Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File:                     VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier:          nvBM0EEVm8JxfYyL2oYNfVx+aK8EH/zLVrEUgqF4doE=
Subject key identifier:   EF:D6:79:51:5A:D2:FD:29:29:B4:4F:D4:77:10:D2:64:75:DB:FD:4B
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer:       /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial:       01976E8720BFFA8318FF6C280463C2809A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 13:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:38 +0000
Files and hashes:         1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: 6lkuAJRfdwEeF63bve80iVzQ8KHWzrhivJGPNyyH5OY=)
                          2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:20:bf:fa:83:18:ff:6c:28:04:63:c2:80:9a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
        Validity
            Not Before: Jun 14 13:00:38 2025 GMT
            Not After : Jun 15 13:00:38 2025 GMT
        Subject: CN=efd679515ad2fd2929b44fd47710d26475dbfd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:14:e3:10:e4:30:7a:7a:78:69:c4:cf:62:
                    4f:e1:46:02:60:32:19:67:12:40:a3:65:27:ea:b4:
                    03:c5:cb:e3:bb:62:25:13:47:4f:58:68:84:ff:36:
                    71:ed:e9:ee:9d:7d:03:8e:da:af:07:66:ec:fe:c3:
                    d3:d1:10:86:43:b1:a2:14:ef:71:19:eb:0f:4b:f0:
                    ad:60:a9:21:5b:aa:19:87:b8:81:ea:a4:10:1c:2c:
                    ce:f7:08:5b:0d:e3:e6:ed:b5:c3:9f:d6:ec:97:a4:
                    da:cc:d2:eb:66:a0:7a:16:20:f4:58:8b:aa:aa:7d:
                    e4:64:80:b5:d2:eb:fc:06:ce:dd:90:24:f2:4e:8e:
                    9b:72:a3:27:12:c6:5f:b8:a1:b7:ed:50:ba:b9:0b:
                    08:36:9b:25:99:e7:a8:54:52:d1:0b:9d:57:53:08:
                    f3:1d:22:2e:ac:3b:ce:86:db:7a:9f:28:1d:65:a7:
                    fd:67:32:57:2c:34:ed:54:51:95:c0:39:c9:de:2e:
                    92:e2:a3:67:d0:99:4c:19:f7:ea:80:f0:a4:ad:84:
                    04:14:f1:e8:37:1c:aa:1a:7e:1f:de:ce:eb:ec:7f:
                    4a:22:e7:73:73:a0:7b:70:0d:a6:80:00:cd:22:85:
                    bc:30:20:62:6f:35:90:de:66:34:dd:3e:e1:75:04:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:79:51:5A:D2:FD:29:29:B4:4F:D4:77:10:D2:64:75:DB:FD:4B
            X509v3 Authority Key Identifier:
                keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:da:16:d3:5f:25:db:74:ad:6b:f6:ef:6d:d9:c9:52:c1:
         fe:7e:8b:f7:4f:30:f5:93:10:ab:2f:72:67:82:bc:0e:38:13:
         fb:70:f2:bd:16:29:fc:d8:6f:f8:e1:af:ef:2a:07:26:83:68:
         97:12:6f:5b:ab:cc:ea:e2:06:92:73:31:17:81:39:6a:b4:66:
         5b:e6:20:08:65:49:a0:c1:6c:28:ac:2f:ba:85:e4:7c:01:01:
         77:16:bb:8c:4e:a2:ac:01:ca:5f:c8:3b:53:5e:5e:88:7e:b8:
         70:d7:85:bc:7e:1c:ff:2e:68:bb:6f:ea:7d:95:e8:cf:5f:15:
         a0:ba:54:d1:c9:28:23:c6:8a:1c:5e:ae:b5:43:a2:48:fd:89:
         69:6c:c4:db:ae:f0:e9:fd:3a:35:83:26:c1:35:d0:29:01:50:
         e6:83:da:10:5a:c8:8f:26:4c:f1:c2:90:05:44:af:43:77:f1:
         c6:6e:aa:eb:ce:31:a0:b8:72:e5:9b:77:ca:0c:4f:75:f3:90:
         8c:cc:94:25:20:a3:ea:af:32:df:d7:69:d3:0b:cf:0a:4e:ae:
         f3:e0:3b:c8:39:95:8c:13:81:1d:1d:30:fe:a7:da:ef:10:6b:
         99:d5:5b:95:11:bc:f3:1d:66:2f:4e:1b:2a:b5:3a:1d:55:87:
         55:de:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:46 2025 by rpki-client