Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          I9x7KxxI0VUIXin/a3uvm8uvwhVs9TY2M/+HWekWOL0=
Subject key identifier:   D4:D4:16:85:D0:8C:8E:B3:C1:3D:37:7B:58:C7:8D:D1:8F:D2:B5:D0
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       01977A1D7234AE8041CDA0042724882B0A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 19:00:39 +0000
Manifest this update:     Mon 16 Jun 2025 19:00:39 +0000
Manifest next update:     Tue 17 Jun 2025 19:00:39 +0000
Files and hashes:         1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: XOAsVmRrZ7iwdT+zPCERdIuRQVOFNRgiWxF3+ul71+Y=)
                          2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=)
                          3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=)
                          4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=)
                          5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=)
                          6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:1d:72:34:ae:80:41:cd:a0:04:27:24:88:2b:0a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Jun 16 19:00:39 2025 GMT
            Not After : Jun 17 19:00:39 2025 GMT
        Subject: CN=d4d41685d08c8eb3c13d377b58c78dd18fd2b5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:1a:69:d5:d2:df:f2:86:c4:0f:7e:77:fa:
                    a3:df:a8:52:f5:01:1b:2d:57:cd:b2:70:da:a9:f9:
                    59:1e:52:33:8a:be:e8:9b:97:24:a4:17:b9:8a:2c:
                    27:fe:aa:5e:05:48:2d:03:89:ad:9c:c7:7d:0f:41:
                    2a:8d:f2:2d:0f:41:1b:69:0a:05:43:77:2e:cb:b4:
                    4b:35:87:ac:5c:55:8c:e4:01:99:ad:71:98:fe:c3:
                    f8:c7:64:33:20:8c:b2:04:a9:18:b3:08:58:2a:88:
                    63:a2:23:c7:e6:81:13:ff:57:97:fd:8e:ac:4b:5c:
                    7c:67:cf:b3:ec:fb:75:a6:68:e5:35:50:6b:71:02:
                    aa:a6:38:60:42:26:8f:a3:92:5a:8a:e2:9a:d0:22:
                    3a:95:ad:b5:d8:5e:57:b5:ef:82:53:2e:da:38:b9:
                    20:61:49:73:de:58:8c:a1:ea:96:76:31:84:39:3c:
                    82:4d:db:93:56:5a:d0:48:07:3c:33:73:1e:cd:63:
                    60:80:2d:58:53:16:18:7f:e3:df:b7:32:ff:8d:43:
                    7b:b9:38:1e:cd:10:81:de:0b:d1:52:d8:a3:c2:22:
                    97:b8:b9:bf:22:41:1b:70:55:28:b5:6a:3e:f2:9a:
                    53:4c:7c:16:2f:7a:66:5a:f4:13:35:10:f9:c7:b2:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:16:85:D0:8C:8E:B3:C1:3D:37:7B:58:C7:8D:D1:8F:D2:B5:D0
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:65:42:7c:4f:e5:ef:66:e0:dd:9b:02:13:58:8a:90:79:4f:
         4a:eb:34:75:5e:46:26:9c:19:a5:c3:b0:16:8d:dc:11:f7:c0:
         30:8a:ca:e0:b8:42:0c:19:f8:e4:23:1f:42:33:b7:b0:e9:97:
         70:0f:a7:d0:48:2d:28:18:91:42:5d:7d:e0:61:eb:09:f1:92:
         f6:bd:fa:12:db:08:1d:01:98:7f:bc:24:db:bb:68:23:8a:a5:
         2a:9b:ef:41:b2:0b:10:9d:c1:18:f8:d9:5f:e5:76:2c:a2:7b:
         2e:b2:47:af:fc:57:de:b8:2c:56:2e:a0:4b:80:d1:7e:93:dd:
         f5:04:6a:3f:87:25:d1:63:49:49:e6:a7:fd:ff:ea:23:60:f5:
         d4:d4:51:ca:31:74:e7:f9:90:34:45:16:82:61:1f:9c:0a:fb:
         55:b3:02:46:42:f8:08:96:97:a1:05:c4:b2:48:7e:3d:d6:fe:
         65:27:ac:f4:45:f9:96:ac:52:96:54:92:21:0c:45:15:86:ce:
         a9:38:a2:a5:0c:7e:d4:aa:4f:38:45:9f:c1:cc:4f:b0:67:c6:
         d7:8a:1e:d0:26:52:c7:cd:34:3c:c6:7a:fb:92:3b:0e:15:7d:
         8f:e0:06:cb:4c:72:fa:25:80:69:2b:57:3a:d6:f2:7b:9b:73:
         d9:ed:4e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:29:42 2025 by rpki-client