Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File:                     1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier:          2u0+G2L0WgNcudopkucoot9sjmFhXxVRHebyhMxIg0c=
Subject key identifier:   B5:5A:12:4B:AE:9B:F4:3D:9E:2A:1B:87:05:31:44:76:84:85:52:8F
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer:       /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial:       0196A7D499F912A6B31A2ED09E524996ADE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 23:00:50 +0000
Manifest this update:     Tue 06 May 2025 23:00:50 +0000
Manifest next update:     Wed 07 May 2025 23:00:50 +0000
Files and hashes:         1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: 7FGnZx0el7Y/1JkVKE0LkXlY0Y/3W1a31u0gnsyBXjg=)
                          2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:99:f9:12:a6:b3:1a:2e:d0:9e:52:49:96:ad:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
        Validity
            Not Before: May  6 23:00:50 2025 GMT
            Not After : May  7 23:00:50 2025 GMT
        Subject: CN=b55a124bae9bf43d9e2a1b87053144768485528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:d4:f2:cd:36:fa:2d:2e:9e:4b:a1:42:65:
                    43:1b:ec:0a:0d:61:72:d9:ae:9d:af:b7:b6:43:43:
                    a6:3f:0f:b8:a8:04:e0:7a:4f:1f:35:83:2a:59:0c:
                    73:01:83:28:6a:98:91:b8:89:ab:7e:66:7a:aa:c2:
                    55:2b:3b:86:75:6e:d6:74:13:2d:90:a8:04:e6:63:
                    95:ec:4d:b5:31:77:35:8e:ff:f5:f1:06:fb:78:d1:
                    01:ac:a1:71:dd:dd:e6:24:5b:ff:1a:19:8a:08:b4:
                    60:ff:fa:dc:7e:98:c2:7c:65:45:35:3f:34:ec:a3:
                    81:d6:e8:4e:3f:f0:f5:b2:52:25:b6:3f:82:b8:d8:
                    1a:ea:e3:2b:50:fb:73:4e:40:ec:31:a5:a0:7e:12:
                    ca:ae:15:cf:80:c3:2a:c2:f0:43:73:2c:bf:26:1f:
                    e3:3d:8a:9a:1e:e2:0a:ea:98:c4:44:d2:9b:49:be:
                    83:c2:3c:7f:7b:51:69:85:d4:94:43:f6:11:aa:40:
                    ca:3b:66:4c:4f:51:a3:71:a1:f7:0b:91:b6:30:25:
                    ea:a0:74:c8:bb:05:99:88:3e:60:0c:8b:6e:c5:a1:
                    f1:0c:dc:47:a1:ec:b6:9c:8a:21:c1:af:7b:47:67:
                    9c:13:18:a7:86:4d:55:f9:8a:7a:4f:f4:4f:87:c8:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:12:4B:AE:9B:F4:3D:9E:2A:1B:87:05:31:44:76:84:85:52:8F
            X509v3 Authority Key Identifier:
                keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:03:a1:d4:e9:ca:c2:6c:2b:9a:5f:bc:83:29:11:a0:e6:fb:
         94:f8:ce:33:3d:a5:93:32:37:52:ff:59:96:ed:0a:6d:a0:c2:
         ca:ea:58:f7:c7:89:8d:26:5f:5c:50:bd:17:f3:b3:3c:9c:b0:
         25:3f:8e:7f:9c:9b:d1:32:ca:db:19:7d:0f:89:82:2d:53:9b:
         bc:f1:87:89:15:61:b2:76:5c:40:90:18:3d:69:f0:57:e0:ae:
         60:f8:72:cd:c8:26:ff:fb:a1:2d:e0:ab:d9:2b:1e:f5:6f:f4:
         8a:98:0c:32:45:25:58:98:93:0a:9b:94:89:da:21:ef:03:da:
         36:8e:79:b1:df:e8:1b:32:69:fb:cc:40:2f:52:d1:9b:03:46:
         d5:db:c0:ff:e7:f6:20:39:64:bf:14:e1:20:fb:8a:0e:0a:a9:
         c4:bf:59:83:c7:81:8c:18:46:88:e1:06:c8:51:9f:a6:9e:10:
         47:bc:40:22:a0:e2:8e:54:81:86:69:68:b1:b0:f4:24:8b:39:
         d7:40:7c:03:05:8a:0f:9f:df:50:ce:69:b0:0b:5b:91:35:c6:
         a6:19:5e:ef:f4:53:e1:83:7a:00:74:50:78:7f:e3:b9:dc:88:
         5c:09:db:94:99:ca:11:25:9a:16:36:1d:bd:59:80:26:e8:b5:
         3d:29:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:49:26 2025 by rpki-client