Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File:                     V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier:          0fn66XHarRbF+qgkMn45iRXDtMmrnBoNa5tmILzP/Zs=
Subject key identifier:   BF:69:99:16:56:18:67:D3:E4:D3:2E:87:6B:A2:A5:86:4F:F7:86:C0
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer:       /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial:       019748C314C07E5D88DE459CDF8FCD52F593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 05:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:33 +0000
Files and hashes:         1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
                          2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: 5uLsVvbiXyhkwZaHU0ABUrA3eZEWIdA/h3ipW7xHUeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:14:c0:7e:5d:88:de:45:9c:df:8f:cd:52:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
        Validity
            Not Before: Jun  7 05:00:33 2025 GMT
            Not After : Jun  8 05:00:33 2025 GMT
        Subject: CN=bf699916561867d3e4d32e876ba2a5864ff786c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:be:f7:cd:cb:d5:f7:81:cc:50:42:cc:f9:
                    99:0f:af:47:58:04:29:ed:19:f8:c9:4b:46:67:4e:
                    9f:2e:e1:0f:3b:25:69:0f:97:a9:79:12:4e:c2:60:
                    52:fd:7f:5d:45:a4:05:f7:3d:19:d3:e7:c4:3e:7e:
                    88:b0:71:a2:5d:c0:c5:dd:7e:7c:2b:39:ef:ab:40:
                    eb:6f:04:cc:97:35:0f:29:a5:e8:00:56:00:86:c2:
                    f7:66:d3:e2:5a:9d:63:44:53:47:51:26:ad:f2:3e:
                    7c:5a:39:03:07:a4:3a:f8:37:57:f3:e7:4e:a8:93:
                    c4:a3:c2:80:63:71:c0:ec:83:71:ab:ab:14:9f:44:
                    8c:01:50:ea:be:ad:29:42:6b:94:0b:e9:7b:be:e5:
                    08:ae:a3:7e:91:93:a2:e2:9f:00:03:c9:df:36:4b:
                    1f:4c:41:98:7d:b1:30:ce:dc:05:96:7c:88:da:6e:
                    9f:be:42:62:f1:29:a8:f0:d2:4b:d9:5e:fe:48:d4:
                    4a:b4:4f:94:24:65:82:0b:77:a7:70:12:01:49:52:
                    e6:31:03:2d:ea:26:16:fb:12:ba:a1:5a:e7:24:5f:
                    08:d1:8d:45:9a:a6:41:44:35:dd:88:ba:e6:d2:c7:
                    83:e8:fe:b8:f5:70:eb:1f:7c:9c:b7:1e:d9:53:99:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:69:99:16:56:18:67:D3:E4:D3:2E:87:6B:A2:A5:86:4F:F7:86:C0
            X509v3 Authority Key Identifier:
                keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:01:74:ea:99:ef:74:3c:e0:39:39:e1:a9:b7:6f:13:a7:94:
         98:0a:9d:79:7b:c7:cb:5f:40:ec:58:4a:05:4b:56:bf:fd:0e:
         11:e4:21:cb:88:79:33:3b:7a:06:5c:ee:c6:72:5d:b9:e2:9b:
         13:ca:a2:1b:1e:76:91:08:f1:d7:59:19:e8:1d:7f:2c:7c:ae:
         ba:40:f8:f9:f3:a4:48:22:2c:92:48:52:9b:10:f7:88:d7:03:
         b0:f3:f0:b8:9e:8e:c7:90:93:b6:50:e5:ea:ad:b4:14:e2:80:
         18:10:f6:32:72:33:3e:e9:70:7a:ba:b0:f7:eb:ad:c5:ca:18:
         d0:9c:b8:77:d1:0e:de:97:89:3f:89:df:8a:72:22:fd:32:a1:
         27:59:34:ed:be:ee:34:23:79:a9:cb:f7:e4:00:ed:fe:6c:41:
         66:c9:27:da:91:11:7a:68:d6:4c:17:73:35:95:9d:14:a5:db:
         7e:7f:b3:94:0b:4e:87:7d:94:73:74:ba:4e:5e:5b:4c:c8:a6:
         55:a4:6e:8b:30:f7:6b:4a:ca:7d:37:73:1b:e1:97:ec:33:03:
         b8:d8:cc:4e:a6:a9:0a:00:32:d6:e2:a3:50:92:98:d0:34:35:
         1b:d2:28:05:7e:08:2f:3f:f7:ed:29:95:bd:66:f9:ab:03:c7:
         91:86:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:51 2025 by rpki-client