Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          Nxu0P+ATuZhKwhhA7r7vUWbwOAbbKbwe9H/GTAagOP8=
Subject key identifier:   44:A3:58:D9:B6:97:D1:01:5E:2B:88:C0:9E:D4:45:BD:C3:87:16:0D
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       0197711A3A3AEAC42C6CBD55AAD07B634CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          1478
Signing time:             Sun 15 Jun 2025 01:00:33 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:33 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:33 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: odvGXRYyApUg7/Wur3fsx6v6PxdKC1LOY2xa8G79wz4=)
                          2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:3a:3a:ea:c4:2c:6c:bd:55:aa:d0:7b:63:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Jun 15 01:00:33 2025 GMT
            Not After : Jun 16 01:00:33 2025 GMT
        Subject: CN=44a358d9b697d1015e2b88c09ed445bdc387160d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:f6:9f:52:f8:35:06:73:12:77:16:0e:68:
                    24:61:d6:47:49:d4:17:94:eb:9b:a5:fb:6a:af:80:
                    ab:95:ea:80:81:88:3e:56:e5:2d:fb:2f:90:8b:b9:
                    af:fd:b0:74:b1:e6:32:64:c0:e0:20:a3:0f:ab:08:
                    11:1f:00:5c:e5:58:2d:5c:da:bd:20:20:e2:93:ff:
                    b8:c4:84:b2:56:ac:b8:f5:da:d6:a2:8f:65:08:cd:
                    a7:96:8b:99:f8:e9:ba:39:c1:5e:7c:69:af:15:37:
                    77:d8:5a:70:2e:51:01:bb:ce:f3:17:f6:2d:14:25:
                    aa:d9:44:8b:59:5f:7f:0c:73:2d:f3:f0:b3:f9:dc:
                    3d:1d:31:25:66:15:60:cf:2e:b2:85:8d:19:ec:3e:
                    16:ea:e3:de:62:c4:ce:8b:54:36:88:e5:54:12:38:
                    d9:60:cb:f9:14:5c:46:85:de:01:34:4e:7f:2e:21:
                    6c:55:90:9d:39:d0:ef:ce:4a:88:2e:d1:5a:b5:8e:
                    cc:82:0c:6c:a1:08:3d:bd:ea:f0:8c:f9:48:da:59:
                    d5:7b:e7:95:71:58:47:e2:34:95:9c:ba:11:45:dd:
                    fe:6d:c1:a7:3e:5f:de:d7:07:b4:93:f7:fc:4c:39:
                    e7:d1:1c:ee:69:b9:d6:56:78:63:9e:46:08:fd:96:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:58:D9:B6:97:D1:01:5E:2B:88:C0:9E:D4:45:BD:C3:87:16:0D
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:9b:54:3d:07:e2:fd:37:22:cb:56:bb:06:cd:48:46:e1:
         5f:11:b0:0e:1f:58:0a:9b:44:60:96:72:71:33:29:55:9a:4e:
         e3:6b:1b:1e:64:9e:bc:67:15:7e:25:05:40:4c:95:8c:d0:f7:
         f6:9d:76:61:06:c4:0e:f6:d1:ce:94:90:a8:76:63:fe:ad:af:
         9f:b5:ac:97:3b:55:85:cb:ca:bd:77:8e:7b:09:8e:00:42:99:
         89:f0:a5:02:2f:0a:0d:e0:eb:e9:ea:0f:3d:9b:d4:bf:ab:cd:
         80:d0:59:73:bc:89:39:47:17:e0:9b:66:06:a6:df:2b:0c:17:
         ea:46:fa:8a:f0:73:85:da:26:d7:50:f7:ea:a9:12:1f:12:98:
         ef:b1:57:1f:87:57:a8:b9:fb:37:85:4f:74:34:de:ec:6d:0c:
         9b:f0:87:37:38:af:41:03:96:32:cb:fd:85:56:3b:12:15:f2:
         03:d4:40:ee:1b:2f:c3:2b:32:3e:e7:ad:5e:9c:df:ac:7f:9f:
         5b:74:1e:88:20:0f:1c:e4:a0:6d:a9:e9:5f:6f:0d:49:5e:96:
         16:d9:c3:74:b2:80:ac:e6:ff:ef:17:06:ee:11:70:e9:3d:ab:
         f8:f9:d8:59:48:7e:9f:52:18:b7:88:8c:c7:92:04:f7:b2:14:
         28:e2:85:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:37 2025 by rpki-client