Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File:                     1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier:          6cAYVLTe0/V/EsFg9HSjSFf6M9/v8GdsXhdatWxFT6w=
Subject key identifier:   FD:44:04:9D:0A:87:B2:8B:55:23:4F:4E:BB:90:9A:68:5E:A3:74:35
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer:       /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial:       019674C25E0DA9E0EB012489FA47789C981E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number:          0162
Signing time:             Sun 27 Apr 2025 01:00:17 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:17 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:17 +0000
Files and hashes:         1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: grn3DtE/mnOsSuJHKaepjyMe3R54sl+yyc/yQQ9cyuU=)
                          2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:5e:0d:a9:e0:eb:01:24:89:fa:47:78:9c:98:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
        Validity
            Not Before: Apr 27 01:00:17 2025 GMT
            Not After : Apr 28 01:00:17 2025 GMT
        Subject: CN=fd44049d0a87b28b55234f4ebb909a685ea37435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:02:14:ca:84:a6:12:ad:6c:d7:d4:bc:ee:
                    7b:8a:b5:0a:95:80:9a:fe:79:14:2e:4d:1e:c4:76:
                    19:46:bb:c8:f9:46:04:ee:76:97:71:1f:72:8f:88:
                    ee:28:6d:a7:5f:89:2a:b0:37:a0:6b:bc:ad:ef:c9:
                    ff:d8:9c:ab:25:2b:6c:44:62:78:10:63:78:46:1d:
                    36:a1:9e:77:d7:6a:a9:dd:79:d6:58:29:9e:f8:41:
                    e1:88:44:03:0c:69:d1:bf:25:33:bd:76:14:0f:c4:
                    0d:5c:0d:a2:b5:b4:56:36:03:9d:19:93:84:05:fa:
                    09:42:da:c7:9f:e7:9c:af:8c:e9:75:5c:99:f4:ae:
                    06:58:f4:a9:19:70:59:0b:ab:5c:71:6d:bd:f9:13:
                    be:1c:02:eb:e3:5e:2d:ef:7d:d8:13:cd:62:22:6a:
                    be:e4:d9:a8:95:39:95:87:b6:f0:4c:52:1b:f3:c3:
                    dc:7d:b8:dc:ca:cd:ac:63:ad:4b:94:66:65:1e:54:
                    50:a1:62:96:e3:72:0a:92:9d:70:8a:c2:48:d7:53:
                    87:ae:61:13:6a:e1:24:3d:74:17:f0:3f:1c:6e:90:
                    5e:47:3b:0e:78:41:36:0f:76:fc:ad:a1:83:5f:dc:
                    de:81:30:28:a7:bb:a9:d3:17:a3:db:59:ce:58:91:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:44:04:9D:0A:87:B2:8B:55:23:4F:4E:BB:90:9A:68:5E:A3:74:35
            X509v3 Authority Key Identifier:
                keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:87:b1:f3:36:f6:c5:ca:50:77:6f:63:bc:a7:d8:a4:46:02:
         22:4e:1d:81:cc:03:d7:3e:af:9b:b8:0b:ba:51:98:d3:70:3b:
         c2:1c:fb:6b:65:05:b7:2a:39:b4:a1:06:ba:e4:eb:62:7f:58:
         5a:b6:61:a1:13:d1:92:1a:e8:b5:c0:e4:a9:3f:4d:ee:45:28:
         bd:10:93:72:9f:a9:e8:23:7f:eb:c6:8f:05:57:e1:f3:e1:c1:
         05:e2:c9:b5:58:23:e7:da:e5:08:f5:13:e4:d8:31:9c:c9:68:
         e4:2b:3a:56:82:b8:1a:f6:41:17:f9:21:b5:27:4e:f5:10:73:
         5f:e3:23:a4:f4:71:0f:f5:57:be:e5:05:ab:09:e5:12:46:fa:
         4c:6e:23:27:3f:c3:52:9e:06:a3:b6:6c:97:04:c6:c4:53:65:
         c5:c0:9d:84:16:85:ce:0c:3f:e1:6b:c3:99:f9:6e:5e:a7:44:
         53:26:05:e0:15:fd:5d:1b:7d:a5:bf:90:63:01:1b:b4:3d:a7:
         fc:9a:22:a2:35:84:70:7e:a3:b0:96:e4:72:9d:27:c7:de:82:
         c9:c4:4a:49:8a:52:76:05:ae:cb:24:91:4d:5e:b1:ef:b2:b1:
         80:89:1f:00:f0:f0:41:9d:af:74:61:00:be:e4:ed:f9:1c:75:
         76:5e:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:47:14 2025 by rpki-client