Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          4JFKV7jALrnOb3stHFcHymkE/sYt4Agm41+/vu+nds0=
Subject key identifier:   AA:69:1E:9D:DE:82:AB:2B:88:1D:97:D0:78:DF:AE:36:FD:13:CE:EF
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       0196A3C10E19845EF5BD6C6D0683795A01F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 04:01:00 +0000
Manifest this update:     Tue 06 May 2025 04:01:00 +0000
Manifest next update:     Wed 07 May 2025 04:01:00 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 2ek3v+uzAYyByy3NmLBr58yzYmn5Rw7dMOBNWga9g/g=)
                          2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c1:0e:19:84:5e:f5:bd:6c:6d:06:83:79:5a:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: May  6 04:01:00 2025 GMT
            Not After : May  7 04:01:00 2025 GMT
        Subject: CN=aa691e9dde82ab2b881d97d078dfae36fd13ceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:94:a2:54:c8:1e:9c:84:bf:1f:d7:67:7d:
                    27:04:e7:0c:d3:05:b1:27:0b:ee:ce:47:f1:06:d1:
                    49:d7:85:45:92:42:d4:00:a1:54:f9:ad:dd:ba:b7:
                    52:de:f0:71:a2:ff:7a:67:7b:d3:b8:89:5c:45:6d:
                    cb:ae:6c:80:65:d0:36:0e:f4:57:05:87:80:e2:c8:
                    8d:38:fe:72:9e:01:6c:6e:06:9b:3b:3b:81:f4:b1:
                    d2:4d:26:df:29:e2:d5:36:b0:96:bd:57:15:74:e1:
                    84:7c:4d:61:e1:86:13:e7:31:aa:02:b4:c1:dd:ae:
                    c0:b6:64:96:48:b2:18:c8:4a:3b:8c:bf:54:ee:c6:
                    84:d1:bd:8a:cb:16:0c:9b:4c:06:51:dc:51:6a:61:
                    fa:d8:8c:fb:8b:02:3b:45:fc:f1:97:9f:8e:45:24:
                    8f:92:3b:da:76:53:55:75:c2:73:d7:28:95:58:a9:
                    ce:d6:be:81:d6:bc:f0:8a:b9:0f:e3:8e:94:ea:bb:
                    79:c0:d5:fe:90:50:89:f6:63:4e:e0:aa:cf:83:a7:
                    35:7e:5f:58:11:56:c9:4d:0d:c0:34:b7:5c:de:20:
                    70:49:15:a4:09:c9:a4:97:40:17:63:ae:d7:a8:32:
                    52:24:bd:e9:ae:25:b4:b2:ee:a1:ed:64:0d:a6:16:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:69:1E:9D:DE:82:AB:2B:88:1D:97:D0:78:DF:AE:36:FD:13:CE:EF
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:fd:61:72:c7:18:43:65:cc:17:b9:5a:f4:3d:84:a6:8f:
         ec:57:6e:3f:a5:72:8e:00:03:fa:56:27:c9:21:70:fd:ad:02:
         ac:74:e9:6e:63:54:9a:96:d2:ff:5e:2d:00:a3:f9:a6:f3:8b:
         4f:e2:1f:90:09:48:af:e2:e5:47:b9:50:3d:57:f2:21:fc:f3:
         89:12:40:1e:af:48:6e:12:a3:1f:29:2d:1b:84:d3:1c:c0:ce:
         c5:67:7e:b3:d1:06:7e:4f:38:93:73:5b:38:6d:65:96:15:33:
         ad:89:56:99:f7:c5:4d:ef:6f:de:40:0b:52:ab:60:ca:47:25:
         00:d1:9b:c9:d3:92:dc:2f:08:01:61:f7:82:ab:02:3c:a2:a4:
         de:96:91:64:2a:7c:fd:2f:bc:7f:4f:a1:e5:fa:63:27:87:1a:
         20:16:e6:b0:1d:a3:a7:f7:b8:50:ce:55:5c:83:64:b9:97:04:
         bd:ee:d0:64:74:ac:5c:29:7c:9b:e1:6b:a1:09:99:3c:31:91:
         1f:c2:21:72:73:ff:da:74:31:43:67:16:f5:b1:c4:0b:ca:14:
         4c:2d:a1:2a:64:40:bb:ce:8d:89:88:06:df:32:e9:fe:23:d2:
         5a:9a:4c:45:70:f0:99:bf:d3:d3:fe:76:d9:ea:9d:71:36:df:
         87:b0:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:46:45 2025 by rpki-client