Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File:                     M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier:          vzhoOcCS+UEk9WWSxRLZuKGx/jh0L56g8Lvo9zf/mF8=
Subject key identifier:   D6:19:D6:D8:F8:57:6D:F5:3E:CB:81:6E:0F:1C:8C:A3:DF:57:C7:CC
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer:       /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial:       019775D289C4870FF00ED2BD79AD06ACC0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number:          1597
Signing time:             Sun 15 Jun 2025 23:00:21 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:21 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:21 +0000
Files and hashes:         1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: XFmzt7YI8qZtOBMb8OYK5qbt8eW/GlRvuhmMgDUeW3s=)
                          2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:89:c4:87:0f:f0:0e:d2:bd:79:ad:06:ac:c0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
        Validity
            Not Before: Jun 15 23:00:21 2025 GMT
            Not After : Jun 16 23:00:21 2025 GMT
        Subject: CN=d619d6d8f8576df53ecb816e0f1c8ca3df57c7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:8d:f3:91:bc:78:42:fe:56:ac:8f:5b:60:
                    26:55:a9:84:ed:48:ee:69:a8:ba:08:98:c0:e8:7d:
                    03:d0:6c:ec:0f:9f:e6:f4:ff:b8:06:b8:ab:24:08:
                    55:14:de:55:5a:b5:2c:1e:c9:cd:45:8f:9a:53:43:
                    31:e2:de:e9:f6:c8:6d:6e:a1:c9:6d:13:4b:89:48:
                    bf:cb:ec:a0:d2:2d:4f:bb:e6:d2:21:2b:84:c0:85:
                    d9:34:16:a7:eb:6e:74:06:79:0c:73:55:f9:e9:27:
                    a3:7d:f4:bb:ac:e9:25:73:0e:d8:97:2f:2f:71:a2:
                    70:80:28:96:f7:98:86:1b:85:66:59:2e:61:09:7b:
                    8b:e9:50:0f:73:9b:e8:59:80:3d:4b:ee:a7:d7:a4:
                    73:54:8f:65:2b:34:91:8f:fc:c3:3e:e9:af:df:b8:
                    9a:16:05:16:3f:de:7b:4e:e7:2e:0c:f7:11:6a:f6:
                    6e:a8:9b:99:b3:59:51:cc:81:da:53:3b:6e:b8:d5:
                    9a:1e:21:dd:8a:e0:76:9e:99:03:24:65:81:4c:74:
                    93:99:68:dc:65:f5:fb:bc:24:59:42:cf:c9:39:db:
                    a4:33:27:86:40:10:5f:54:5f:87:4f:f1:62:55:09:
                    58:5e:4c:09:09:88:e5:19:76:22:06:3c:79:9b:1b:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:D6:D8:F8:57:6D:F5:3E:CB:81:6E:0F:1C:8C:A3:DF:57:C7:CC
            X509v3 Authority Key Identifier:
                keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:25:70:1e:9a:cf:83:08:86:d2:82:97:70:ca:da:89:2c:
         a7:15:13:5f:f7:2d:09:28:9a:ab:62:c6:88:02:30:e1:46:64:
         19:9e:0c:43:54:18:84:76:e5:a2:70:48:77:98:de:64:c3:45:
         27:cf:15:00:44:9c:0c:0d:64:3f:2d:0b:58:98:f8:3f:98:c7:
         4a:65:fe:c1:4b:72:b4:18:70:62:26:d8:d6:fd:08:3c:56:da:
         4f:2b:2d:25:d5:bb:fa:7c:f6:b6:75:d3:5e:8b:fe:47:95:96:
         3a:d7:7c:fa:3e:07:02:2e:e3:78:05:46:5a:4e:19:de:31:db:
         ad:97:c7:96:e5:19:03:b6:df:81:4b:d6:26:10:31:24:a4:92:
         57:e1:e4:56:40:11:95:75:90:5f:ca:45:ac:bd:5e:fc:21:00:
         e4:f3:67:b2:55:39:60:ce:3d:2f:25:05:87:8c:46:79:1d:8e:
         20:d8:4b:36:f0:c5:15:fc:5e:a9:fd:e0:e3:b0:50:1e:c0:6f:
         d9:97:25:49:99:cd:90:01:ff:61:b5:10:d7:8b:68:22:55:f7:
         83:de:62:c2:1a:b3:4e:25:d9:14:55:c1:f6:32:b8:46:ee:92:
         e6:39:de:69:12:29:d4:91:34:c6:78:35:03:08:75:e0:74:da:
         b1:bc:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:44:31 2025 by rpki-client