Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
File:                     1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json)
Hash identifier:          jh3OQqaFRjTAx3DefPDlWnjyVxgIfLxqHrIga4TxpHc=
Subject key identifier:   F3:4B:D1:5E:0A:52:34:9B:01:B4:27:91:DE:36:2D:BB:94:5C:CA:5C
Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
Certificate issuer:       /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Certificate serial:       01967F45F7935DADE73C0BD9567FD1F9B61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
Manifest number:          0E
Signing time:             Tue 29 Apr 2025 02:00:13 +0000
Manifest this update:     Tue 29 Apr 2025 02:00:13 +0000
Manifest next update:     Wed 30 Apr 2025 02:00:13 +0000
Files and hashes:         1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: laFO3booeiiS3ADm3sYXy2Igns63BHG0VfSjd06cs74=)
                          2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:45:f7:93:5d:ad:e7:3c:0b:d9:56:7f:d1:f9:b6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
        Validity
            Not Before: Apr 29 02:00:13 2025 GMT
            Not After : Apr 30 02:00:13 2025 GMT
        Subject: CN=f34bd15e0a52349b01b42791de362dbb945cca5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:36:4e:dd:fb:55:73:b2:2f:08:52:23:39:
                    89:5d:d5:48:40:02:7d:73:74:8d:9d:0f:d7:f3:ce:
                    24:4f:7a:ef:f5:f1:95:de:e2:4c:0d:1b:f1:a8:64:
                    53:bb:dd:f8:93:66:1c:ce:42:72:ee:52:f5:90:71:
                    ea:d3:df:bf:f4:35:a4:90:69:c4:6f:d5:57:27:fa:
                    ab:ad:14:50:15:87:e8:9b:bd:53:fa:d2:9e:7c:1e:
                    dc:bd:3b:3e:bb:ce:9e:9f:b3:8c:21:e6:86:f9:5f:
                    fc:73:c1:27:ff:97:36:65:64:7c:8e:6b:42:13:2f:
                    64:76:ff:eb:ea:15:9c:7f:63:a4:d0:13:83:48:fc:
                    75:9d:d4:c6:73:47:40:a7:0b:e1:2a:75:67:12:05:
                    c6:7c:29:0b:5a:52:9a:c5:c9:e9:52:34:c0:40:8d:
                    9f:bf:d4:5f:d3:a2:84:51:52:c5:43:25:62:f5:6e:
                    9f:96:d0:03:4d:b3:3a:52:4d:a0:ad:a0:05:24:b2:
                    89:90:59:6a:b5:9d:a4:6f:4b:c7:8b:e4:cd:b3:a5:
                    3e:25:12:18:71:93:3d:1d:f7:fe:4c:e6:96:4b:3b:
                    46:5d:6d:0e:7d:92:df:76:15:60:08:9f:82:74:93:
                    a8:5b:a7:24:c3:99:69:59:f1:48:64:d4:af:6d:00:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:D1:5E:0A:52:34:9B:01:B4:27:91:DE:36:2D:BB:94:5C:CA:5C
            X509v3 Authority Key Identifier:
                keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:31:9e:6a:3f:72:ca:03:c2:b6:4c:a5:04:d9:c9:f7:d7:
         88:e5:75:2c:7e:60:80:cd:d2:ad:d1:c7:56:e9:c5:26:d4:ce:
         05:eb:ae:63:57:64:fe:b1:3f:fb:ef:11:6c:77:01:3f:29:89:
         b3:2b:d7:c4:73:46:0c:7f:1d:d5:b7:62:7e:5c:e0:31:3f:04:
         78:13:07:43:7f:57:60:83:23:e5:b9:12:ee:56:94:05:bf:8b:
         09:90:ac:ce:68:de:a2:86:69:f5:7d:46:09:d4:61:a3:7f:82:
         6f:51:f7:af:9e:f8:6b:9b:69:d0:26:a0:2a:c5:88:92:70:02:
         49:06:b9:65:4b:bc:19:f5:9b:24:da:72:89:70:88:54:bd:68:
         a1:f6:50:56:ec:95:51:0f:dc:70:88:99:5e:26:5b:c9:1f:71:
         d5:f7:18:b8:7a:7a:bf:7a:3f:3e:11:f1:01:af:bb:ba:1f:30:
         2f:20:04:71:07:fa:88:e8:4a:70:ea:8a:41:25:64:08:83:f4:
         58:3a:71:88:d9:1f:36:d8:06:ea:b9:39:a0:2a:4e:16:17:a2:
         7f:34:8c:7a:70:23:95:02:3a:3e:72:85:02:a1:ef:d3:14:ac:
         68:8f:05:32:ce:e7:73:30:1a:60:63:38:90:ad:e1:f9:5b:39:
         88:1a:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:05 2025 by rpki-client