4a:f9:02:a7:fc:c5:60:d6:d4:
                    98:73:31:0e:6f:c6:ce:c1:1b:74:f3:61:0e:00:5c:
                    4c:59:f2:a7:e0:9a:96:6c:70:e9:24:99:10:ea:ef:
                    ec:cc:64:36:05:46:96:33:cc:30:d9:56:8f:74:b0:
                    d8:47:c0:05:f1:1a:bb:8a:be:08:15:a7:71:f4:21:
                    e7:37:51:bc:8d:ca:f5:83:75:c1:28:56:e5:16:1e:
                    88:f7:9d:ff:3b:1c:c3:06:97:50:2e:30:1a:21:94:
                    c3:dc:01:41:76:8a:71:20:d3:4f:1c:40:bf:c6:d9:
                    0e:e9:d8:56:3e:72:79:2d:4b:2e:88:d9:25:ba:46:
                    e0:1e:63:f7:13:76:9f:f8:09:07:1e:6e:10:94:42:
                    25:52:20:f4:80:dc:be:c2:7d:14:09:16:89:9c:f2:
                    bc:b8:e4:f2:e7:5c:48:98:fe:93:e2:97:df:30:b6:
                    ed:86:00:e9:89:5b:00:5b:4d:ba:0a:ab:92:f3:e2:
                    24:d7:b5:18:a1:f3:a7:4f:19:93:8d:77:c7:95:29:
                    74:b4:5e:23:49:de:94:c6:0e:0d:1b:67:e8:16:06:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:F1:65:75:B5:1F:D4:70:66:8E:06:77:DA:3D:28:84:AF:6F:60
            X509v3 Authority Key Identifier:
                keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:75:28:a4:86:14:db:b3:05:c6:25:09:6d:53:92:48:9b:
         34:de:ef:91:e3:4b:7e:08:d4:3d:4b:88:3d:f8:89:10:b5:bd:
         f9:11:38:4b:db:90:76:3f:cc:fa:03:bd:eb:58:7e:fe:0e:82:
         55:3b:d8:e0:a0:2b:1d:d5:c6:34:61:9d:a6:2d:3c:82:7b:6b:
         aa:c6:ed:df:6b:4a:08:fd:0c:52:0b:4c:92:08:f7:7b:53:9c:
         f2:de:c6:ff:35:19:8f:fe:37:14:75:be:b8:8a:1b:37:60:ec:
         08:bf:44:3d:6e:11:22:22:6a:f2:63:66:d1:7d:ff:eb:b6:c5:
         58:5f:df:e4:98:01:b1:fa:c1:e7:1e:25:5a:94:df:bf:e1:d1:
         f4:9a:b9:0e:f3:d3:fa:d6:b1:67:ce:73:00:99:db:e0:3f:de:
         6f:e3:44:1a:89:5b:35:f5:93:d5:33:98:3a:7c:71:32:8b:1f:
         5e:15:b2:60:50:21:7e:f0:b5:a1:3e:f6:ee:55:0c:1e:8d:3a:
         a0:ba:90:2f:ae:fb:97:06:fd:5c:ce:e0:a8:1e:6d:a3:03:13:
         1f:69:c2:a1:c7:e3:cb:d9:09:47:ce:96:52:db:a0:26:69:a8:
         c8:aa:9a:1c:ba:22:d7:29:6c:70:8c:6c:40:25:57:27:e9:cf:
         82:26:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:15 2025 by rpki-client