Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          6SVB73xFCo2BBOdrQtIn+reLfqPzYw46F6adUEqhkjc=
Subject key identifier:   5C:A2:07:EC:9E:2E:90:91:A9:B9:B3:34:A7:97:0B:5E:58:26:E8:B0
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       0196C382B069D1CEF5DF541A8003DD68E417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 08:00:43 +0000
Manifest this update:     Mon 12 May 2025 08:00:43 +0000
Manifest next update:     Tue 13 May 2025 08:00:43 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: NlyyqhPYV3UVpS+vTKrXvvTbIIduGvKa/hd5RvSQKGI=)
                          2: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (hash: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:b0:69:d1:ce:f5:df:54:1a:80:03:dd:68:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: May 12 08:00:43 2025 GMT
            Not After : May 13 08:00:43 2025 GMT
        Subject: CN=5ca207ec9e2e9091a9b9b334a7970b5e5826e8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:01:42:c9:4b:b9:88:bc:af:42:0f:91:00:
                    45:c3:5e:ca:35:bd:10:9a:54:b5:82:8c:96:ce:85:
                    b6:10:53:4e:b3:88:b1:8b:62:e4:a1:f6:72:1e:11:
                    2d:69:2b:9b:8b:3d:42:75:f3:ce:4a:63:2a:b9:41:
                    02:e7:38:79:6e:16:66:3b:a9:29:e7:c5:86:71:a3:
                    dd:e3:d6:d4:0c:a7:ea:fd:2c:2a:73:48:da:8d:41:
                    97:a2:f5:48:a3:42:4a:8a:95:84:55:21:a9:92:b4:
                    37:0a:7a:4d:f4:22:21:16:65:47:bf:f4:be:05:bd:
                    1b:07:93:01:ff:86:3b:38:a5:c8:de:48:e9:e3:48:
                    6f:9c:06:f7:9c:bc:6f:de:dc:86:35:aa:d5:d5:16:
                    d3:4a:e0:dc:93:b0:74:c3:bf:50:b6:ff:5e:49:63:
                    a1:21:07:a6:59:8a:ae:bc:a1:85:2b:8b:95:fc:ad:
                    bc:3b:ef:3d:8d:5b:c6:18:c5:84:c2:be:02:be:3d:
                    94:4c:31:52:49:75:a9:be:21:9a:0c:a9:0d:de:01:
                    6e:08:21:94:a8:7b:38:ff:f9:69:6a:03:bf:0f:9d:
                    30:c0:2e:dd:96:6c:f5:37:9e:68:49:6c:e1:e1:fd:
                    04:bc:32:03:64:b5:99:d0:b8:b2:1b:4c:72:96:33:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:07:EC:9E:2E:90:91:A9:B9:B3:34:A7:97:0B:5E:58:26:E8:B0
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:66:36:45:7d:59:69:41:a3:a5:a3:61:43:80:bb:ab:6a:4a:
         df:9c:80:47:93:64:be:ea:78:49:25:47:b5:ed:24:66:71:ad:
         5d:cf:3b:75:b3:5d:70:38:f5:43:9f:03:0a:32:8d:e1:ef:15:
         8c:fd:20:50:0a:52:20:c5:6e:30:44:79:3d:4d:6a:61:90:ea:
         16:1d:90:df:dd:d6:10:7b:ed:26:23:bf:ba:da:b5:66:22:13:
         5f:2d:1d:bf:59:ef:89:c6:59:67:60:61:55:9c:7d:fb:5b:b2:
         04:b3:41:bc:ba:f0:d1:68:14:80:8f:41:c8:ad:df:8f:d1:aa:
         89:4b:e9:29:37:c5:68:a1:ba:7e:f5:eb:94:08:42:f8:2d:85:
         32:8b:80:8b:9e:af:20:ff:cc:2e:88:3c:ea:77:b0:0b:40:b4:
         ad:c8:9a:72:24:40:e9:15:47:f0:f6:34:bb:d8:21:27:0e:17:
         3d:d8:78:7a:22:f6:96:07:37:a7:a2:b2:24:48:c3:cc:a3:d1:
         bc:94:30:50:98:bd:9c:78:d5:cb:ec:53:da:66:34:e1:4c:91:
         ae:51:4d:4e:c2:6a:e3:97:69:e5:2d:cf:2c:23:e7:b4:44:07:
         21:7e:b6:61:7d:6d:27:f4:bb:c8:23:84:ab:27:0a:85:31:a9:
         7d:94:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:18 2025 by rpki-client