Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File:                     IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier:          CnYhfBAu9vyO8GcoIFHaNzlNdjsUIAkISnOHqmPNpXM=
Subject key identifier:   95:AE:BB:1B:57:35:CB:23:E7:67:EF:6C:F5:BF:D0:61:44:4A:67:A7
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer:       /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial:       0196B85A97C7E3604EFD6F22B62E68DBE3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 04:01:06 +0000
Manifest this update:     Sat 10 May 2025 04:01:06 +0000
Manifest next update:     Sun 11 May 2025 04:01:06 +0000
Files and hashes:         1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: 56+93+wW4YTX7JNm5+D3Utw0G+W/Q6B5lmiRbvBFyqk=)
                          2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:97:c7:e3:60:4e:fd:6f:22:b6:2e:68:db:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
        Validity
            Not Before: May 10 04:01:06 2025 GMT
            Not After : May 11 04:01:06 2025 GMT
        Subject: CN=95aebb1b5735cb23e767ef6cf5bfd061444a67a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:66:99:db:69:fb:f2:b2:de:1e:8f:ae:f1:
                    e7:bd:f7:9a:89:a3:43:a4:d4:31:99:2d:55:7f:2c:
                    f4:79:72:84:f4:27:2b:a5:47:c6:b2:66:69:f2:64:
                    26:83:fe:ba:54:ed:ee:05:75:46:c6:3b:44:31:d6:
                    ae:5c:0a:ab:17:44:ff:74:46:50:8c:9d:3e:28:ae:
                    3d:4f:ec:94:11:57:db:5d:b1:d4:0a:53:2f:93:4e:
                    79:41:cf:0b:14:50:12:8c:fa:29:1f:02:16:d6:3d:
                    15:e3:af:99:99:df:73:82:28:45:2a:86:5f:3e:9e:
                    b3:86:07:0b:43:35:c7:d7:8a:28:0c:d8:32:b0:92:
                    e1:e8:2e:e7:2d:07:25:69:e7:d5:21:23:bc:f4:ea:
                    9f:62:83:fd:a5:6b:3c:55:b6:d9:bc:2b:df:41:2b:
                    41:f4:51:1d:87:b4:25:6d:07:fd:53:d5:d3:b3:55:
                    1b:ee:7d:15:c4:15:fa:6d:f3:e5:66:25:aa:98:ff:
                    70:c9:c4:ea:ac:51:83:da:e9:bc:82:63:3a:11:fa:
                    c7:44:73:b6:e3:35:b1:b6:87:54:38:60:06:4f:50:
                    41:46:fe:35:56:06:e3:24:a6:6d:a6:f3:78:67:75:
                    ab:34:fa:f8:df:bf:8c:7e:07:9c:1f:fc:35:98:f1:
                    34:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:BB:1B:57:35:CB:23:E7:67:EF:6C:F5:BF:D0:61:44:4A:67:A7
            X509v3 Authority Key Identifier:
                keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:17:7c:f5:f7:b4:d8:39:d8:65:be:88:5e:58:ae:bd:2f:
         bf:47:72:5d:91:7b:77:fc:4a:92:31:04:7c:97:09:50:62:4b:
         cd:01:9c:34:83:a8:85:71:6d:8f:f4:53:fa:4f:1f:d3:12:0e:
         71:88:d4:31:c0:77:d4:0b:8c:83:2e:c8:2d:24:b1:a2:3d:64:
         bb:f4:19:82:f9:6e:37:92:a0:0b:62:90:ef:b0:c3:29:d4:01:
         96:72:37:da:d4:3c:14:38:ab:4b:3f:11:cd:55:58:1e:5d:b7:
         ee:17:fb:6f:77:62:82:f0:a3:34:8a:57:25:9d:85:0c:11:fe:
         14:29:c0:91:3a:08:24:a3:e6:97:f7:e8:81:02:08:32:0f:18:
         0b:1d:7e:8c:df:12:31:c2:03:bd:58:7d:2f:54:4a:c3:7e:00:
         30:63:8c:0b:b6:ec:4a:a0:19:9f:c7:24:c5:e4:7b:e7:64:7c:
         68:90:5b:8c:f1:e9:ef:49:f9:77:58:12:db:63:c0:51:8c:87:
         c8:9f:d2:3e:ef:2a:2a:c5:ed:57:fc:49:61:cd:16:f2:9f:b0:
         fe:73:f8:85:45:f5:3e:e3:11:46:97:3e:ca:af:5d:53:df:69:
         33:a7:ec:8e:b5:68:95:8e:29:b0:be:8d:5d:fb:db:0f:9c:7f:
         97:85:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:09 2025 by rpki-client