Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File:                     C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier:          ruFoa4lW8aHHPzZgUz+2nN7zgOl7/t+BX4Y4lUkz1u8=
Subject key identifier:   61:7A:E2:B6:3E:9D:B8:86:C1:5A:06:80:9A:06:B1:64:26:03:A0:18
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer:       /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial:       019776AEB1EF918274B0401F5EC1EF8AF0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 03:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:49 +0000
Files and hashes:         1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: HsbUSR63Kl6/TtEgXfongrQahKK+gkeG7qple7AO6A0=)
                          2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
                          3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:b1:ef:91:82:74:b0:40:1f:5e:c1:ef:8a:f0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
        Validity
            Not Before: Jun 16 03:00:49 2025 GMT
            Not After : Jun 17 03:00:49 2025 GMT
        Subject: CN=617ae2b63e9db886c15a06809a06b1642603a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:5a:f9:a5:62:f7:cd:bc:36:70:b3:12:2f:
                    fe:9c:0a:5c:a4:aa:94:ed:30:c2:d4:59:51:99:01:
                    42:b3:7f:67:94:b6:8e:e4:13:2a:3f:6b:fb:bb:36:
                    d3:3a:ed:dd:b5:80:b5:fd:a1:0a:ff:e8:e9:68:b3:
                    cb:d1:7c:b2:89:3b:84:7f:89:cd:86:c2:2a:f1:79:
                    71:48:b0:00:62:e8:bc:3a:5a:74:83:57:97:13:52:
                    78:77:42:86:0b:b8:0e:20:6b:4c:23:1f:48:28:6c:
                    2c:54:03:a3:e7:6e:4f:cd:9f:6f:3e:72:7d:a5:d3:
                    bd:66:45:64:ad:96:c1:d1:0d:a1:56:06:9b:f6:03:
                    13:91:26:d2:2b:f1:3a:d9:46:f9:47:fc:60:41:6e:
                    f8:72:db:24:0f:0e:c8:31:32:2e:20:79:eb:52:5a:
                    cd:d7:68:69:76:d0:fa:e4:15:fe:0c:52:69:52:7a:
                    7f:ae:50:91:66:c7:7b:45:a9:58:d7:98:72:3f:aa:
                    c9:f8:90:06:3a:e0:b4:cd:a1:59:dd:64:6b:3d:90:
                    48:4a:3a:8c:9d:2a:5a:8e:7a:ef:9c:b3:02:b9:c1:
                    6a:ad:82:72:aa:06:fc:46:1e:b1:35:f1:7f:51:cd:
                    bb:27:ad:50:4a:7a:87:a5:84:ec:11:8e:d7:06:78:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:E2:B6:3E:9D:B8:86:C1:5A:06:80:9A:06:B1:64:26:03:A0:18
            X509v3 Authority Key Identifier:
                keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:80:fc:01:2b:ed:83:ca:e6:94:71:42:fe:f7:11:d3:94:cc:
         6b:5c:1d:f8:5a:0f:1d:81:b8:b2:95:08:da:c6:d7:e4:13:28:
         6f:9b:93:58:cf:c3:89:f8:50:2b:25:16:cc:70:07:ec:88:3b:
         6f:17:5a:4f:ff:01:da:5a:2d:cd:78:96:f4:95:c2:8d:82:15:
         64:20:29:d4:69:03:00:a5:b4:49:f5:be:f5:f6:00:83:ec:70:
         2e:0a:fa:73:b8:71:e0:d6:da:23:30:d0:8a:47:59:fc:4b:c4:
         87:67:ba:82:0f:1d:4d:df:ca:fe:a9:7d:fd:51:80:05:c3:e0:
         db:94:44:46:92:57:80:10:96:84:4e:2b:30:b6:2a:33:4f:bc:
         84:ea:b0:2b:da:70:a4:a5:f5:fa:a7:5a:e5:ca:18:8e:0f:03:
         9c:90:71:47:63:cb:9e:dd:c6:c0:ca:f7:cc:ca:02:90:52:c5:
         fe:53:a2:c6:3e:2c:99:ec:fb:7f:f4:a0:59:d0:03:b6:c3:45:
         0a:02:cd:c4:01:91:06:21:dc:ab:67:ac:d5:c9:94:1e:56:29:
         d2:97:62:c9:a8:d2:e1:e8:a3:94:49:ea:35:5c:aa:ad:b7:e9:
         ae:da:1b:d3:d6:fa:a1:49:4b:79:ca:58:2b:ed:a3:a8:64:57:
         8d:7d:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:16:54 2025 by rpki-client