Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File:                     _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier:          n4i0/N4pvP3XrWd0zHNjn2MrVcMhOQy7BhpMMV8xRXg=
Subject key identifier:   C9:B1:C8:A6:31:79:1C:3E:D4:3A:78:0D:BB:16:97:74:9D:78:46:E7
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer:       /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial:       0197715147DEB1D68F60D545439469DD7D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number:          0317
Signing time:             Sun 15 Jun 2025 02:00:41 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:41 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:41 +0000
Files and hashes:         1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
                          2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: ScrTQKYdoz1UG22hMrh55SFcP8MuvW1z7lltM7OD71k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:47:de:b1:d6:8f:60:d5:45:43:94:69:dd:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
        Validity
            Not Before: Jun 15 02:00:41 2025 GMT
            Not After : Jun 16 02:00:41 2025 GMT
        Subject: CN=c9b1c8a631791c3ed43a780dbb1697749d7846e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:75:3a:cb:e7:00:ce:1c:ed:cb:ac:40:3d:
                    5a:54:0e:78:55:96:b2:e0:08:ca:8f:41:d1:37:a3:
                    57:77:8c:cd:94:54:b9:42:e9:6d:ac:18:a4:2b:ad:
                    51:c5:1a:86:a1:7a:4d:2e:5e:99:8e:36:eb:8b:a2:
                    97:49:8d:cd:37:29:e0:67:9d:80:f2:3b:e7:5c:cb:
                    e3:8a:1d:0f:7d:fa:bd:f4:af:92:a8:ec:36:bf:8e:
                    7b:fa:72:32:ea:f3:43:66:94:4c:ff:d7:9f:d3:3c:
                    12:f9:a8:dc:1c:17:c7:24:2c:9b:26:fe:1f:cd:cd:
                    50:2f:7a:88:aa:ad:a7:2e:88:91:1f:eb:55:1c:3c:
                    06:be:1e:f0:74:60:53:fd:7a:d9:b0:4f:37:22:cb:
                    85:93:9b:9c:05:0a:a1:d6:c0:f9:c0:cd:0b:75:b1:
                    9c:83:12:c2:76:1e:dd:ac:82:23:03:72:2e:e8:b2:
                    40:99:35:07:b3:cc:6f:a3:29:0d:9f:fc:d5:91:30:
                    25:9d:1e:4d:b3:4d:f9:d6:c5:a1:6b:eb:57:bb:d1:
                    c9:56:f3:05:c9:83:2b:84:b7:89:9a:76:f4:55:ea:
                    d9:a3:66:ff:e9:6d:51:d6:4d:5f:47:a1:14:11:69:
                    67:06:38:be:6e:65:05:cf:92:1d:af:23:b7:4f:4f:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:C8:A6:31:79:1C:3E:D4:3A:78:0D:BB:16:97:74:9D:78:46:E7
            X509v3 Authority Key Identifier:
                keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:a1:e3:8e:a5:91:db:e1:15:9a:24:b7:ab:44:4d:bb:1e:
         58:3c:13:2d:c6:41:c5:97:8f:75:3e:48:f1:ec:b8:e7:d7:c0:
         d3:03:84:de:16:f8:04:0b:f9:49:57:ac:4b:5e:13:49:93:bd:
         5d:32:be:ef:45:4f:a4:4f:dd:76:45:f7:79:5c:c7:6d:d2:03:
         60:56:f0:47:45:43:76:2a:ce:b1:e1:e5:69:ce:12:46:99:ed:
         6b:b0:08:47:6b:58:59:15:29:bc:95:44:62:98:04:e4:85:b4:
         e4:b0:8a:c5:7a:f3:b6:be:9f:f9:70:4b:6c:ea:82:5b:8f:43:
         fb:78:8a:b4:bd:d1:e9:88:b4:89:4f:9c:51:1a:5f:df:74:fa:
         b8:79:a3:4c:9a:51:8a:ae:c9:4d:e7:3c:aa:78:c9:74:2e:82:
         31:20:0e:00:01:e1:e1:c6:df:dc:97:4d:10:fe:97:f2:6e:fc:
         83:7b:a1:3d:66:a8:e2:25:32:aa:5f:5d:d6:3c:31:b6:89:18:
         be:d1:d1:b8:00:ce:32:f3:2d:8b:c8:64:9d:e1:6a:d2:09:25:
         0a:b6:5c:95:c9:30:70:24:3e:1e:40:91:d6:fb:ce:6b:f7:d0:
         c0:47:89:f2:86:8d:52:d9:d1:e7:72:60:44:15:22:50:7f:6f:
         3b:76:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:06 2025 by rpki-client