Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File:                     60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier:          VnrgJ9KNMxkDjKbLvbxSyCpty7O493WpL+LViORNkCI=
Subject key identifier:   5F:58:01:86:D4:7E:94:E4:C0:7B:69:05:CC:B8:02:DD:5F:F4:BC:85
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer:       /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial:       0196B6D99E26A2647BCE95905A0825DD3A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 21:00:37 +0000
Manifest this update:     Fri 09 May 2025 21:00:37 +0000
Manifest next update:     Sat 10 May 2025 21:00:37 +0000
Files and hashes:         1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: P0c8L7116fXNlyG6QceVIsgSKRBDoEzm2t/neY+iZ4o=)
                          2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:9e:26:a2:64:7b:ce:95:90:5a:08:25:dd:3a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
        Validity
            Not Before: May  9 21:00:37 2025 GMT
            Not After : May 10 21:00:37 2025 GMT
        Subject: CN=5f580186d47e94e4c07b6905ccb802dd5ff4bc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:b4:b5:2f:04:97:9e:25:d2:29:ea:f0:8c:
                    5e:5d:77:52:37:5b:1e:f4:af:5a:c3:00:91:98:5a:
                    ca:db:eb:7f:e2:0c:85:84:dc:21:a9:d1:f9:83:60:
                    6e:10:51:96:54:cb:10:9c:58:f1:cb:85:88:1e:01:
                    09:d3:ed:ff:96:14:26:c8:62:71:40:ac:8e:a5:56:
                    8f:67:29:32:fc:5b:2b:f2:d0:d8:38:7c:f2:fd:a0:
                    bf:ec:0e:3c:94:51:56:29:71:e7:b3:63:39:58:6b:
                    a9:9f:39:db:36:de:11:6a:bd:74:cc:a1:a8:26:49:
                    ee:db:f6:d5:56:0f:e6:f4:d2:aa:e5:4b:4f:23:d9:
                    95:2c:44:ac:fa:f9:f1:50:4c:84:86:00:30:72:01:
                    20:fa:f8:b7:ad:a2:41:8e:16:6f:cb:45:ae:36:be:
                    1c:aa:ea:f0:21:89:2e:ff:cc:0a:f7:e9:83:bc:57:
                    c6:08:16:4a:b0:ce:92:67:e6:13:32:a7:e1:3d:70:
                    10:fd:e4:59:ac:54:47:e1:1c:9f:1d:79:b1:e0:fc:
                    c4:a2:60:26:55:6d:96:ff:ef:1a:ae:be:f5:f7:6c:
                    17:64:7a:f9:ec:90:5d:82:d3:44:f2:7d:69:7e:5c:
                    55:b0:5c:b3:42:1e:77:c6:99:de:31:71:11:97:4f:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:58:01:86:D4:7E:94:E4:C0:7B:69:05:CC:B8:02:DD:5F:F4:BC:85
            X509v3 Authority Key Identifier:
                keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:50:4a:55:27:15:0d:2a:f7:5d:50:a0:0c:5d:d8:6f:d4:
         8e:5c:9f:00:19:b7:06:c5:84:37:e4:d8:ca:bb:f2:2b:b8:f5:
         4e:d2:66:d0:cc:99:ba:ce:36:2a:3c:d5:d4:d5:86:35:13:30:
         be:91:0e:b9:77:4a:63:eb:f2:fd:ca:dc:7b:9c:bb:cd:78:8e:
         7b:fc:9d:4f:77:7d:15:b4:c1:32:49:e4:27:e9:dd:54:fb:8d:
         10:10:01:d0:fa:f1:b8:cb:e9:3d:f4:27:cd:d4:b3:72:6d:53:
         fa:61:ba:55:87:eb:05:96:90:83:ce:c3:e1:6f:3e:2d:4d:b6:
         86:67:5c:ff:08:aa:e2:50:82:b1:1a:1a:df:55:6a:0f:d3:8b:
         2c:66:53:ea:1a:d3:d7:02:db:17:b8:ee:94:3b:2e:48:e9:34:
         68:50:c6:a2:71:16:c5:90:a8:85:e7:6e:ac:a6:7a:c3:1e:ef:
         65:4e:05:c6:93:c8:6e:dc:03:8a:2b:3a:91:f3:6e:2f:70:d5:
         ce:e3:be:c6:aa:04:38:3d:2f:fe:10:13:21:70:46:eb:07:ca:
         a0:ac:5b:83:4e:65:0c:b5:04:be:a9:bd:77:ef:27:dd:b2:b3:
         f9:b2:fa:9a:36:48:b2:ac:27:66:2b:68:3f:e8:81:8b:4e:81:
         11:a8:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:55:16 2025 by rpki-client