Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File:                     Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier:          su3qo7N5rpfTCwCJc/Ph7ilaOY1Rc/1T7A8ZN+zAD+k=
Subject key identifier:   1B:71:38:17:F4:CD:8D:FF:0B:53:4B:46:31:FA:23:9A:83:F2:01:43
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer:       /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial:       0196BBFF93157CAB769E68193477F91449A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number:          0770
Signing time:             Sat 10 May 2025 21:00:10 +0000
Manifest this update:     Sat 10 May 2025 21:00:10 +0000
Manifest next update:     Sun 11 May 2025 21:00:10 +0000
Files and hashes:         1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: bNjN+7Pdlb8F14IpZ95EfqJdEvUAPWed22NsOIkOTq0=)
                          2: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (hash: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:93:15:7c:ab:76:9e:68:19:34:77:f9:14:49:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
        Validity
            Not Before: May 10 21:00:10 2025 GMT
            Not After : May 11 21:00:10 2025 GMT
        Subject: CN=1b713817f4cd8dff0b534b4631fa239a83f20143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:42:8a:63:ec:f0:41:9f:f0:8b:99:f5:bf:
                    e8:f9:f7:50:18:c6:58:5a:85:c3:22:57:b3:65:b4:
                    29:f7:00:ff:66:b2:51:36:e0:f1:47:bf:3e:a1:27:
                    11:02:83:0e:8c:d2:5c:32:5b:de:c4:44:f1:fb:70:
                    ff:a8:de:7c:a1:e9:7f:67:d8:c2:d4:93:48:6c:f8:
                    c0:f2:8f:9c:34:e8:6d:92:ef:ec:4f:48:a7:60:b4:
                    5a:ba:8a:99:de:b9:eb:c4:49:e1:b4:9c:9b:75:73:
                    c4:8e:ed:35:ba:b5:90:08:7b:d9:7d:db:e0:cf:96:
                    4a:34:f2:2e:ef:c6:9e:33:41:4a:d9:1b:b3:11:ae:
                    b2:2b:49:75:8c:08:db:cc:a6:97:72:5c:e3:92:98:
                    b2:20:80:13:02:c8:18:91:4e:81:47:13:4a:30:1c:
                    07:b1:f3:06:71:9d:5a:18:e2:14:66:f9:cc:39:f7:
                    59:ee:0b:35:2e:8a:81:14:a8:d9:f8:46:af:ec:7f:
                    95:11:2d:ea:be:c2:b1:96:c1:17:6e:37:9a:07:ec:
                    02:c2:52:29:0b:d5:74:1e:4c:50:c5:26:71:20:03:
                    7e:13:e5:20:90:5b:84:3b:1d:5d:4b:74:65:4f:2d:
                    f2:ed:45:be:ba:55:ad:ee:66:fd:68:48:7d:47:27:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:71:38:17:F4:CD:8D:FF:0B:53:4B:46:31:FA:23:9A:83:F2:01:43
            X509v3 Authority Key Identifier:
                keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:86:12:09:9a:02:c9:ac:b4:8d:36:30:35:b1:df:33:48:b4:
         ec:19:dc:e7:a3:f9:0e:19:7c:a6:3b:77:c2:e2:a8:c0:46:29:
         06:0a:7f:70:16:24:e6:28:30:90:68:00:f5:6a:c2:c6:d4:61:
         64:ac:9d:1d:f6:d9:fc:a3:d1:e7:51:ba:c9:f2:aa:43:a7:45:
         5b:26:33:6c:a1:f1:a5:42:2f:3e:ae:71:08:aa:bf:15:ad:ee:
         3e:cc:0c:a6:79:14:ab:19:42:23:a4:c3:f2:6f:91:f1:b3:72:
         fd:e0:66:b0:b2:3b:10:f2:a9:95:d6:8e:52:f8:d1:78:28:fd:
         d3:1c:8b:a9:8b:1d:ff:ed:d6:7d:95:6c:71:75:25:78:75:b7:
         74:01:82:99:d0:3a:c9:46:ec:d1:bf:70:1d:bf:41:a4:f6:69:
         46:06:65:b4:72:51:6c:b7:72:5f:a2:70:c1:a4:e1:d3:df:bb:
         cc:7e:63:51:a7:96:f8:a4:e7:a5:11:d8:b4:0a:9c:27:bf:66:
         e6:ea:5a:df:09:d2:e0:cf:67:d4:d9:49:d1:92:19:74:f7:a9:
         7f:e8:85:a5:78:c0:d0:72:32:b7:7c:86:f1:96:a3:4c:97:7d:
         cd:94:00:b0:0a:81:ab:2d:a8:93:1b:77:7f:1d:3f:9a:4b:6d:
         4f:ec:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:31:43 2025 by rpki-client