Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File:                     8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier:          mz0NZDrVzTtu0jPNUTxV3vfTguP3GWtCrh28MAuzA7s=
Subject key identifier:   79:4B:C2:CE:23:71:B4:69:67:E7:53:B8:56:FA:E9:D9:C3:87:98:26
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer:       /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial:       01976C61BBF17D66DAFA1059BD7B1A7BDAAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 03:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:33 +0000
Files and hashes:         1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: U7zSD9m65HR5V74tFb8PkdMhNsfjcBS+P3d4S+79puo=)
                          2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:bb:f1:7d:66:da:fa:10:59:bd:7b:1a:7b:da:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
        Validity
            Not Before: Jun 14 03:00:33 2025 GMT
            Not After : Jun 15 03:00:33 2025 GMT
        Subject: CN=794bc2ce2371b46967e753b856fae9d9c3879826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:2e:a5:20:31:3f:51:84:72:11:d4:4b:9a:
                    13:40:d9:79:94:45:ca:8d:3a:7b:4a:fc:a4:be:3f:
                    01:d4:09:2f:4d:07:62:de:d3:a4:80:b2:12:a1:44:
                    08:88:62:8d:55:45:18:db:42:94:cc:84:e6:7c:9d:
                    53:24:51:c4:96:b3:58:45:28:83:2d:b9:b9:e5:3d:
                    7d:1c:a5:39:1e:c7:eb:d9:ac:39:2e:f5:4b:20:5d:
                    47:9b:14:1b:0d:37:a5:58:8f:b4:1d:a5:63:16:1d:
                    18:4c:14:35:a1:76:14:be:95:75:9e:19:9e:0b:02:
                    b9:f2:32:6d:36:5d:c8:24:bd:1e:bb:88:16:1c:eb:
                    73:33:25:1d:12:75:1e:2d:56:86:e2:ee:49:1c:99:
                    58:0a:90:b1:48:8e:24:48:93:83:80:c1:96:25:26:
                    44:93:ae:4f:cc:21:42:b3:cb:2c:99:5d:1e:9d:72:
                    4a:a8:68:93:87:9b:23:25:68:ab:4c:e3:9d:17:af:
                    6f:e8:89:05:71:7a:83:5e:16:56:aa:e9:9b:a6:4e:
                    34:a2:51:b1:0f:dd:d8:77:ce:22:98:ee:35:3c:6c:
                    18:52:86:28:dd:61:9c:75:86:bc:a9:39:05:a1:84:
                    40:1d:a5:1b:71:0f:e2:b2:aa:8c:9c:19:29:13:cf:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:C2:CE:23:71:B4:69:67:E7:53:B8:56:FA:E9:D9:C3:87:98:26
            X509v3 Authority Key Identifier:
                keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:87:1b:e8:ed:e4:3e:59:f8:d2:89:7e:d4:e8:e7:2b:32:a2:
         e1:6d:4a:1e:bb:06:42:bc:07:fb:5e:a1:11:37:11:2a:87:a1:
         e2:4a:81:99:db:92:d1:90:fc:97:a4:e1:93:57:80:d9:22:16:
         a4:54:24:03:3d:36:e1:5e:df:b6:89:95:64:52:44:c3:95:90:
         6c:15:0a:60:89:e2:1e:c3:83:95:2e:3b:5e:c9:9b:57:f6:2a:
         a3:8f:70:c7:d1:a2:d4:41:5e:47:ca:e5:67:33:4f:ba:e5:c8:
         03:db:b7:fe:6c:45:00:1d:46:c6:3d:b8:99:c2:8f:57:6c:92:
         d6:cc:8f:b5:59:68:ce:d5:3d:ba:11:d8:17:07:8c:83:46:a6:
         1c:73:2c:8c:76:10:e2:50:15:17:bd:42:8e:59:73:a6:56:31:
         14:fa:c4:d0:cc:66:3b:7a:4f:35:9a:c3:f4:4c:2d:6a:d2:7a:
         53:00:f9:cb:97:8e:d4:26:d7:c5:d8:0c:e9:08:63:62:06:db:
         06:00:b1:18:2c:5c:4d:8f:6f:28:1a:f8:21:66:a1:1c:60:b9:
         7f:a2:af:ac:18:25:10:23:36:d0:5d:db:f1:51:38:e4:a7:db:
         7b:e5:87:2d:05:b8:51:8f:32:4e:9a:fb:24:e2:1e:0d:e9:7a:
         3a:f2:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:51 2025 by rpki-client