Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File:                     1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier:          vDhfh1mZd95xFZ7broDDxuTZEi+w+1mbDBp1BMnRg/s=
Subject key identifier:   46:65:82:3B:60:DE:18:9B:AE:74:46:30:7F:1F:E4:9C:C4:30:F2:4A
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer:       /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial:       0196C126821373DA20670CC3A46F0B591974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number:          0551
Signing time:             Sun 11 May 2025 21:00:48 +0000
Manifest this update:     Sun 11 May 2025 21:00:48 +0000
Manifest next update:     Mon 12 May 2025 21:00:48 +0000
Files and hashes:         1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: BVBoIKmxIyLcJMZl6gXs88k/uAt6yVQMGa5eHwek7t8=)
                          2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
                          3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
                          4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:82:13:73:da:20:67:0c:c3:a4:6f:0b:59:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
        Validity
            Not Before: May 11 21:00:48 2025 GMT
            Not After : May 12 21:00:48 2025 GMT
        Subject: CN=4665823b60de189bae7446307f1fe49cc430f24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7f:9e:05:8b:1d:33:04:3c:62:11:3c:16:81:
                    b7:e9:d0:5c:3a:25:eb:60:4a:fc:36:60:de:98:fe:
                    97:0a:4a:cb:64:63:b5:12:e1:ac:77:21:e8:d4:06:
                    f5:2b:f8:b8:c7:45:db:b6:75:18:f1:19:f2:35:8b:
                    75:bb:ee:c9:36:3b:b8:31:01:b8:f6:62:d2:c8:03:
                    ae:c7:9c:6e:85:cd:d1:9f:3e:c0:e6:17:22:b8:26:
                    8a:98:55:92:1b:8e:06:b9:35:d6:ec:79:ae:c8:2e:
                    64:66:25:23:33:d0:a0:b1:98:f8:af:ad:df:c4:68:
                    bf:9b:a4:e0:32:84:8f:a0:51:c3:be:e9:89:a2:81:
                    27:73:94:b9:b5:34:4a:ff:1b:e5:9e:ae:b3:da:49:
                    35:11:9d:4b:8b:38:37:9e:e9:3f:6c:71:b5:49:84:
                    c9:24:74:75:24:4b:49:0c:f5:93:ac:40:15:6c:12:
                    9e:46:ab:a6:3a:be:0d:8c:49:60:1c:9a:e6:64:b4:
                    6f:d2:0b:7c:e7:59:f9:ca:97:cf:e0:83:96:5f:30:
                    0d:4d:d1:ec:e8:1e:f6:56:17:bd:40:d5:07:e8:1d:
                    e3:49:15:a6:d6:b2:6c:bc:b9:9c:53:92:e4:86:81:
                    c5:d6:00:8e:f2:84:86:a4:76:80:d1:ba:ea:de:22:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:65:82:3B:60:DE:18:9B:AE:74:46:30:7F:1F:E4:9C:C4:30:F2:4A
            X509v3 Authority Key Identifier:
                keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:2c:4f:40:58:c9:81:fb:32:45:9d:e6:f7:2e:88:e7:c7:
         43:55:16:eb:06:34:87:39:fc:7f:5c:9b:83:92:82:f9:a6:87:
         50:2a:e9:e9:26:be:c7:ef:cc:2e:20:39:bd:8e:8d:fb:71:da:
         b1:a9:de:20:31:9c:18:d3:0d:ce:88:5e:21:bb:cc:5a:f3:23:
         61:f4:82:2e:2c:27:8d:71:ca:31:8b:b3:03:60:fa:7c:45:b6:
         48:c5:a8:4a:fd:38:30:b2:47:51:fe:d5:67:1c:9f:d5:5d:c1:
         ab:3f:66:27:e0:e5:a7:fd:05:57:74:02:cc:f9:87:e3:6c:00:
         a3:5a:2f:3a:75:20:d0:80:fd:89:6b:c1:9f:37:c6:38:a1:34:
         c3:ec:b2:3c:44:43:b1:ed:73:5e:36:f1:4f:c4:59:b5:b9:e3:
         46:78:29:60:49:d1:03:74:94:76:09:bc:d1:22:bd:95:27:3c:
         73:14:4b:0b:8d:02:ec:00:de:54:8e:22:34:86:90:f4:ff:60:
         ed:e3:ea:25:93:d0:87:52:18:8f:44:d3:3c:e1:01:82:f4:46:
         9c:eb:35:f8:41:25:2a:ba:25:f4:08:41:e4:80:31:f5:82:b2:
         26:c4:b5:cb:4b:c5:c4:aa:d0:ff:f1:3e:b1:fe:34:93:37:a2:
         b9:a7:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:34:04 2025 by rpki-client