Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          ztA5U8dhW4IRtKwedyfU1E99lXX0e6a0rcC+iS7ntQs=
Subject key identifier:   17:46:2B:6B:42:AD:5E:02:08:C4:17:08:6C:18:1C:6A:D7:B7:33:79
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       019695CE5EBBDA08EB23CB2BFFA6764512BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1521
Signing time:             Sat 03 May 2025 11:00:51 +0000
Manifest this update:     Sat 03 May 2025 11:00:51 +0000
Manifest next update:     Sun 04 May 2025 11:00:51 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: qHhPeq8H+2HSwufckHaSbwe4D2cOMJ5KFIk3ZUNgwxY=)
                          2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 10:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:ce:5e:bb:da:08:eb:23:cb:2b:ff:a6:76:45:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: May  3 11:00:51 2025 GMT
            Not After : May  4 11:00:51 2025 GMT
        Subject: CN=17462b6b42ad5e0208c417086c181c6ad7b73379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:d7:32:eb:0a:39:b7:e6:b6:b0:a1:0e:11:
                    5f:4c:60:87:bc:6a:31:85:55:c0:d8:67:65:50:ff:
                    a5:85:39:58:b6:d5:a0:47:cd:39:28:cd:d2:2b:88:
                    14:87:72:46:7a:1e:d4:d2:26:49:24:59:5c:6c:91:
                    e9:b2:6c:b4:b4:9e:f6:39:75:94:ed:a8:89:27:d9:
                    b7:55:cf:5d:de:45:54:70:2c:19:6c:ae:c1:82:98:
                    15:4d:48:12:6c:a8:bd:da:ed:7a:11:d8:cb:c6:8a:
                    7b:d3:d5:d0:09:1a:5a:b7:a5:9a:c8:f7:3b:18:89:
                    3c:eb:fd:f7:bb:be:6e:17:5b:0c:96:5e:e6:f5:77:
                    63:fb:ec:01:72:c0:c5:8a:2f:a4:f6:41:18:f9:4c:
                    2a:2f:f5:b9:72:8b:10:a6:f0:2c:43:d8:51:73:16:
                    a8:ce:79:42:96:69:32:67:9c:5c:50:3a:e9:d0:76:
                    74:7a:98:e2:e5:82:1f:99:b4:dd:dc:42:67:8a:09:
                    4d:4d:83:f4:d6:e3:29:e1:7f:38:08:4b:99:de:a3:
                    c2:99:d9:70:f7:40:92:dc:ca:0b:0a:42:26:50:43:
                    e6:76:43:71:5d:da:28:9b:78:ad:39:67:81:6f:22:
                    92:51:36:a4:36:41:bc:3f:e2:df:4c:44:52:73:14:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:2B:6B:42:AD:5E:02:08:C4:17:08:6C:18:1C:6A:D7:B7:33:79
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:df:98:0a:b5:df:b0:ad:1f:18:07:3c:b9:1d:be:d3:1b:
         72:d2:ed:c3:08:b8:40:83:aa:ad:95:37:f7:a8:ea:37:64:8c:
         a7:72:95:76:36:44:16:95:ce:4b:07:37:c5:fc:95:6a:21:e7:
         b1:6f:33:6f:ca:2a:a1:f0:36:a2:30:71:f2:f1:e3:a9:72:76:
         fa:21:f6:4b:e7:af:ae:67:f0:18:a4:08:64:5b:9d:1e:31:f6:
         ab:1c:5e:a5:d8:4f:cc:6b:ad:8e:43:7f:be:c1:76:2f:8b:af:
         12:13:f4:35:11:43:eb:48:a8:5e:ae:b7:1f:db:20:33:a6:9a:
         fe:4e:96:4d:9b:10:b6:d0:83:0c:fe:d8:65:24:c5:8d:a4:47:
         14:40:a2:14:17:c0:9e:5f:44:fc:39:28:e4:91:a2:e6:df:35:
         75:67:1f:41:69:cc:a5:f0:2b:77:01:84:36:fc:18:31:22:a9:
         de:17:f9:db:69:d0:f2:32:24:b8:00:11:56:d9:fc:f0:c9:62:
         5b:9e:61:81:34:38:c6:85:c5:0a:00:30:74:7b:0a:6b:c2:87:
         43:06:50:fb:6f:1d:2d:35:0b:c9:76:a8:cd:64:cb:1c:87:76:
         7f:52:23:8d:09:07:42:59:8d:77:a9:ce:ac:39:43:0d:24:36:
         e2:0e:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:45:18 2025 by rpki-client