Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          9lR4oCYkKyeblq7Rcc6UwVdX5H6yRm5BLH5mATr4PHk=
Subject key identifier:   99:4A:17:A8:F7:FB:F9:33:8D:FC:F2:4E:AC:97:85:8E:8E:0F:5D:C6
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       0197B7B2FE91D9F952B06410BFF5788A4733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1586
Signing time:             Sat 28 Jun 2025 18:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:50 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: NkPTrVk8tr72SFJBELGt6IKA/CTLQhHHiprWHltq2cw=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:fe:91:d9:f9:52:b0:64:10:bf:f5:78:8a:47:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jun 28 18:00:50 2025 GMT
            Not After : Jun 29 18:00:50 2025 GMT
        Subject: CN=994a17a8f7fbf9338dfcf24eac97858e8e0f5dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:64:9a:d8:44:f8:f2:89:9c:d6:3d:aa:f7:
                    0f:ca:d4:8b:1b:b9:6a:c4:41:9b:52:1c:6a:bc:b9:
                    33:ad:6f:4b:90:8a:55:02:48:10:6b:5a:63:46:9d:
                    25:40:e5:5f:5e:63:61:b5:ee:48:60:24:c3:db:34:
                    8c:b5:06:18:cc:a6:92:a8:5b:38:08:91:1b:61:2b:
                    53:10:1e:dc:2d:57:b7:39:45:f3:fd:e3:d4:cc:5d:
                    7e:90:02:6d:3b:6a:73:a0:f0:2f:c4:7a:94:ef:40:
                    e6:c9:d1:3d:1b:69:4b:96:5d:69:db:c9:cc:86:f2:
                    97:f6:14:db:0d:83:dc:de:4f:a6:26:b6:a8:32:4e:
                    2d:36:92:ce:1e:2b:7c:7e:90:20:ed:7b:47:10:7c:
                    44:43:c1:34:80:e1:fc:e2:5f:62:66:ac:d8:b8:89:
                    7e:aa:03:5f:34:2c:ee:39:b3:e3:78:aa:d6:10:d4:
                    a6:73:73:82:bb:f3:42:5a:2b:c6:22:0d:63:01:bc:
                    c0:4f:c0:4b:df:99:71:ae:5e:c9:80:ad:98:81:55:
                    f9:6b:36:8d:d3:2b:f3:4f:8f:8d:e6:df:90:06:20:
                    93:29:9b:f5:84:5c:59:8b:c2:b6:bd:e5:f3:d0:f1:
                    f2:e8:68:17:2a:34:e7:a2:51:95:a5:77:1f:6a:a6:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:17:A8:F7:FB:F9:33:8D:FC:F2:4E:AC:97:85:8E:8E:0F:5D:C6
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:af:c9:68:01:7d:c4:1f:13:b9:3d:8d:ce:11:b0:89:72:
         c2:ae:7e:bb:76:b3:c8:e8:b8:1a:3d:67:87:7c:46:ef:43:e4:
         21:64:d3:68:f0:92:96:b0:7a:5c:57:01:1f:ea:de:70:e1:80:
         eb:ae:1e:42:a6:23:f1:9a:e6:65:2c:78:79:5a:e0:1d:b6:52:
         d7:49:d7:9d:1c:ca:45:c2:f6:d9:ba:31:b4:c6:95:0c:1d:d9:
         f0:7e:a2:17:f6:ab:98:6c:2d:6a:d4:a3:d1:10:60:65:3b:9a:
         87:fb:ae:14:28:84:5b:c5:3f:92:44:c0:78:e1:05:36:a3:f9:
         5f:ad:5f:4c:0b:0a:42:6c:c4:cc:85:00:4c:6b:37:59:b0:a9:
         13:08:4f:d0:b0:e9:11:9f:93:a6:85:07:35:44:5f:45:e4:69:
         45:af:51:00:37:18:16:30:9e:a3:8c:96:c3:56:4e:6f:02:8c:
         24:88:30:63:81:47:37:26:ae:86:40:20:fd:65:d9:9f:91:21:
         1d:0e:e9:35:83:0c:65:41:94:0f:e0:b6:2e:2d:cc:2d:e0:f7:
         2e:56:a5:a0:12:64:67:12:09:61:94:d7:04:83:6e:9c:cb:0c:
         07:8e:dc:ae:b0:6b:ab:eb:9f:30:b4:56:69:6d:a4:aa:6f:45:
         13:83:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:31 2025 by rpki-client