Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          m+EpXgYGWiY7FsMVN+U4Dbf0158ubKltGRkDYNUtUpo=
Subject key identifier:   85:66:C6:7B:1F:5A:B2:B9:1D:93:00:33:66:3F:70:24:F0:1E:F6:C4
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       019677FB13CDD5012FE16678B8AB53765187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          0263
Signing time:             Sun 27 Apr 2025 16:01:05 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:05 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:05 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: G7khpkAGg9bRgvxcg54Ja1D5AKGVkEsJkv6pdp7j6Ew=)
                          2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:13:cd:d5:01:2f:e1:66:78:b8:ab:53:76:51:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: Apr 27 16:01:05 2025 GMT
            Not After : Apr 28 16:01:05 2025 GMT
        Subject: CN=8566c67b1f5ab2b91d930033663f7024f01ef6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:2d:a9:71:e5:20:8e:f0:d9:ea:b4:ab:a2:
                    c3:35:26:0d:e3:a8:13:17:01:ea:24:7e:dd:00:54:
                    d5:33:8c:00:da:be:7d:0e:ea:fa:8d:b9:a6:6f:56:
                    79:3e:bb:98:8c:33:e7:a7:75:7e:80:2f:fc:6b:0e:
                    43:c1:af:88:26:75:2f:9d:47:35:2f:94:ac:b7:3d:
                    02:e1:61:32:1c:39:dd:85:75:a0:f9:71:b5:af:c1:
                    0b:15:2a:0f:d9:d7:b2:ec:28:f9:06:f7:d8:11:96:
                    be:d6:3b:a7:b1:70:86:10:40:2c:b8:68:2c:57:8a:
                    02:55:91:c7:a4:11:27:3e:4f:09:d4:2b:36:1e:f2:
                    8b:58:f9:38:c2:f8:ea:dc:70:69:dc:9e:96:f3:61:
                    a6:21:1c:f7:16:40:0a:ce:2a:6d:0f:95:00:50:d0:
                    d6:a4:f0:69:a6:7a:ce:93:3b:32:6f:3b:ef:73:e0:
                    c4:3b:52:60:07:99:19:42:a2:11:b3:45:5e:26:7b:
                    20:68:09:ff:c5:44:5a:6d:c8:04:13:77:19:db:33:
                    9f:a3:6f:d4:4e:4d:ce:51:a9:ae:79:24:e5:58:be:
                    1b:0f:04:df:d8:82:dc:a5:fd:a3:41:03:92:85:16:
                    91:da:6b:65:f7:78:ae:1f:48:9e:55:d1:d7:5e:34:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:66:C6:7B:1F:5A:B2:B9:1D:93:00:33:66:3F:70:24:F0:1E:F6:C4
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:73:e0:e8:4c:5b:56:d6:91:74:b7:48:ed:38:3a:19:2f:c3:
         08:5e:cf:af:fc:96:d5:07:58:83:e4:c6:80:82:f4:b5:0a:fd:
         77:7e:77:92:fc:96:b0:2b:56:3b:9a:77:05:26:0f:b1:f1:af:
         cd:6b:95:c6:a0:3b:b4:9c:59:23:35:f3:fb:44:57:d4:10:38:
         02:c5:b4:9a:26:35:80:13:62:b2:a0:21:e4:a5:57:69:3b:c7:
         73:37:88:a8:c7:1f:34:12:ae:84:0f:8c:5e:87:07:eb:e1:3c:
         77:65:e0:fc:2f:b7:d0:87:04:f4:14:c9:15:76:38:00:2a:2b:
         ce:e0:fc:22:29:5a:33:4e:af:3b:f8:bc:9c:0c:f4:60:42:38:
         3a:84:d6:ff:64:76:6f:06:96:2c:4b:90:30:70:02:e3:dc:d4:
         97:23:63:90:06:04:a8:69:62:5d:7b:4c:4d:f7:0f:bc:f4:f5:
         09:f7:7a:26:c6:0e:65:d8:29:f9:b1:0a:70:de:4e:f3:92:9d:
         64:52:1c:06:ef:a9:11:c1:6c:00:f3:f8:b6:72:60:42:40:ce:
         f6:2e:39:7c:af:ba:11:d2:a2:36:a9:a6:3e:a4:e8:71:db:14:
         d7:61:88:96:c8:3a:b7:ff:ad:6a:a9:86:28:78:b0:3d:aa:1b:
         9f:51:e2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:49 2025 by rpki-client