Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File:                     D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier:          o0fPpr76wHXGwCF1CCmtmBNt/+c+LMi0yHBYVQhUOcw=
Subject key identifier:   76:B2:B1:B5:4B:61:18:D8:8A:8C:AD:79:64:35:11:3B:05:02:F8:58
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer:       /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial:       0197469E487D200BDC0A4D5628DC5DD3FF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number:          1581
Signing time:             Fri 06 Jun 2025 19:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:07 +0000
Files and hashes:         1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: G/8Ksuqnhcjetgp/msUQC+q35hV2bKL+UdvbptjvyvA=)
                          2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=)
                          3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=)
                          4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:48:7d:20:0b:dc:0a:4d:56:28:dc:5d:d3:ff:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
        Validity
            Not Before: Jun  6 19:01:07 2025 GMT
            Not After : Jun  7 19:01:07 2025 GMT
        Subject: CN=76b2b1b54b6118d88a8cad796435113b0502f858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:99:b3:b5:b9:63:47:5d:0d:61:9f:0b:cd:
                    56:cd:bd:4b:33:fd:33:e1:22:d9:f5:ed:6a:5f:c8:
                    dc:44:fb:6c:ed:42:26:4b:c0:52:fb:77:50:48:21:
                    e0:84:42:20:0a:0c:cf:f7:69:a2:25:65:38:9f:f5:
                    01:2f:4b:54:34:9c:a7:33:e5:71:33:24:8d:78:65:
                    d3:d7:c2:0e:73:ae:93:92:16:17:8e:2f:1e:e6:e1:
                    29:91:4b:5d:ec:d4:b0:72:7e:d3:7d:f7:1b:23:0e:
                    77:20:3c:54:df:11:ef:c0:65:8d:02:5f:9f:8a:e0:
                    7d:28:45:30:bb:d0:ed:93:11:6c:84:e5:c3:8b:21:
                    84:68:1d:b9:e6:1a:9a:ac:ac:6d:45:4b:d5:51:01:
                    4e:d1:68:19:66:d4:ad:de:3a:66:28:38:79:b8:df:
                    3a:30:30:42:a6:c6:0d:d7:c6:e3:c7:64:e7:c6:69:
                    77:ca:af:77:7b:99:2d:29:a2:d9:1c:d2:c0:9f:4d:
                    3f:0d:44:fc:3d:53:61:b5:c9:78:f0:e2:5b:54:12:
                    1f:f0:01:91:9c:ab:71:cc:8c:b8:1f:6e:c8:d5:5e:
                    37:7c:5c:6e:3c:19:79:3d:54:5d:45:77:e5:a2:7f:
                    99:f1:c4:2a:1a:d7:ab:4d:17:c0:07:da:af:2b:46:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B2:B1:B5:4B:61:18:D8:8A:8C:AD:79:64:35:11:3B:05:02:F8:58
            X509v3 Authority Key Identifier:
                keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:9d:05:3d:27:7f:30:be:ff:5e:d9:10:7c:98:2e:bc:97:
         d0:f3:7e:e2:df:20:5f:61:ad:e5:52:9c:a5:b7:f2:d6:a1:2b:
         06:2d:db:97:14:de:45:c3:41:14:10:4d:6b:c2:9f:fe:bd:6e:
         a0:b6:99:3a:d2:67:b6:82:da:05:a1:fc:59:ef:07:b2:1c:62:
         7d:fb:37:b3:0b:87:63:ea:31:93:51:71:58:90:28:4f:65:d1:
         d1:e5:75:81:47:ff:c2:6e:c2:6a:6b:7e:1a:40:57:f1:cb:e2:
         cb:b6:20:7e:8f:0f:e1:6b:cb:67:47:9f:dd:76:33:86:bb:d0:
         b6:62:ad:24:77:ed:f7:f6:8b:ab:63:0d:06:1a:63:8f:2f:6e:
         80:a5:3f:0f:03:6b:ba:97:85:2a:27:42:d5:fa:dc:7b:e7:fe:
         5f:d0:33:e1:a6:63:8f:a0:48:2c:02:0f:86:e8:12:09:65:8b:
         ed:90:7b:a5:69:ce:db:a5:6f:22:4a:c6:34:e4:f5:ce:f9:94:
         e6:9d:11:90:7a:11:03:a2:62:93:98:72:88:be:9a:cb:70:4c:
         00:6a:f2:43:d3:cd:88:23:db:f0:77:54:2b:ab:54:5e:82:d7:
         c2:71:9f:f9:61:af:0f:75:44:77:2a:85:b8:88:c3:4b:61:6f:
         6b:1b:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:29 2025 by rpki-client