Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File:                     1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier:          vW99RjzVIEmG6XIXnO6zw7zzKZW/Yn/FY44sYx+U2rE=
Subject key identifier:   D5:9A:FA:F9:D9:23:2B:4C:C6:8A:2B:1C:93:95:2F:51:CB:47:92:ED
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer:       /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial:       0197B632700F3070D7E81FA3E498C760F953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 11:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:48 +0000
Files and hashes:         1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: Mvq2RWpcdwHdlyzBkWo7YVeA8+BSVSwnrxzvnSEvfuc=)
                          2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:70:0f:30:70:d7:e8:1f:a3:e4:98:c7:60:f9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
        Validity
            Not Before: Jun 28 11:00:48 2025 GMT
            Not After : Jun 29 11:00:48 2025 GMT
        Subject: CN=d59afaf9d9232b4cc68a2b1c93952f51cb4792ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:eb:c8:ff:a7:65:6e:36:52:f9:ae:62:a4:
                    33:f0:c4:2a:38:ff:ee:a0:fd:e8:aa:82:97:e0:4c:
                    fa:9b:4c:5f:4f:57:89:89:0a:cc:c4:5a:f1:9c:0a:
                    3f:ec:f0:ec:be:ea:d5:56:7f:80:93:8c:06:fc:70:
                    74:dd:d0:20:92:ab:ae:6a:91:cd:1e:68:58:98:02:
                    42:22:c2:ce:46:ab:9d:74:6d:fb:6a:1a:9e:33:19:
                    2a:13:43:24:ff:f3:c2:40:d2:24:e4:bf:ab:ee:22:
                    7a:31:32:3b:3f:1d:87:12:bf:27:d2:17:f4:40:49:
                    d4:82:32:45:48:c0:82:ef:ed:bb:53:52:ac:db:64:
                    52:54:41:30:68:ad:25:69:38:d3:96:82:e0:e4:78:
                    bd:35:b3:ee:44:4d:be:ff:07:32:00:b6:b0:3d:ac:
                    46:f2:62:15:06:fd:2b:03:34:85:6b:b4:0d:40:76:
                    93:8a:22:18:36:3e:e6:f6:43:3d:a0:ee:36:b7:b5:
                    b9:48:66:d7:7c:b7:28:e4:ee:b8:58:ee:1a:52:36:
                    0e:44:89:19:4d:dc:f7:99:0a:a8:dc:51:37:05:5e:
                    69:38:9e:ff:99:07:71:a7:45:67:26:17:cc:79:58:
                    34:fa:7e:f6:0b:45:cb:6d:aa:fe:9b:fb:c2:c7:1b:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:FA:F9:D9:23:2B:4C:C6:8A:2B:1C:93:95:2F:51:CB:47:92:ED
            X509v3 Authority Key Identifier:
                keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:fe:a1:f6:be:d1:56:76:ed:8a:da:ac:7c:db:bc:85:b9:
         9e:67:d8:1d:10:0d:a9:36:2a:bb:a4:bb:12:26:f1:af:11:50:
         58:c0:8f:cf:4a:02:43:6b:43:22:24:1b:70:4a:85:4e:1f:1d:
         df:9f:b6:f8:f2:2e:8b:08:4e:9f:a3:ec:ca:c7:18:c8:3d:15:
         95:82:ee:8a:83:58:20:a3:1c:06:2f:df:eb:f6:83:e2:5b:6c:
         95:61:52:aa:d3:74:c5:b8:6e:c2:39:c4:1d:56:d8:11:60:84:
         4a:1b:3d:37:8c:f7:9b:9a:e0:a7:b9:67:57:72:ed:95:dc:50:
         ee:af:77:4e:c4:80:ce:15:38:c3:bb:34:3c:59:cc:f6:7a:a3:
         9f:41:fa:73:c0:fe:8c:e1:45:2d:a6:76:24:e4:a0:bb:9b:51:
         6e:3b:47:26:08:c5:3b:03:2e:04:49:cf:05:e9:d9:a3:1f:13:
         a3:40:27:82:db:36:15:6b:37:47:a5:ca:1c:cb:03:09:fb:7d:
         ca:49:c4:d7:78:d4:a4:05:91:b1:92:19:f2:ca:2f:b7:07:3e:
         47:94:63:a1:53:3a:78:cd:74:22:d1:28:87:f5:02:c8:4b:76:
         1d:f2:82:49:d5:20:05:aa:b5:06:98:5f:1b:bf:e0:dc:ab:06:
         2e:69:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client