Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File:                     dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier:          MxbmeG6ygaHKvCwV3A/C43UxlYso1/xY5Qq2LEnRmio=
Subject key identifier:   87:1D:B7:0A:F4:7C:0C:A1:A3:F0:1E:EC:E8:FA:78:8C:2E:D1:7A:70
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer:       /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial:       0196A57831F1B748ACF121F430A21B371FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 12:00:39 +0000
Manifest this update:     Tue 06 May 2025 12:00:39 +0000
Manifest next update:     Wed 07 May 2025 12:00:39 +0000
Files and hashes:         1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: ptYJQNu/1wVFV/Kfswgtno0dsPe/gXBi11z3ti2ZIWk=)
                          2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:78:31:f1:b7:48:ac:f1:21:f4:30:a2:1b:37:1f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
        Validity
            Not Before: May  6 12:00:39 2025 GMT
            Not After : May  7 12:00:39 2025 GMT
        Subject: CN=871db70af47c0ca1a3f01eece8fa788c2ed17a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:94:c7:38:5f:da:2c:2a:20:be:4a:22:d5:
                    33:50:7a:64:5a:8f:5c:80:a5:45:eb:4e:c2:00:d9:
                    d1:52:ac:3c:ff:90:25:86:af:c0:97:f7:58:3e:2e:
                    ee:a2:c7:bc:e3:6f:f6:84:e6:85:c1:57:39:22:12:
                    63:ca:37:b1:47:76:1c:5f:0a:ee:24:29:a3:8c:2f:
                    30:90:bc:da:2e:1c:1f:d1:ce:09:1e:fe:7d:b6:f6:
                    60:52:dd:00:05:d9:18:b2:99:66:eb:d3:71:77:c5:
                    66:dd:0d:85:4d:01:82:aa:42:53:9b:43:0c:4e:b8:
                    2d:e1:c5:37:f5:b3:d9:a9:e0:03:1e:38:ee:2a:fe:
                    f0:b1:3c:25:08:56:4c:cb:9e:94:6b:4f:b0:0a:58:
                    cb:05:bc:ee:6f:73:c5:48:66:e5:fb:b2:b3:62:51:
                    eb:9b:74:06:23:51:b4:5f:cf:e8:83:e8:71:ac:3c:
                    18:92:96:dc:a7:f6:9e:07:9b:9a:75:ac:3b:05:eb:
                    d8:d4:17:68:c5:0c:70:e6:7e:37:97:d1:33:ea:cc:
                    47:1e:3b:75:0d:7e:16:f0:1c:ec:7c:d3:e7:48:86:
                    78:84:50:2e:0c:cc:b3:23:09:53:2a:3a:3a:d2:a3:
                    4f:ed:18:27:ea:3a:7c:3d:ed:3e:b3:24:91:f7:66:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1D:B7:0A:F4:7C:0C:A1:A3:F0:1E:EC:E8:FA:78:8C:2E:D1:7A:70
            X509v3 Authority Key Identifier:
                keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:2b:9f:bf:e5:a9:e8:bc:ca:e0:66:03:7d:b3:6f:cd:fe:
         ac:4e:09:d1:83:03:3f:58:69:ba:a7:5d:73:81:6d:33:e0:5e:
         4f:53:e4:f8:ec:89:30:01:0c:54:f7:ea:72:e6:55:e1:7d:3d:
         2c:15:ea:5f:51:b3:e0:39:3f:c3:30:f7:9a:87:7f:f6:fa:dc:
         5a:9e:18:4e:6d:5b:d8:3d:3d:5a:80:a8:7a:46:fa:14:98:87:
         c2:e2:35:80:58:1a:2f:b8:5f:7f:61:61:1d:93:34:6a:1c:e7:
         94:f0:93:5a:4d:c6:ec:e9:0f:61:da:1e:7a:5e:8d:8f:5e:5a:
         1e:3c:cf:06:32:d4:53:c5:67:b8:07:72:3f:e4:9a:9a:f3:2a:
         74:60:78:f8:d7:1a:a7:1e:ea:5c:10:0f:fc:ab:39:39:59:96:
         dd:23:2a:1c:dd:3c:47:9d:a0:8f:6e:54:3c:43:c2:9e:97:0e:
         dd:39:12:ca:8c:f2:77:30:b9:a2:2a:4c:06:15:1b:b5:d0:1b:
         12:d2:e2:89:ac:0b:aa:97:8b:81:f2:94:37:93:26:57:84:a2:
         b5:34:5b:77:1f:cd:69:30:63:f1:79:9e:04:5a:34:3d:e2:cc:
         0b:9e:06:8d:a0:0c:f7:26:61:e6:61:4e:22:a5:58:e2:ea:b2:
         4c:2e:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:04:50 2025 by rpki-client