Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File:                     PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier:          LIG9yZ6juMC3+Ft1TPn6l1xD8QJ2y1mRuLYSorzhrY4=
Subject key identifier:   54:6E:4A:16:3D:77:2E:5D:3C:D5:7B:AB:B1:B8:A5:06:EC:6F:50:EE
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer:       /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial:       01974DE98884D5AEFD4950F35E46CE624002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number:          1583
Signing time:             Sun 08 Jun 2025 05:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:39 +0000
Files and hashes:         1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
                          2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: MdgndTz48EVvXRhEQxLl+PUGJbjCwk/R0qNmk5c7SGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:88:84:d5:ae:fd:49:50:f3:5e:46:ce:62:40:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
        Validity
            Not Before: Jun  8 05:00:39 2025 GMT
            Not After : Jun  9 05:00:39 2025 GMT
        Subject: CN=546e4a163d772e5d3cd57babb1b8a506ec6f50ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:85:ad:de:1c:66:44:fe:4a:10:b6:b2:a0:
                    ac:1c:ce:2b:bb:53:f9:59:41:9a:8d:b6:82:fe:2c:
                    ae:f1:2f:03:f1:40:83:60:e7:3a:c0:7b:eb:59:3b:
                    85:6d:8d:ff:ff:26:6f:2d:9a:c4:3e:d2:67:1a:75:
                    58:c7:65:88:77:12:42:7e:d2:b0:ce:3d:c8:b2:d1:
                    45:d8:62:84:90:3e:ce:e3:3e:b2:12:16:1a:5c:07:
                    25:ec:cc:a3:0a:3b:42:0a:fb:51:30:40:15:e9:72:
                    66:d5:16:1a:86:39:a1:af:fc:4d:6c:b5:bf:19:e7:
                    17:e8:8d:37:39:25:a9:08:51:43:a7:e1:56:5b:49:
                    1a:d1:fd:95:fa:73:04:d4:bb:3b:6e:0b:ae:53:07:
                    b8:ae:17:3a:80:a5:32:7f:43:54:e5:f2:3d:81:94:
                    b2:cc:3d:81:9a:1e:5f:7a:64:6d:bf:f1:0d:c6:55:
                    fd:84:1e:7a:2b:c3:96:3b:de:74:6a:01:08:47:d5:
                    31:55:6f:92:24:ce:77:bc:32:86:6c:df:d8:6a:7e:
                    fd:b7:ab:4d:f4:80:49:b5:fc:9f:f1:d5:a7:46:60:
                    32:bf:fa:b7:76:74:dc:b3:ba:ce:12:92:d2:9f:c7:
                    10:f7:a1:cf:7a:b6:b3:d3:34:a6:45:7b:ee:e1:0b:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:4A:16:3D:77:2E:5D:3C:D5:7B:AB:B1:B8:A5:06:EC:6F:50:EE
            X509v3 Authority Key Identifier:
                keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:d7:73:c4:8b:0a:5b:dd:c3:e3:e4:d0:4e:3a:67:64:74:
         b4:21:76:14:22:5f:35:c1:fe:ad:af:e7:75:94:59:0a:db:28:
         4f:28:83:59:78:ca:ef:43:f3:ae:d9:e9:2d:5e:42:26:e0:69:
         24:e0:8e:c4:62:be:66:62:ad:74:6a:a4:0d:86:7a:62:65:44:
         97:54:67:05:d3:6d:52:4a:93:a0:31:0b:d0:53:2e:b3:b8:a8:
         ed:4b:79:41:8a:ec:39:ef:ea:34:ca:3b:05:d6:79:d8:08:55:
         b1:a3:24:0a:74:19:0d:53:c5:f7:56:e2:e8:c8:0c:32:c3:ea:
         26:92:53:7b:a7:f8:fa:b6:46:1a:6c:f8:28:8f:64:ce:8d:93:
         55:14:44:73:53:88:cc:c8:0f:f9:ca:db:7b:07:fd:2b:c3:da:
         39:a0:85:a8:06:58:72:53:44:6b:df:f4:ae:45:47:24:34:53:
         ac:b5:2b:21:15:7b:39:a0:f7:b3:34:f5:43:4c:83:6b:1a:6f:
         1b:a1:3e:c5:d6:af:89:29:0e:8f:ef:25:d7:88:b1:db:ba:9e:
         92:76:27:91:ab:61:44:86:37:75:4e:12:15:46:9c:97:80:ed:
         6c:e6:90:bb:37:9a:31:34:a7:15:03:f2:be:db:d3:1a:27:2a:
         81:fd:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:31 2025 by rpki-client