Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File:                     1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier:          0Ajtt4TizjyhHx+ktPB0q+X+0DWWEIF3soDeI3gYGX0=
Subject key identifier:   57:F0:EF:ED:34:E5:E3:CC:EF:2B:19:5D:2D:48:9C:F9:38:39:0C:06
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer:       /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial:       0196C6BAB6FA095D166DAADCA992B4D32EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number:          0C61
Signing time:             Mon 12 May 2025 23:00:47 +0000
Manifest this update:     Mon 12 May 2025 23:00:47 +0000
Manifest next update:     Tue 13 May 2025 23:00:47 +0000
Files and hashes:         1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: MkGuMOkaHF9kwW42dhvGOTc6AnIgxH4kZip1djNefL4=)
                          2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:b6:fa:09:5d:16:6d:aa:dc:a9:92:b4:d3:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
        Validity
            Not Before: May 12 23:00:47 2025 GMT
            Not After : May 13 23:00:47 2025 GMT
        Subject: CN=57f0efed34e5e3ccef2b195d2d489cf938390c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:1a:0f:2e:ea:e6:db:9c:e6:43:c3:c3:1b:
                    bd:1a:80:f3:59:ed:a6:44:db:44:dd:d5:7c:3c:59:
                    cc:32:66:1d:1e:8d:3e:a5:db:ae:59:57:a6:91:2f:
                    2b:ed:1c:07:da:cc:7a:3c:36:a6:1d:bd:19:74:03:
                    d8:73:fc:8a:ae:e7:0d:02:6f:8e:49:ac:b2:65:40:
                    8b:5b:e8:2b:7a:cc:23:8f:3e:48:b8:31:05:60:63:
                    7c:15:34:9c:98:ec:2a:5f:d6:c9:3d:66:c1:e9:d8:
                    14:24:8f:a8:96:14:32:80:c3:79:c6:1a:42:15:b6:
                    69:0b:2a:7c:49:2b:be:3d:12:27:9d:ad:8c:04:5c:
                    bc:f4:b6:4d:b4:79:62:1a:e8:87:73:fb:a0:60:7e:
                    b8:f1:13:e9:da:39:df:78:63:7e:26:3a:af:35:05:
                    07:2e:9e:ff:ca:02:55:83:d9:a0:d8:26:73:ef:a6:
                    ca:c7:18:19:a2:ee:86:63:bd:0c:98:dc:9f:58:2c:
                    44:b7:7c:1d:73:ae:d8:4e:8e:d8:1b:c0:a3:ea:65:
                    fe:3f:34:7b:e6:5a:0a:fa:94:8d:2c:70:37:9a:66:
                    64:ee:4b:35:67:6c:64:9d:80:ac:2b:f7:9a:93:fe:
                    4a:6d:a2:09:f8:fa:88:f5:5e:70:4b:a2:79:0d:c3:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F0:EF:ED:34:E5:E3:CC:EF:2B:19:5D:2D:48:9C:F9:38:39:0C:06
            X509v3 Authority Key Identifier:
                keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:1c:a8:96:88:11:3a:13:a8:7b:09:6c:b2:dc:b1:05:9a:
         56:f1:30:6d:12:3d:6a:84:77:be:fa:4c:f0:a5:d6:c3:2e:77:
         63:bd:ba:fb:a4:bc:be:07:f2:2d:c9:e0:17:5c:46:2d:ec:83:
         70:25:95:e4:fe:93:1c:0b:89:df:9e:91:ba:ac:87:aa:5b:2d:
         ba:fd:e0:63:42:a9:a7:de:a8:59:ca:ce:0c:00:f5:52:ba:9f:
         e6:56:fd:f8:3f:02:c6:78:2e:fb:8f:85:67:f0:b8:bd:01:04:
         3d:8a:df:c8:4b:7e:40:4f:18:6a:ca:cb:0a:58:ca:b5:2d:3f:
         cf:3f:1d:15:8c:64:79:25:99:ca:fd:0a:01:6f:e8:5b:04:4f:
         ae:4d:2c:48:fd:5a:a3:26:b8:c1:79:8d:21:6b:fe:a3:62:c7:
         8e:75:35:fd:26:a8:89:9d:eb:9a:77:b0:86:e9:83:49:5b:67:
         ec:94:13:49:e8:3f:bc:e7:7c:ca:e7:4e:1e:26:28:9f:f6:34:
         65:45:e9:e8:fd:4b:f6:b0:e7:07:e9:18:d3:23:e4:48:47:f6:
         df:39:32:ce:34:17:af:99:55:0f:d7:af:11:ef:51:6c:4e:83:
         a1:67:86:53:9e:ed:47:0a:9b:6a:03:08:1e:f5:b6:45:62:96:
         b1:14:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:21:50 2025 by rpki-client