Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
File:                     1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json)
Hash identifier:          lSbB9AcisGc9KAG7+Fz0M6ioA/v06lRJ7RXOq7DkEcw=
Subject key identifier:   DC:F7:EB:3F:70:BC:F9:B7:43:84:65:A8:E8:4B:05:10:59:37:B6:C5
Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21
Certificate issuer:       /CN=f80aef4640437f2307f79871bfb632bb8bddad21
Certificate serial:       0196AF1FEE0EBD7B047E8FF6C88C7048ABDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
Manifest number:          1C
Signing time:             Thu 08 May 2025 09:00:27 +0000
Manifest this update:     Thu 08 May 2025 09:00:27 +0000
Manifest next update:     Fri 09 May 2025 09:00:27 +0000
Files and hashes:         1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: 3VrzDpwtWDGR0IgNTY158fGpy0oovKuFrBhz4RuvT4s=)
                          2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:1f:ee:0e:bd:7b:04:7e:8f:f6:c8:8c:70:48:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21
        Validity
            Not Before: May  8 09:00:27 2025 GMT
            Not After : May  9 09:00:27 2025 GMT
        Subject: CN=dcf7eb3f70bcf9b7438465a8e84b05105937b6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:eb:32:0b:e1:f1:97:c6:6f:af:87:9b:53:
                    6b:47:f3:91:81:3f:38:0f:1b:5c:9a:cc:2c:0f:c8:
                    d6:24:77:b4:6c:e4:b0:c6:12:e3:a0:1b:ab:fe:a9:
                    ab:c7:19:04:70:e5:e7:ea:6f:9f:b5:32:bb:7a:c5:
                    31:e1:91:7d:4e:74:b4:e6:e5:76:8e:35:13:b2:62:
                    7e:ac:46:d6:53:05:5d:7f:76:8e:cb:01:c2:02:5d:
                    a6:1e:dd:9a:79:8b:d6:c0:ff:67:0b:26:96:5a:0c:
                    3c:33:13:3c:b6:91:db:7b:bd:e1:42:bc:c1:ae:53:
                    70:c4:d6:a6:9a:b0:69:ac:78:84:b1:59:4f:5c:8b:
                    08:b8:f5:e1:92:f6:73:17:40:13:c0:3a:ba:9f:cc:
                    87:62:ae:50:bd:3b:8a:e5:e0:c3:b7:90:0e:3d:87:
                    70:99:79:b1:e2:61:bc:17:a9:4d:16:4d:8a:49:a0:
                    d2:8a:4b:23:a9:78:47:41:af:b8:e4:70:6e:f3:fe:
                    f8:de:d5:e1:71:2f:8e:c2:11:70:f5:92:13:00:c6:
                    08:9e:7a:3e:c6:66:70:cf:11:a8:3a:48:d8:a3:56:
                    80:16:04:69:60:43:e3:6c:46:b9:b8:c7:ae:d6:51:
                    61:e7:a9:2c:f2:3b:ff:f0:2c:51:ed:fe:7a:7b:95:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:EB:3F:70:BC:F9:B7:43:84:65:A8:E8:4B:05:10:59:37:B6:C5
            X509v3 Authority Key Identifier:
                keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:47:db:d6:e7:91:de:10:29:e4:54:db:ad:4d:83:e8:65:84:
         12:37:d1:a6:b6:af:76:bb:78:15:ad:d3:e8:4f:15:86:3d:ad:
         3f:c5:c5:24:ed:5a:69:c7:28:fc:c1:c7:99:b2:d3:ad:49:c5:
         42:07:07:7e:cd:8d:40:f1:e2:0e:2c:8f:4c:1f:43:23:91:f4:
         b5:53:cb:67:48:c3:4b:e9:86:37:d0:40:4a:a1:c7:c7:d9:c6:
         d7:0f:95:05:62:00:96:5c:66:34:4b:19:af:08:09:66:7d:83:
         98:e1:07:c3:3e:7d:45:74:5c:8f:e4:70:a3:61:5a:6d:0c:b6:
         5d:98:44:e4:1e:e5:bd:0e:f2:c3:a5:12:f4:fa:92:09:c1:14:
         e4:1e:b3:93:93:59:77:31:e6:3d:1e:2b:87:31:54:38:f8:a5:
         98:ac:02:e7:64:26:47:aa:00:95:82:0a:f2:4e:11:3d:2b:09:
         81:38:f2:e1:f5:af:6b:4a:5f:f6:64:ae:4e:24:31:07:ca:34:
         65:55:72:6d:17:0e:2d:f8:b0:6c:10:fc:42:98:0a:4b:71:63:
         2b:89:20:3b:47:85:1c:29:0e:dd:46:ef:08:03:ea:26:2f:f5:
         02:ed:30:f7:7b:93:fe:5d:a8:1d:44:9d:d4:0a:35:4c:ba:42:
         72:71:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:29:08 2025 by rpki-client