Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File:                     y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier:          1SyisRzBrGZL8R1RS7T0/SZc8KqbS2HrwcDxt1P20RA=
Subject key identifier:   49:C0:12:1F:C0:E1:3B:48:B8:0C:F5:BC:1E:94:0E:80:54:92:7D:69
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       01974B1FA44B46F2F81CAE7CF520F1595265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 16:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:54 +0000
Files and hashes:         1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
                          2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
                          3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
                          4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
                          5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
                          6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: QZT5As3z5dzP1zLgPbnXn54y/K2uSOgVwcA28WwYR3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:a4:4b:46:f2:f8:1c:ae:7c:f5:20:f1:59:52:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Jun  7 16:00:54 2025 GMT
            Not After : Jun  8 16:00:54 2025 GMT
        Subject: CN=49c0121fc0e13b48b80cf5bc1e940e8054927d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bb:70:52:95:73:7a:6c:f7:eb:a9:86:2e:1f:
                    85:44:bc:6f:c8:24:20:93:e1:7d:97:3c:d2:66:90:
                    9b:4f:0d:2e:5a:a6:75:5f:65:fd:ec:44:6a:41:4f:
                    46:89:ea:50:d4:e0:b1:75:e3:85:35:a0:dc:56:2e:
                    cd:58:2f:9f:26:ee:5a:5a:62:54:12:db:7e:31:82:
                    b1:16:b9:7a:58:2a:bc:35:cc:5e:68:74:8e:48:86:
                    f5:f9:95:74:71:d5:2b:5c:2e:c1:e5:0d:9c:e6:88:
                    d3:4b:f6:db:94:cf:20:7b:a0:58:0f:ef:8f:19:4b:
                    69:a5:f0:d5:82:2b:92:1e:e1:c5:e2:6f:6c:97:ac:
                    73:32:85:6c:51:01:49:f7:43:3e:48:e9:b2:97:2f:
                    3f:fa:e9:a3:52:44:dc:59:4c:f7:01:2a:61:d3:0e:
                    27:b0:8d:bc:e1:fa:fa:b6:de:fd:aa:47:c3:a0:bb:
                    08:38:35:fe:00:1a:fa:ed:5e:6b:17:46:13:3b:d8:
                    6a:a3:88:a9:c2:4e:46:c8:d1:73:a5:eb:13:1a:b8:
                    59:17:f4:13:5d:19:f1:33:17:d3:b5:c4:0c:7d:1d:
                    5c:60:a1:c9:c6:c0:7f:2c:7a:c0:74:60:4a:c9:d7:
                    b9:91:d7:2e:4c:d4:d0:e8:f2:90:1f:08:38:8b:59:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:12:1F:C0:E1:3B:48:B8:0C:F5:BC:1E:94:0E:80:54:92:7D:69
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:a1:4f:27:72:4d:8f:03:d6:a8:0a:13:c0:b8:13:23:5f:
         b3:51:8e:6f:8c:9d:4d:b8:0a:b6:e1:42:91:26:9f:08:4f:d4:
         85:99:71:0f:fb:af:3c:84:c2:c8:49:8c:a7:00:6c:a4:94:52:
         12:f9:10:97:be:df:55:b9:93:1c:25:0d:d8:aa:3a:89:83:da:
         1d:52:db:81:6b:75:73:d7:97:8a:b0:96:73:b2:ea:95:89:05:
         d1:18:69:47:fe:80:db:15:fe:15:6b:b4:77:5e:38:ca:b8:e6:
         83:57:ee:c2:90:fd:15:de:64:99:9f:02:f4:07:61:62:05:96:
         f0:da:fc:e5:9e:f3:51:9d:8d:ee:44:79:80:55:9b:99:ba:ce:
         ce:41:8f:6f:b0:d2:93:23:f1:57:99:83:16:7d:7b:b3:13:01:
         a2:fb:0d:f8:ca:63:02:ac:b9:28:07:7e:f3:c9:d9:c7:a2:4e:
         b4:ec:9a:c6:d2:d3:a9:66:19:3d:01:0b:c6:52:c3:38:4e:73:
         c9:80:a9:b4:40:fd:7e:ae:d1:bc:59:b9:da:80:42:e7:72:2b:
         49:d4:cb:ca:75:41:4b:5d:0d:b4:2a:1c:ed:fc:e9:5a:69:62:
         b9:c0:35:4c:4f:1c:fd:1a:0b:31:01:13:75:5d:53:e9:76:17:
         c3:7c:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:39 2025 by rpki-client