Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File:                     RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier:          gsmYeqsKCMOwGI5g+uubaacm7B7jhumQSYNFEa13rSY=
Subject key identifier:   EA:91:7B:3D:8D:AE:C7:B8:73:37:39:46:BC:29:2D:86:F5:D0:25:23
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer:       /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial:       019779AFF35E1ED5EE39E169A25B2FC49E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 17:01:03 +0000
Manifest this update:     Mon 16 Jun 2025 17:01:03 +0000
Manifest next update:     Tue 17 Jun 2025 17:01:03 +0000
Files and hashes:         1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: dGFfWwDK4XyYsHH1LDOVjUlm6lxTw4c8njOCkWHGvHw=)
                          2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:af:f3:5e:1e:d5:ee:39:e1:69:a2:5b:2f:c4:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
        Validity
            Not Before: Jun 16 17:01:03 2025 GMT
            Not After : Jun 17 17:01:03 2025 GMT
        Subject: CN=ea917b3d8daec7b873373946bc292d86f5d02523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:87:f4:c4:2c:8a:ec:d2:0f:b6:e9:ef:47:
                    ff:7c:b9:11:a6:f7:18:c3:76:ac:aa:98:cc:ef:ba:
                    12:4e:69:d2:d7:c0:19:bc:cc:21:fd:78:e0:8c:d9:
                    32:70:94:7c:25:f3:13:fa:eb:50:88:9e:b4:df:8a:
                    05:d3:ac:0d:92:cf:e0:ab:48:63:e4:b3:32:6d:fd:
                    0d:27:59:04:69:1c:6d:0e:ba:b4:b1:60:66:35:71:
                    d9:f9:51:f7:6a:56:cc:03:32:d3:74:92:d6:62:fe:
                    2b:46:a9:7e:18:b9:63:bc:2a:06:5a:94:4b:33:e3:
                    d2:8d:50:0c:f6:34:13:61:e9:02:54:22:10:08:66:
                    0e:31:0b:ba:16:4a:9e:aa:ee:dc:5e:a2:6f:74:44:
                    7e:7d:4d:85:47:d9:ab:9e:8c:86:86:88:59:f4:17:
                    1f:b5:5c:ff:4e:e2:50:dd:3a:45:ed:0d:0f:0a:3a:
                    fc:dd:30:d4:74:c6:3b:45:8a:a1:e2:56:ff:85:e2:
                    17:12:3d:8b:8c:d0:66:c0:1d:cd:37:0c:0e:6d:65:
                    9c:89:42:8c:0f:d7:a5:dd:cb:ea:da:49:55:b2:12:
                    c7:6c:82:a2:14:ae:83:a8:66:94:19:4b:4f:6b:8f:
                    a3:55:78:e3:7e:f8:72:a4:a9:d1:6d:95:e2:a9:17:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:7B:3D:8D:AE:C7:B8:73:37:39:46:BC:29:2D:86:F5:D0:25:23
            X509v3 Authority Key Identifier:
                keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:d9:ef:70:05:05:a1:90:86:25:fe:b1:09:5e:bc:e5:2c:
         f0:b3:c7:90:d6:65:32:4c:4f:96:d9:aa:28:01:fc:d1:08:39:
         0b:a3:cd:7b:4f:37:ce:12:9f:53:07:b4:f0:f4:f8:1e:bd:82:
         e5:4c:d5:01:b8:a4:b0:32:59:69:17:1d:01:05:34:41:29:a6:
         47:ee:b0:a3:e4:6d:56:70:fd:30:07:8c:d6:6e:72:5e:8d:fc:
         d3:23:f8:3c:44:a9:52:66:5d:4b:14:5d:32:6a:2c:ff:21:24:
         15:62:4c:07:7a:46:93:fe:7c:81:6e:c3:19:92:0d:2b:2f:79:
         e2:23:6a:ea:0e:c7:b1:de:dc:1d:a0:05:f2:f5:2f:f8:ee:a9:
         f7:00:9f:a9:37:7a:53:13:0d:00:8a:45:1e:cf:3f:31:c5:97:
         56:0f:75:80:6e:2c:24:f0:7c:8b:99:2e:e3:14:93:dd:bb:3e:
         d0:e3:c0:53:7f:63:a9:84:96:1c:28:be:d2:52:68:8d:50:fc:
         f7:e4:c5:c6:17:3b:b5:45:d5:20:08:15:7b:7e:91:b9:84:1c:
         18:3c:6f:56:94:da:62:00:90:ad:3c:d8:ba:98:48:d3:7a:74:
         c2:ef:04:cb:6f:98:f9:87:3a:f1:6c:bd:b3:cd:45:20:2f:10:
         cc:41:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:38:51 2025 by rpki-client