Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File:                     1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier:          yVL7iqHrhfRI6GRH2rWSVkb13KyHnNfOVi0DxsvGgKs=
Subject key identifier:   E8:5B:CB:76:1F:3E:01:2C:AC:03:7D:F2:E7:83:55:F8:90:FD:87:DA
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       0196BF6F3C57A0C790BBA06C8C6781CC025F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 13:01:00 +0000
Manifest this update:     Sun 11 May 2025 13:01:00 +0000
Manifest next update:     Mon 12 May 2025 13:01:00 +0000
Files and hashes:         1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: zBcNhT70lh7c7tCK/Se2THVKKs8uWf+pvUlviE5v6PQ=)
                          2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:3c:57:a0:c7:90:bb:a0:6c:8c:67:81:cc:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: May 11 13:01:00 2025 GMT
            Not After : May 12 13:01:00 2025 GMT
        Subject: CN=e85bcb761f3e012cac037df2e78355f890fd87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:b6:d8:67:15:1c:7b:ee:e2:2d:43:b2:31:
                    32:1e:ef:8a:c0:39:05:fb:5a:dc:8a:ce:60:77:ac:
                    74:88:9d:01:86:72:25:89:13:17:7a:cb:5f:c6:e7:
                    42:74:5e:4c:04:c8:49:f7:4d:b6:ef:ea:ee:fa:a1:
                    3e:fe:00:cc:4c:1e:36:78:65:9c:5b:7a:1a:99:c4:
                    b6:1e:2d:d7:65:43:ab:de:5a:30:0a:e4:79:55:ff:
                    9e:bd:fc:f9:30:7d:ba:33:78:76:76:b4:84:86:b0:
                    9b:d8:8a:27:dd:fb:f0:82:4f:53:90:e9:3b:51:5e:
                    31:7b:fe:5a:86:65:42:57:1f:c2:58:4a:c4:4d:e1:
                    52:3a:38:ac:d2:bf:58:3d:11:a8:9a:7a:0c:fa:4b:
                    7e:bb:04:b4:a3:de:b6:f2:fb:e6:81:0e:23:c8:9f:
                    92:5b:9b:66:cb:71:ec:e4:19:c5:bc:51:ec:73:ee:
                    5d:c2:01:e6:36:19:b4:f5:bf:82:48:a4:e0:27:04:
                    49:b7:3a:b6:c6:f9:03:da:8d:48:e3:f3:f6:1c:23:
                    b9:f4:0b:ba:37:12:fd:00:8f:15:fd:fd:ec:e4:d2:
                    a7:13:44:e4:c6:6e:71:36:19:7b:42:16:13:70:80:
                    ac:d9:4c:c0:21:30:1f:2a:fb:b0:cf:aa:ba:b0:4f:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:CB:76:1F:3E:01:2C:AC:03:7D:F2:E7:83:55:F8:90:FD:87:DA
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:89:7c:10:5f:e8:7d:d6:30:17:90:5e:ce:f0:18:03:bd:
         0d:fa:e3:34:c8:d2:8c:79:7e:5c:72:cd:47:04:84:7f:5a:96:
         6e:9e:95:4d:73:46:32:57:6a:e2:54:e8:16:6a:8c:a5:51:9a:
         ca:5d:f5:02:d6:01:42:28:2c:57:89:73:8a:57:98:bf:c0:b8:
         c5:28:c7:50:9e:5d:33:2a:2c:7e:36:a2:c4:e0:a2:ab:59:33:
         c0:d9:e6:9f:d9:ae:f3:83:28:ee:05:f3:f1:09:08:3b:e0:0f:
         66:42:2b:29:54:d4:4c:02:bc:5a:10:a6:f6:33:63:f9:88:1c:
         e2:46:db:65:90:da:71:42:dd:5a:96:0b:88:37:50:cb:0f:6c:
         80:b3:e8:80:9f:8a:d9:59:52:9a:50:da:04:2d:0b:b1:07:e3:
         9a:8f:b3:19:a8:b8:aa:43:04:2d:ea:54:e2:76:27:b1:64:5d:
         7a:a3:8d:c7:6d:67:99:16:3f:28:d7:e1:ba:7c:db:a7:76:68:
         cf:69:91:34:69:09:05:cf:d4:49:a8:35:7d:1d:8e:d1:e7:55:
         26:a2:62:db:8e:c0:e4:9c:d1:d9:da:e4:54:af:e4:dd:0d:3e:
         32:f4:22:f2:2b:b9:20:6a:3b:93:e2:28:6e:e6:fe:7e:82:9d:
         ae:55:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:14:08 2025 by rpki-client