Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          +5YlLbWpztE3wvkTVS8OoIJQ9oML1qMfXbpc8RRs/vU=
Subject key identifier:   1C:6F:09:19:3E:7E:13:BB:88:2A:F4:D1:9E:BD:1A:7C:91:9F:BF:68
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       0196BC00371F87192CA00AB5E2138175A838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 21:00:52 +0000
Manifest this update:     Sat 10 May 2025 21:00:52 +0000
Manifest next update:     Sun 11 May 2025 21:00:52 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: iO9kmo+a/uNEpp23dGA4rNpJS/5g0XO2NdeMnMTT1HI=)
                          2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:37:1f:87:19:2c:a0:0a:b5:e2:13:81:75:a8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: May 10 21:00:52 2025 GMT
            Not After : May 11 21:00:52 2025 GMT
        Subject: CN=1c6f09193e7e13bb882af4d19ebd1a7c919fbf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:67:b4:04:8d:71:4b:ee:17:32:d3:83:a4:
                    3f:c1:67:da:bb:ee:eb:66:41:b1:92:06:18:14:bf:
                    be:bb:b5:09:77:1d:ac:ff:8f:3d:4c:e7:82:99:87:
                    9e:59:4e:1d:a9:d4:52:8c:7d:eb:6b:cd:ba:40:56:
                    df:1c:23:00:be:77:51:d6:1f:ba:8c:f4:a0:23:15:
                    0a:74:f2:d9:6b:d4:1f:fb:8d:08:6d:c3:57:59:8e:
                    cf:b5:a1:e0:24:ae:67:21:d9:80:88:30:ca:f0:ae:
                    cf:03:d1:05:6b:6e:22:c2:31:e0:67:78:1d:f2:ae:
                    01:f0:28:d5:2e:0c:26:9f:bd:e7:de:52:87:5a:a6:
                    43:98:bc:95:62:a1:e7:fa:16:e9:ca:f5:ed:56:51:
                    90:61:97:9a:a9:a7:01:9e:23:0b:9e:3e:59:8f:c7:
                    cd:32:af:d3:3b:52:ca:bb:86:9d:37:e5:44:1d:c0:
                    c9:d1:e4:24:35:b1:3a:92:78:4b:c1:ef:0a:0f:f2:
                    fc:33:fd:b6:8c:cb:88:6e:e3:19:c1:a3:39:00:e8:
                    3f:df:0c:37:41:22:04:03:59:cc:3e:e2:9c:34:4e:
                    59:8b:74:9a:d3:d4:ae:70:7c:19:57:7c:6c:f5:40:
                    a7:73:04:b6:6d:99:97:d2:a3:a4:fb:48:9f:76:54:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6F:09:19:3E:7E:13:BB:88:2A:F4:D1:9E:BD:1A:7C:91:9F:BF:68
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:66:c5:08:96:52:11:ee:02:b6:98:2b:1c:f7:c2:ce:92:
         0e:3d:0b:a6:ba:b8:78:54:0f:34:7c:72:c2:13:b4:bd:4b:45:
         b2:7c:5f:28:18:2b:18:ba:37:ce:4e:29:d6:44:59:11:43:ae:
         2e:a6:9d:45:73:b3:54:fa:78:53:e8:b7:81:ad:b0:6c:67:b2:
         b7:43:b3:35:6b:96:8d:22:4c:ea:03:f3:b2:da:87:66:9b:25:
         aa:b5:8e:a0:f4:52:ba:b5:72:cd:ef:f3:ac:0b:0d:73:30:8b:
         2f:c4:4b:9b:26:ef:86:1b:f3:ee:c9:be:55:ab:08:2e:fd:cb:
         f2:57:8f:8c:ce:da:26:50:78:5b:9c:de:ac:33:1e:d4:53:5d:
         56:ae:28:60:2a:67:ba:d9:7b:ce:a5:45:33:8d:04:f9:74:fa:
         6e:3e:e0:09:97:69:e9:56:a2:44:78:ae:63:07:c7:23:2a:2b:
         b9:1a:7b:b6:f1:c9:9c:75:e0:d7:1e:3e:f2:b1:89:d8:21:22:
         f8:51:fb:49:17:ef:90:be:02:15:33:82:81:18:2d:7b:07:a3:
         75:b9:0e:8e:41:c2:4b:0a:ea:e1:e4:8e:ae:bb:73:49:cf:dc:
         c0:17:30:33:62:b6:1e:c2:aa:c0:ef:26:04:8c:4c:a9:db:f9:
         ed:27:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:36 2025 by rpki-client