Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File:                     Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier:          3uG2JF/KD7tbBXVmBuNzS2gTeHNHMG0kAiB8IA27O94=
Subject key identifier:   00:E9:F3:54:4B:29:6D:0F:01:5F:D4:D2:E7:CD:34:1A:DB:68:B2:E0
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer:       /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial:       0197469DBD614E7007B6D1D92D4FF4094319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 19:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:32 +0000
Files and hashes:         1: IB8EvDjqi0Zn77LVje6PtC4puP0.roa (hash: u2mlhpsMyeaxfE7W43n81b02+Y9NeSYXL6jdArkfvzQ=)
                          2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=)
                          3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: lBFWzuLZ9pqxmvkD2AyV9V+NpPfbZwM/LQ8NKhjSV/w=)
                          4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:bd:61:4e:70:07:b6:d1:d9:2d:4f:f4:09:43:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
        Validity
            Not Before: Jun  6 19:00:32 2025 GMT
            Not After : Jun  7 19:00:32 2025 GMT
        Subject: CN=00e9f3544b296d0f015fd4d2e7cd341adb68b2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:bc:1a:9c:a0:0a:2c:7f:38:4e:af:23:64:
                    00:fe:71:ae:f9:be:f8:c3:1a:26:bf:78:74:f1:fd:
                    8c:d4:e1:a4:06:94:f0:0d:84:42:4a:d2:34:89:ec:
                    a2:33:72:fe:7a:2a:43:bc:37:69:7c:b6:4a:96:96:
                    3b:8f:ad:48:cd:3d:54:31:56:15:9a:05:95:6b:52:
                    f3:b2:74:2c:f0:1d:33:30:91:e5:33:0f:4b:86:65:
                    b7:f8:30:fb:ad:3c:75:cd:c2:a8:7a:5f:89:29:41:
                    8e:dd:ef:7b:05:1f:db:52:cd:71:a8:c8:ed:5a:b3:
                    57:03:09:49:e4:cb:14:61:9a:e3:2d:1b:8b:37:42:
                    90:a1:ae:51:1c:f8:bb:2b:a3:0e:f0:6c:72:01:c9:
                    75:9e:99:33:a9:43:cb:cc:7f:2f:ff:7f:b0:53:af:
                    21:07:36:90:52:cd:cb:87:f3:cd:d8:4f:e2:09:85:
                    a0:ab:40:c1:4d:cf:e8:90:e1:b9:c1:95:07:38:1d:
                    05:f8:2b:49:e5:37:36:a4:62:01:f9:c5:f3:fb:98:
                    8c:fe:29:43:e3:02:dc:af:81:40:68:4b:e2:09:03:
                    61:fe:98:7c:12:80:0a:89:d2:8b:a2:52:ad:46:dd:
                    ea:bb:2f:23:9c:0b:ad:d1:64:05:ba:92:df:8d:04:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:F3:54:4B:29:6D:0F:01:5F:D4:D2:E7:CD:34:1A:DB:68:B2:E0
            X509v3 Authority Key Identifier:
                keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:2f:97:68:f9:98:7c:e1:b7:25:c7:08:f4:eb:b5:34:31:
         58:d4:74:05:a7:c3:23:56:3a:5a:5a:1b:4c:2c:56:ed:20:24:
         aa:c7:9f:79:2d:a9:54:6b:37:78:32:14:e9:64:5d:dd:c7:e9:
         0b:04:d3:ac:44:89:b4:02:d8:c8:71:06:12:70:ff:86:66:8f:
         93:14:d2:68:73:7a:46:2e:89:c0:44:88:27:38:cc:eb:83:d4:
         9a:3c:a3:2c:d9:f7:b9:92:eb:9b:9b:f4:72:90:d7:0a:4f:be:
         6d:29:3e:5f:ff:a3:20:e6:66:3a:ff:a8:d1:f9:b0:c1:09:bf:
         a8:ba:a2:b9:d7:95:35:de:eb:6f:75:43:56:2d:1a:64:eb:fe:
         d6:6e:d8:32:6b:f3:5f:83:ae:d6:80:23:4a:1f:1a:a5:b3:3a:
         58:f5:ee:51:21:36:ec:c7:1c:b5:bc:e4:b5:a9:ef:66:cc:a7:
         70:31:1d:a5:e7:b5:15:43:30:c8:55:e1:b0:0e:26:44:40:4e:
         8c:7b:f5:72:3d:5d:9f:fa:72:d8:56:aa:38:bc:61:44:bd:52:
         b5:1e:24:30:4d:f5:1e:ac:2d:84:73:09:37:9e:0b:52:dd:43:
         42:31:0e:70:3e:71:c2:44:f6:7b:09:3a:a1:a1:e8:a3:9e:4a:
         22:96:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:30 2025 by rpki-client