Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File:                     B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier:          OazzliyCTZCwuUtrpkjUzbpXY67GQ71FPJqeuz2RQBU=
Subject key identifier:   15:8B:6F:3C:D0:A4:73:7A:9C:2E:02:8C:10:A8:60:7A:E1:38:18:A1
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer:       /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial:       019779AFACE587CD0856B1C32AE31F3A31EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number:          1597
Signing time:             Mon 16 Jun 2025 17:00:45 +0000
Manifest this update:     Mon 16 Jun 2025 17:00:45 +0000
Manifest next update:     Tue 17 Jun 2025 17:00:45 +0000
Files and hashes:         1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: Cik8POK1NJzCRlyrLLXMApUo3tpEwIXcgpRzIopIF3Y=)
                          2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:af:ac:e5:87:cd:08:56:b1:c3:2a:e3:1f:3a:31:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
        Validity
            Not Before: Jun 16 17:00:45 2025 GMT
            Not After : Jun 17 17:00:45 2025 GMT
        Subject: CN=158b6f3cd0a4737a9c2e028c10a8607ae13818a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:37:79:13:f8:fe:ab:95:14:b6:24:f6:8e:
                    68:b8:a2:77:3e:a9:8c:ec:7f:06:56:d1:c4:98:1e:
                    1c:05:2f:3e:7f:bc:9a:7f:43:ba:3c:0e:7a:e6:69:
                    33:c9:73:b0:d4:27:52:0d:b4:b5:3f:f1:7b:5d:91:
                    ed:0f:fc:73:2b:25:41:33:4a:34:57:cd:4e:9a:a4:
                    a4:e2:f5:0c:e0:8a:d8:2a:7e:24:05:42:62:f7:76:
                    13:15:7f:8f:2a:fd:24:cb:c0:c9:10:a5:e2:15:a4:
                    df:20:8b:85:e8:d1:e5:ae:4d:e1:82:a5:19:11:fe:
                    8f:a6:c5:aa:b1:94:2b:de:0a:8f:65:cc:7e:ef:17:
                    a4:6d:64:7d:ba:7f:18:fc:22:79:55:7c:d0:80:44:
                    c6:16:1e:3b:e2:44:69:74:19:11:a0:3c:f8:13:45:
                    9f:e5:87:3a:7d:fd:43:a0:7e:b7:4c:25:e8:01:d7:
                    32:be:c7:12:4c:8a:87:1a:5e:25:ff:99:10:d9:0e:
                    3c:f6:a8:6e:94:b0:ab:8b:c9:21:a8:bc:8b:66:d1:
                    e4:1e:10:7c:74:a3:ff:cd:be:71:1c:f0:36:51:04:
                    0a:13:77:e4:53:cf:d8:93:f9:96:95:ff:e3:00:bf:
                    3f:85:b4:58:a0:ea:0f:de:22:0f:50:67:d3:34:eb:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:6F:3C:D0:A4:73:7A:9C:2E:02:8C:10:A8:60:7A:E1:38:18:A1
            X509v3 Authority Key Identifier:
                keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:df:8b:1a:92:2c:54:f2:18:6f:a5:34:9e:75:f2:11:04:e6:
         79:94:a4:04:08:11:c1:9c:46:aa:6a:71:17:7d:3a:fe:c3:01:
         97:72:3a:f2:b5:f2:07:b4:e9:fb:dc:f0:f9:fb:1f:78:a9:45:
         ed:74:0e:99:ea:c1:49:32:80:00:8f:7f:d3:44:4d:85:98:e3:
         9c:88:13:9e:ef:aa:97:c2:6c:5c:0e:38:c4:0f:ac:f8:ef:f9:
         0b:e0:b3:b3:3a:40:45:36:ab:94:db:56:58:57:2f:45:f5:c1:
         e7:c5:37:56:71:4a:c7:52:77:99:4c:16:2f:97:d4:c7:92:ea:
         29:fa:6f:5b:31:4f:13:27:1a:94:20:5d:f3:c9:3e:13:9e:b9:
         9b:00:37:e0:3b:58:c5:71:c1:8d:8b:21:a0:09:ca:8d:c7:fc:
         ec:30:70:c2:cd:22:01:2e:46:e9:99:0a:8f:88:7e:dd:42:fe:
         3f:04:17:4a:54:b1:6a:fd:bd:db:78:13:13:c0:a5:6c:63:42:
         e3:f9:a8:83:b4:64:9b:6a:cc:74:71:62:22:55:1c:ec:c3:fb:
         2f:5f:1e:da:14:91:21:25:ee:38:c3:93:ce:5d:6b:91:00:ea:
         dc:e8:d2:d8:ad:65:b1:44:2a:37:15:fb:e4:e0:c1:63:85:6f:
         4e:27:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:16:15 2025 by rpki-client