Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File:                     GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier:          ylnpeyZsryw5WAf5puD/Wz6F4OwM+Iewiw/1GcSZhMg=
Subject key identifier:   CC:55:A7:41:0A:01:08:D6:46:2E:91:70:74:F3:C2:52:B7:9E:F0:23
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer:       /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial:       0196C239A3A4D500C476A5D79ABB22024CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 02:01:19 +0000
Manifest this update:     Mon 12 May 2025 02:01:19 +0000
Manifest next update:     Tue 13 May 2025 02:01:19 +0000
Files and hashes:         1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: khkZxtGQ0i9YYr9UY9/ymK1tM/Akz2AKbKwirdNb3r8=)
                          2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:a3:a4:d5:00:c4:76:a5:d7:9a:bb:22:02:4c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
        Validity
            Not Before: May 12 02:01:19 2025 GMT
            Not After : May 13 02:01:19 2025 GMT
        Subject: CN=cc55a7410a0108d6462e917074f3c252b79ef023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cc:e2:ef:59:1d:e2:a8:38:2c:7b:70:4e:dc:
                    8e:5d:c2:63:ff:2a:6d:a3:89:c1:46:53:f3:08:cb:
                    26:02:cf:ea:96:11:28:49:9f:b0:c4:80:7d:0a:1e:
                    eb:44:32:e9:ee:26:cd:43:ec:44:93:a3:b3:ad:53:
                    9e:07:1d:45:4a:e7:9a:01:39:fb:cc:b3:54:07:ea:
                    42:66:bb:5a:39:6b:df:31:4a:88:72:df:7d:b2:4f:
                    8e:87:42:7d:77:74:61:1d:7c:92:de:8f:94:a7:96:
                    3f:eb:ea:6f:33:df:a4:13:3e:3c:d4:b7:50:ba:57:
                    a7:63:be:72:10:1b:de:86:9e:3d:cf:c6:9b:f3:6f:
                    5f:3c:d4:f2:c2:11:fb:dd:6a:1c:5c:da:47:75:52:
                    79:51:77:9b:0a:d6:40:81:5e:b4:4d:6f:c0:7e:59:
                    e5:af:c3:2d:0d:b7:f5:6d:0e:aa:56:a1:90:31:bc:
                    b5:03:dd:46:32:05:21:c5:bc:cc:fd:9b:4e:21:03:
                    b5:76:81:5e:a1:b3:3c:f5:f6:f0:1a:62:97:12:21:
                    ed:ef:c5:d9:72:02:0b:39:1c:6b:bd:c7:28:3c:7c:
                    2b:54:c6:c9:c0:10:ce:3c:52:04:ff:6c:fd:1c:24:
                    37:7b:06:c9:c0:3f:51:a5:f0:66:2b:6c:55:74:d0:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:A7:41:0A:01:08:D6:46:2E:91:70:74:F3:C2:52:B7:9E:F0:23
            X509v3 Authority Key Identifier:
                keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:ef:50:72:d4:75:eb:94:ff:ea:43:42:d5:1a:d4:5c:0b:
         4e:5b:ab:d4:0f:2f:2c:3e:16:91:9d:14:76:b4:86:29:f7:66:
         cd:e5:4e:06:3b:f3:7e:87:b8:2f:66:47:11:86:91:3a:47:25:
         4d:a5:af:d2:d5:58:15:24:26:82:46:2b:1c:8f:3c:b5:56:e8:
         70:77:c9:31:d1:6a:5f:c1:08:b1:16:33:b2:23:f6:f1:f9:31:
         78:d2:ae:ce:e9:07:52:e0:fb:a9:f2:7c:b2:a7:ec:8f:18:15:
         01:7e:d4:4f:e8:7d:ec:56:d2:ef:55:ea:ea:d3:d6:a7:18:6c:
         dc:c1:19:50:86:45:73:5b:5f:db:e3:0b:d5:b5:20:ea:08:8e:
         37:90:de:6d:1c:1a:bc:62:3a:d6:45:d1:43:84:d6:04:cf:48:
         4d:fb:67:1d:8f:3b:ef:b8:b7:8a:02:fd:05:1e:79:45:f1:a0:
         1b:5f:c6:b3:3a:88:53:3c:de:07:19:79:81:06:cf:fa:a8:0b:
         0c:cb:81:ee:f7:ed:4b:c3:71:0f:b6:d4:cd:0a:d7:e4:41:97:
         25:4f:81:63:92:00:8e:cd:cb:7b:ee:69:63:d4:aa:bd:35:26:
         16:49:8c:55:75:c4:78:1b:3e:89:13:c1:8f:a1:f0:41:39:93:
         43:97:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:05:37 2025 by rpki-client