Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File:                     dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier:          a2e/udJ+2WbKSOiRJVaiPA8n+n/ZqJubTLBPoCcPnFU=
Subject key identifier:   01:05:1A:92:B2:D9:91:0B:4A:60:61:71:65:7E:2C:8B:63:87:DC:57
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer:       /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial:       019773091FB5E533459D2EC33B118223CEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number:          1590
Signing time:             Sun 15 Jun 2025 10:01:07 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:07 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:07 +0000
Files and hashes:         1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: V20j6vOooere+sOVRWF3OSttJeYoHfEMabsP3QyjWPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:1f:b5:e5:33:45:9d:2e:c3:3b:11:82:23:ce:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
        Validity
            Not Before: Jun 15 10:01:07 2025 GMT
            Not After : Jun 16 10:01:07 2025 GMT
        Subject: CN=01051a92b2d9910b4a606171657e2c8b6387dc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:99:21:6c:58:ab:0c:bc:fa:c1:04:29:50:
                    31:8a:45:f2:81:d0:3c:3e:8f:f5:0d:ba:e9:2f:c1:
                    5d:10:a9:64:77:9b:d0:4b:d5:e6:0c:13:95:a3:64:
                    d8:2a:ec:31:06:96:d0:1b:79:28:e4:bc:cb:0e:e5:
                    dd:dc:13:12:e9:6e:13:c8:fd:38:e9:b2:98:eb:4a:
                    11:e5:d8:c6:b2:d2:bd:eb:57:dd:9d:db:6d:d0:a7:
                    8c:fc:a3:b3:1f:ab:c1:bf:bd:a5:3b:63:1f:a4:60:
                    89:5d:7e:7a:ac:59:10:95:1a:3b:7b:e5:27:6e:21:
                    fa:61:af:14:cd:b9:d6:b1:3b:ab:ab:00:b0:f2:65:
                    67:22:33:d2:d0:98:85:49:67:65:82:d3:d3:96:28:
                    4b:f4:ba:5d:26:a6:54:a9:e7:4b:34:76:fa:18:cd:
                    59:18:37:5f:a2:ac:d2:4d:f0:87:42:f1:7c:ac:1f:
                    3f:86:cf:c4:57:c6:6d:23:fb:a1:09:82:25:65:d6:
                    48:60:cc:95:f7:46:f4:a2:0d:c8:43:ab:22:19:ca:
                    b6:2b:05:4b:b0:23:f4:34:79:e3:22:26:5a:53:3b:
                    07:a5:4a:63:de:54:79:41:b8:2d:6f:a8:a2:0e:07:
                    d8:8d:64:f0:9b:35:25:bb:f4:3b:80:87:09:4f:f5:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:1A:92:B2:D9:91:0B:4A:60:61:71:65:7E:2C:8B:63:87:DC:57
            X509v3 Authority Key Identifier:
                keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:c1:48:a7:3b:51:b3:0c:f5:3c:d6:81:a9:b7:49:c8:e6:
         82:a0:e1:2b:28:c6:ec:43:52:f8:aa:71:0c:62:dd:96:29:ef:
         17:63:0c:37:65:e3:59:f0:19:b8:49:3d:9f:24:b3:7a:b9:fa:
         05:d3:03:33:a5:8c:f9:d6:08:39:29:41:3e:3b:92:79:94:ae:
         2e:1d:a4:cf:b8:59:dc:fa:75:fe:43:f2:eb:67:fe:ea:6d:6f:
         0f:3a:fd:00:11:7c:1b:87:ea:6f:01:0a:0d:e0:7e:84:2a:7b:
         e3:a3:06:ca:a6:92:d2:4f:03:24:14:90:ff:a0:64:1c:62:62:
         41:49:0b:ec:ea:9c:b9:ea:d7:ce:ae:04:01:7f:ff:e6:ed:21:
         29:ff:d0:fa:40:57:ff:4a:66:0a:c4:23:d0:bd:2a:fe:26:7f:
         df:be:82:1e:9d:17:0c:d0:12:a8:84:5b:c3:25:94:67:c4:f1:
         04:c6:4d:60:3f:43:f4:04:42:19:8b:13:a1:ca:1f:6d:72:34:
         00:e3:c5:cf:23:04:5c:04:92:1a:30:d9:bd:e9:bb:53:3b:8f:
         e9:d8:fe:d8:28:91:02:cc:d7:69:a5:79:13:10:67:ce:bc:f6:
         49:86:60:54:b8:f7:fc:00:d0:9c:ed:c1:96:48:9e:07:ef:c4:
         7a:84:12:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:54 2025 by rpki-client