Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File:                     1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier:          4yRxRdqYv+/0SrvXbQddNRJEcOYjK+GlWGC2gB8Qih8=
Subject key identifier:   41:3A:9F:D4:D7:BC:6D:61:E0:32:C8:61:93:70:7E:BC:82:65:E8:F4
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer:       /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial:       0196AD68BF1B06F0899C073906E06E773DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number:          1053
Signing time:             Thu 08 May 2025 01:00:45 +0000
Manifest this update:     Thu 08 May 2025 01:00:45 +0000
Manifest next update:     Fri 09 May 2025 01:00:45 +0000
Files and hashes:         1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: kAnugwnh/Vo/YhxBk8AfpBsryr8KYumONmhDOB2XhVI=)
                          2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:bf:1b:06:f0:89:9c:07:39:06:e0:6e:77:3d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
        Validity
            Not Before: May  8 01:00:45 2025 GMT
            Not After : May  9 01:00:45 2025 GMT
        Subject: CN=413a9fd4d7bc6d61e032c86193707ebc8265e8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:a5:e0:4b:38:8e:81:17:e8:29:14:cc:cf:
                    4b:f6:6c:cf:78:b0:d9:57:57:57:7e:c9:58:7a:8d:
                    f8:40:13:39:65:f9:e9:72:36:e9:eb:0b:29:36:cf:
                    b1:d6:71:13:37:d0:1c:c7:66:de:af:2c:84:7f:38:
                    6f:5c:00:f9:12:8c:e8:56:99:7d:ca:0d:28:e6:75:
                    a6:44:05:4d:18:ae:76:3a:54:fc:4c:7c:4f:4d:7d:
                    dd:a1:be:30:3c:fa:1a:99:41:d7:27:03:36:82:9f:
                    f5:2e:2e:7f:79:91:05:62:96:58:b8:27:06:11:36:
                    11:02:aa:c9:d5:d7:91:f8:71:74:ca:68:45:15:95:
                    e6:bc:93:3e:d3:7e:f7:40:96:01:51:4e:77:04:32:
                    58:57:ed:f3:f3:51:48:12:54:f5:a0:bd:b3:9b:5d:
                    44:c6:e3:15:87:e1:b6:55:03:c2:8e:db:87:aa:be:
                    53:8b:e8:44:87:c3:f2:1a:38:0f:f9:16:d9:d7:c6:
                    cf:b0:4f:b6:c3:be:ac:da:61:78:d4:71:c9:be:ad:
                    e1:25:cf:61:fe:31:8c:44:de:25:97:52:fd:92:05:
                    45:56:8e:0a:13:06:34:39:51:6d:40:d9:4c:ad:8e:
                    2a:87:70:a9:9e:98:0d:3a:9b:ed:32:3b:c5:ba:bc:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3A:9F:D4:D7:BC:6D:61:E0:32:C8:61:93:70:7E:BC:82:65:E8:F4
            X509v3 Authority Key Identifier:
                keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:48:48:3f:42:b0:d3:d8:b8:a2:1e:f2:d1:93:3b:fe:1f:
         b6:a2:9b:51:ff:3c:f1:d2:07:48:b1:46:26:eb:7b:00:95:12:
         e6:b4:ac:58:ba:06:3f:e7:7e:dd:c1:91:3b:ff:60:e4:4c:d0:
         c0:bc:80:8c:7e:bd:49:9a:05:4c:51:40:23:43:b4:9e:52:1b:
         7b:8e:8a:98:c8:a1:c5:db:94:92:e4:8f:bf:d0:0a:87:e1:b7:
         5f:97:18:7f:b6:e0:1a:eb:2b:b2:c2:ae:a5:79:0d:a0:d9:ff:
         eb:46:c1:29:3f:cd:ae:52:34:8e:e3:a3:52:7b:8e:cd:bf:ba:
         a2:f1:08:73:38:67:18:d5:95:d7:7f:44:72:84:88:4c:80:1b:
         e0:76:07:50:dd:e2:24:14:6b:8e:96:c9:ab:ce:c9:29:5d:3b:
         80:12:76:73:23:ed:97:2b:dd:c3:56:92:dc:6b:0a:7a:9c:9e:
         c8:f2:5e:97:c9:ec:0f:63:74:36:4f:ee:2d:8a:a0:7b:2d:0d:
         74:c8:c5:7b:76:e6:52:f7:d0:de:11:47:0b:3b:a5:e5:38:2f:
         be:66:34:fa:4b:e2:fe:14:56:33:14:15:4b:07:63:3d:a5:58:
         3a:8b:45:f2:64:4a:dc:a7:19:5a:e7:d1:60:17:cf:72:bf:5f:
         5d:09:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:47:50 2025 by rpki-client