Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          XoIm8AG+FNsQPJqbg49xxInD5Ggk/SeIgeFcKOQYOy0=
Subject key identifier:   72:16:CD:C5:FD:DD:F0:87:4A:FD:84:A4:7B:7D:B5:66:F9:27:FD:CD
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       0196BD498F879F8C2763C2BE3EFEA610A7E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1535
Signing time:             Sun 11 May 2025 03:00:36 +0000
Manifest this update:     Sun 11 May 2025 03:00:36 +0000
Manifest next update:     Mon 12 May 2025 03:00:36 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: Cw71OFYdDmapVKnsCmT3QpM/rdeHoWM+GLgNyPTZThQ=)
                          2: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          3: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          4: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:8f:87:9f:8c:27:63:c2:be:3e:fe:a6:10:a7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: May 11 03:00:36 2025 GMT
            Not After : May 12 03:00:36 2025 GMT
        Subject: CN=7216cdc5fdddf0874afd84a47b7db566f927fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:ff:9d:8f:d9:aa:04:fa:c2:d9:0c:be:7f:
                    01:15:b0:bd:9f:ca:de:fe:93:f3:2d:4f:5b:2a:d5:
                    37:f2:9f:31:9b:78:24:0e:d0:f1:fc:e6:66:03:51:
                    20:8b:60:cf:5c:da:d5:75:bd:10:98:a4:93:9b:a6:
                    c1:99:5f:dd:b4:67:f5:32:aa:2d:c2:13:7e:72:12:
                    17:a1:54:ce:31:07:88:fa:74:8d:74:c0:37:3c:55:
                    8a:cf:cd:99:1b:db:8c:42:bd:27:89:4b:e1:b9:97:
                    66:6c:cf:92:8e:1d:51:9f:2c:5f:7c:b1:99:2e:05:
                    d6:dd:28:32:07:cc:9b:d6:1f:fc:11:2f:79:53:0a:
                    e4:f3:56:4e:39:78:db:c9:07:ed:e4:ab:a0:7f:e0:
                    02:01:e6:1d:9e:03:9f:90:73:db:e7:bb:99:d8:de:
                    7d:aa:39:24:23:5d:2e:f2:5c:ff:3d:96:b5:51:6c:
                    23:bb:7f:9a:48:eb:21:b4:cb:ef:99:65:81:9c:3d:
                    65:be:5f:ca:ef:f7:51:b0:b6:e3:8f:16:f8:b9:da:
                    61:c4:c6:36:40:0c:59:20:dd:05:bf:9e:8b:60:cc:
                    ba:d1:d3:47:6d:da:1b:3f:16:44:b5:07:3f:74:4d:
                    f0:0b:37:22:ac:c6:5c:62:ae:c7:98:2c:80:a2:c6:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:CD:C5:FD:DD:F0:87:4A:FD:84:A4:7B:7D:B5:66:F9:27:FD:CD
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:75:cb:16:b9:8b:51:85:8b:ef:8c:ab:80:71:39:6c:7e:f7:
         86:99:8c:90:e6:d6:76:6e:c6:ce:74:51:1a:8b:87:5b:4a:ed:
         1f:9b:0f:f5:25:06:c8:f7:70:da:3d:dd:f2:75:57:07:ce:e5:
         37:29:27:75:4c:84:46:7c:d9:14:6c:cf:d2:e2:02:9d:10:16:
         4f:90:72:91:6b:d6:20:b1:e6:87:2a:4a:4f:eb:a4:31:71:f9:
         e3:eb:8d:0e:10:9d:45:9f:39:31:a8:f1:c9:77:9a:1c:3b:59:
         29:66:0e:67:50:70:cb:8e:d6:75:c4:8d:ac:19:e5:21:68:b1:
         44:cd:57:c0:11:0f:97:28:1c:82:4f:31:ac:2d:77:48:5a:5c:
         52:d8:2d:c0:d3:89:c1:66:72:8d:7c:a8:2c:eb:3e:21:7f:19:
         82:11:44:4a:8d:4e:1a:a5:39:e6:41:88:05:d6:92:21:3d:ef:
         31:dd:b9:6b:d9:c6:a2:a8:bb:88:bd:bb:dc:67:8c:25:02:31:
         a1:3d:4e:29:f1:63:a8:6e:50:72:ef:0e:19:bf:e8:f3:e7:57:
         d3:8f:77:4d:08:9c:56:5e:f0:c6:3b:d1:56:3d:10:58:ec:fe:
         bb:2f:24:a5:a6:21:b1:d1:cc:c8:dc:91:aa:79:de:20:13:66:
         fd:3e:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:42:08 2025 by rpki-client