Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          Q55LfmSiK2DfH1Xi5x3c8VPzDJe0czlx8lnHtCCP464=
Subject key identifier:   BD:A9:D9:BF:27:9B:22:BC:B7:AC:C5:E6:68:C2:45:9D:C3:5D:D2:32
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       019776E52E176D31AE079E3DDFF152099952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          1597
Signing time:             Mon 16 Jun 2025 04:00:20 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:20 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:20 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: SDzaWDhwKifRLvcT3N1LrgnS0+lgjWRFnXpd8xrMrEU=)
                          2: vUK0PWq2rYFX03NpI4glIwcP-yw.roa (hash: 7OmubHi4XYVC0tzd37LBLN6Yy8bTQM8VhrxlC/dBHqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:2e:17:6d:31:ae:07:9e:3d:df:f1:52:09:99:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Jun 16 04:00:20 2025 GMT
            Not After : Jun 17 04:00:20 2025 GMT
        Subject: CN=bda9d9bf279b22bcb7acc5e668c2459dc35dd232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:9e:87:05:13:ce:ee:96:92:d1:24:64:39:
                    7c:46:4f:75:72:0c:67:5d:5e:8a:06:0e:40:48:0b:
                    78:48:7d:3d:03:fa:ae:b4:39:39:b4:16:af:06:dc:
                    8c:a0:31:37:c6:53:b7:8c:82:71:6c:e0:e5:6f:d9:
                    7f:2d:84:ba:1e:83:b7:87:a7:4c:12:08:11:c0:bc:
                    db:ee:6b:69:f0:39:0e:75:f0:51:ad:34:3e:93:72:
                    b3:19:12:de:fe:57:a2:e3:a8:3b:28:d4:3b:5b:ff:
                    44:d8:c1:f1:47:9a:7d:0b:7f:0a:b5:9a:10:04:6e:
                    2f:53:09:33:aa:ad:c8:42:ac:22:22:e0:37:cc:8a:
                    ed:13:e9:ca:fa:ff:40:62:df:a7:86:de:a0:be:bd:
                    de:0b:49:6e:9b:97:35:f4:9f:00:22:3e:a5:22:12:
                    08:10:cb:3c:b1:69:e3:5b:29:60:bb:f1:ed:fd:97:
                    19:be:d9:5d:e2:9c:26:7f:9e:46:e4:a0:43:d6:2f:
                    4b:d5:63:51:7c:26:c1:6e:1f:b6:f0:62:5b:14:83:
                    3f:95:12:76:e0:c9:89:48:b8:02:bf:ca:af:d7:e4:
                    e4:a4:72:68:ce:8b:26:93:80:ec:cb:f2:95:90:58:
                    66:0e:f9:af:00:7e:4a:ce:4d:10:20:ee:0c:9e:15:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:D9:BF:27:9B:22:BC:B7:AC:C5:E6:68:C2:45:9D:C3:5D:D2:32
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:21:91:9c:61:4c:4d:68:9f:8d:2d:a1:0c:2d:7a:24:81:
         76:ec:cb:3e:4b:9b:99:c1:38:ef:06:4f:af:77:6a:c1:2d:e3:
         99:ad:3a:a9:61:2e:49:7a:35:a8:bd:06:c7:30:2f:d2:cf:73:
         65:01:ac:0c:7e:7c:b6:30:46:04:2b:41:a0:3f:c4:41:c1:1f:
         99:e3:17:cd:42:7c:91:b7:bb:b6:7c:b4:8f:e3:85:a7:1d:11:
         e2:d9:1c:44:20:cd:94:4d:e0:52:f6:2f:00:4e:c2:92:a1:03:
         46:76:f1:bb:0a:a6:96:9e:db:21:7e:15:83:6d:69:b1:3f:be:
         eb:c8:4f:7d:1e:7b:30:05:ab:32:62:33:d8:4b:7f:a9:6d:fa:
         43:a2:91:47:c2:8a:01:22:fd:d7:a5:14:5c:c5:b2:7f:52:69:
         82:19:a4:6b:6b:5a:3e:2c:38:18:a2:b3:19:75:96:34:d3:79:
         98:69:13:f5:51:6f:2f:b9:ce:18:93:2f:cc:db:42:96:3b:c3:
         82:3c:4e:f0:7c:d8:fa:a6:09:21:0b:01:7d:68:3b:61:56:d8:
         7b:e4:a1:be:4c:a7:33:41:fc:79:ae:f3:19:0d:be:30:8c:0a:
         66:ab:25:b7:6d:aa:15:c2:6d:be:5e:30:4e:92:99:c2:c6:0b:
         d0:eb:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:36 2025 by rpki-client