Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File:                     t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier:          O4/UdG+gRe7wGY7OGOK/p/NlR0cdjnZULQq4g6RX/eM=
Subject key identifier:   91:52:15:03:35:B5:E1:1D:1D:C5:10:9D:BD:74:11:54:16:42:E0:4A
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer:       /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial:       019746673B10861C98ED29601F9DAA0D3136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 18:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:59 +0000
Files and hashes:         1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
                          2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: scwm/Cx1cXRWqeoCarUk3py6FM2rAth3+NTytHkLgXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:3b:10:86:1c:98:ed:29:60:1f:9d:aa:0d:31:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
        Validity
            Not Before: Jun  6 18:00:59 2025 GMT
            Not After : Jun  7 18:00:59 2025 GMT
        Subject: CN=9152150335b5e11d1dc5109dbd7411541642e04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:23:e5:b5:7d:d0:aa:7d:a9:58:2d:4e:14:
                    8d:4c:d3:1c:92:92:14:ce:f0:61:aa:4e:02:05:98:
                    43:ad:e3:a6:97:c2:55:1b:6a:d6:49:09:55:59:12:
                    ce:b6:11:32:ae:93:5e:32:5a:8e:27:06:9a:cc:a0:
                    0b:24:a8:b1:8a:1a:88:ec:37:80:d4:d8:19:86:e3:
                    41:1f:d2:91:d3:5d:0d:70:86:19:7d:af:3e:f7:8f:
                    1c:8f:68:54:e7:44:79:55:f2:43:17:1b:20:30:29:
                    07:4d:24:55:29:58:de:95:4e:e0:bf:53:1e:66:0a:
                    34:53:a1:cf:99:da:c1:24:e1:5f:b3:61:4b:1e:e3:
                    3d:53:11:ff:08:ff:56:74:4a:2f:84:df:94:b5:e1:
                    e3:9d:5f:e2:85:22:c6:4a:14:94:ff:a8:2c:35:78:
                    82:b4:77:7c:c4:81:0e:95:18:72:8f:46:77:83:90:
                    19:79:2f:0c:3c:2d:9f:1d:21:86:57:a0:c6:77:c8:
                    63:ae:5d:b6:50:0f:f8:bf:77:24:a7:13:64:37:26:
                    00:eb:79:15:0b:26:bf:ab:76:d2:12:9d:28:2a:9b:
                    fe:2f:c1:d6:bc:b4:5c:46:41:9e:d9:e8:f4:51:3e:
                    3c:2a:13:10:51:b2:40:c8:ef:fc:9f:fd:7b:e8:ec:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:52:15:03:35:B5:E1:1D:1D:C5:10:9D:BD:74:11:54:16:42:E0:4A
            X509v3 Authority Key Identifier:
                keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:7a:4a:2c:48:c0:4b:59:30:88:43:e4:0f:55:a9:db:98:
         8e:73:9a:7b:6d:ad:56:78:5a:49:ff:ca:d6:ad:ca:1e:f5:08:
         e2:6f:c6:7d:68:6f:4b:6c:08:1c:94:0f:8d:c2:7a:19:fa:44:
         a1:db:8f:2d:b8:d3:d3:95:e5:8d:13:e8:35:fd:f7:ef:78:4b:
         5f:f9:4c:68:45:ea:4a:59:70:1a:7e:bd:46:75:4c:17:3a:63:
         59:d5:9b:e0:25:de:90:d5:ae:b7:3a:d5:8f:8a:5a:d4:12:08:
         5f:89:1a:74:ba:ba:63:10:8b:d9:bf:58:c1:64:43:b8:49:5c:
         71:34:3e:23:ad:0f:5a:23:8b:5f:f0:44:e8:06:c6:f4:57:9b:
         f6:db:fd:30:fe:b4:3b:9b:e5:7f:53:c0:be:56:18:6e:d3:58:
         29:13:41:2c:7f:c6:03:52:1b:00:cd:24:dc:2f:5d:c0:ca:d8:
         ca:f6:03:ed:73:76:f7:38:b5:dd:7b:c1:d5:c6:37:06:68:d0:
         de:75:29:61:26:97:22:a2:85:93:f5:33:ea:b5:2f:28:b2:c1:
         8c:66:00:f1:54:2d:38:c9:ec:64:87:a1:d9:36:ca:63:06:5a:
         f8:72:2d:15:0c:8d:95:08:e1:03:99:de:0c:7c:26:c8:a3:8b:
         2a:1f:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:46 2025 by rpki-client