Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          3+Tf5Uapqec6dIYDdhZLSyQqODQfsbWBOHlrHJx6vKs=
Subject key identifier:   A2:1D:3A:10:0B:C5:F5:CB:23:D4:CF:F4:59:C3:BF:4E:8B:D9:B8:CE
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       0196BC0018F5FB4A85B8516348A0BE271B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 21:00:44 +0000
Manifest this update:     Sat 10 May 2025 21:00:44 +0000
Manifest next update:     Sun 11 May 2025 21:00:44 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: OIgP1unA4K67ebpZGldXvz0hPJM/ujiV9fghhHoZNJ4=)
                          2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
                          3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
                          4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:18:f5:fb:4a:85:b8:51:63:48:a0:be:27:1b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: May 10 21:00:44 2025 GMT
            Not After : May 11 21:00:44 2025 GMT
        Subject: CN=a21d3a100bc5f5cb23d4cff459c3bf4e8bd9b8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:05:8f:f5:a5:dc:6e:ec:29:da:ae:29:fd:
                    7d:2d:6a:2e:f7:99:7a:ac:b5:09:a3:aa:03:2f:b1:
                    93:0f:d6:98:ca:af:a4:f2:05:c1:90:c6:1b:a4:fd:
                    e3:95:b1:8a:d2:5d:2d:4f:3e:80:40:c6:aa:b3:2f:
                    69:06:2d:08:a3:94:2b:bb:49:85:84:96:51:d9:f3:
                    c7:ef:22:c6:c0:51:12:6d:2a:f1:51:8c:9a:a7:bb:
                    fb:ab:84:11:c1:ee:34:6d:ec:aa:6a:c8:50:ba:bd:
                    91:a3:40:58:ac:a5:0a:fc:a3:fa:0c:08:8f:bc:51:
                    04:65:02:e3:39:33:1d:2e:3c:b7:1f:d1:4c:ee:5e:
                    8d:cc:4d:50:4f:bd:aa:7c:90:be:11:c6:bf:92:e1:
                    dc:e3:f3:91:75:0a:cd:34:b1:82:c9:d4:9d:51:20:
                    5f:ac:ca:2d:3e:07:a1:ba:a5:57:f4:fb:d1:ee:90:
                    74:95:dc:8e:9e:7f:5b:f0:7d:34:cf:bc:39:68:9c:
                    61:74:10:88:8d:40:cb:4a:8f:05:cf:b5:28:24:be:
                    2b:83:b3:0a:1f:b5:ad:06:67:a1:b6:39:67:49:63:
                    64:ce:c7:30:8e:d0:ea:1a:07:a2:08:ac:f6:39:59:
                    bb:46:80:7c:d9:7a:55:a2:b5:4d:2a:30:2b:7a:2c:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1D:3A:10:0B:C5:F5:CB:23:D4:CF:F4:59:C3:BF:4E:8B:D9:B8:CE
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:9f:a2:c0:a0:1a:bb:fc:fc:24:ea:2c:a4:46:f3:38:ec:
         92:7a:b8:3f:98:dc:ce:a7:e2:73:f7:f0:b8:10:2a:9f:6d:5a:
         fe:93:33:cc:52:38:74:10:78:32:32:b6:8a:20:4f:d7:76:b5:
         99:ff:ea:fb:c9:0b:ce:38:76:0c:c5:10:ee:08:07:1c:5a:36:
         47:b9:f0:92:ad:4e:18:9a:92:64:2f:f5:f9:0d:85:d6:f5:ef:
         a9:bb:46:90:18:15:27:e5:70:69:9c:52:b9:94:54:e5:89:07:
         b9:58:90:e9:57:1b:15:37:e6:99:c6:48:ba:1f:24:af:f6:73:
         d3:75:95:78:3d:36:22:eb:d4:41:92:dd:bc:2b:0f:62:f3:0c:
         cc:10:4b:ce:3a:25:03:00:1d:0a:58:68:80:a9:0d:f6:16:9c:
         40:ef:6c:58:5e:69:67:59:65:bc:91:5a:f8:e7:d1:29:cf:ea:
         3c:80:92:3a:5c:82:96:3d:a6:aa:5c:1d:e1:0e:50:c0:6f:a6:
         ab:6e:d6:37:0f:c5:cf:bc:de:53:18:e2:be:8a:1c:bf:d9:24:
         c8:5f:cf:45:6f:f5:f2:a4:b3:85:66:c4:2c:f6:87:29:3e:d4:
         0f:a1:d0:48:47:94:ca:33:09:bc:2f:af:a0:5c:ce:86:81:6c:
         b4:51:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:53:14 2025 by rpki-client