Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File:                     1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier:          qr+TUVZikSv+k0Dn63bjv+ShcuW5LfrOoemEvNWKeMA=
Subject key identifier:   D4:16:84:D4:EB:10:AC:F2:79:FA:A0:05:C5:16:DB:C0:F0:A0:E8:3B
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer:       /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial:       019782E9C157D1B391EBBE9DFACC29133924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number:          0473
Signing time:             Wed 18 Jun 2025 12:00:46 +0000
Manifest this update:     Wed 18 Jun 2025 12:00:46 +0000
Manifest next update:     Thu 19 Jun 2025 12:00:46 +0000
Files and hashes:         1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: EWW0HlLj4fPZSWxkoPdxgSds8RNXEwzh2xudTULekpE=)
                          2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:e9:c1:57:d1:b3:91:eb:be:9d:fa:cc:29:13:39:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
        Validity
            Not Before: Jun 18 12:00:46 2025 GMT
            Not After : Jun 19 12:00:46 2025 GMT
        Subject: CN=d41684d4eb10acf279faa005c516dbc0f0a0e83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:11:2d:a7:a5:42:93:49:d0:46:e8:10:8b:
                    aa:1b:f9:40:fb:fd:64:5c:09:c1:d2:00:cd:9a:83:
                    0c:26:7a:bb:62:e7:1b:2e:3d:f0:54:ad:52:98:4f:
                    6b:ba:dd:42:91:65:44:f3:38:e6:18:42:a0:72:71:
                    1a:42:b9:68:7b:b2:c2:40:21:c6:14:7e:07:a2:40:
                    87:aa:d1:d4:28:bf:50:1b:36:67:b4:99:06:78:a4:
                    78:03:c3:41:e2:c6:2a:7d:85:92:07:61:d9:ac:ef:
                    e9:1a:87:a1:19:72:18:09:ca:17:80:d7:2d:f0:af:
                    95:2f:7c:a5:87:7a:7d:1b:5e:a2:9e:0d:0f:a5:e6:
                    2c:2a:99:32:a0:3b:ee:91:1c:04:da:93:59:18:a0:
                    03:22:c2:8d:64:fc:13:1a:61:f0:0f:b9:10:6c:f8:
                    a9:25:fe:66:2d:fe:bc:a9:0a:a8:b1:ab:fd:f7:d4:
                    92:ba:37:bb:e3:0c:f6:85:ca:0d:bd:4b:b1:90:e6:
                    e1:9f:88:fa:a7:4a:f7:5b:d2:05:4c:5d:8a:d6:38:
                    b8:65:b1:7b:ac:e6:ec:14:e6:ea:75:2e:55:44:17:
                    bf:b0:c0:3e:df:73:d5:e9:65:9c:c3:9d:ca:f5:54:
                    59:8e:d1:a0:ab:2c:4b:d5:1f:37:b8:43:16:a3:7f:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:16:84:D4:EB:10:AC:F2:79:FA:A0:05:C5:16:DB:C0:F0:A0:E8:3B
            X509v3 Authority Key Identifier:
                keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:da:2d:ea:70:5e:e3:fc:b5:cc:3a:9a:76:af:8a:44:b6:
         08:ee:18:b9:3a:8e:24:ba:c3:4f:ff:9f:bb:44:26:d8:86:01:
         32:87:b3:42:49:49:19:df:67:ed:db:f7:39:1a:d8:9b:af:f4:
         36:32:3d:19:7f:0b:47:20:d6:c3:b3:56:6d:ed:25:26:05:a7:
         61:09:db:a5:52:b8:ad:f6:3c:30:c6:f2:12:59:60:56:24:c6:
         d7:93:ae:a3:a5:0d:9f:3f:6a:92:66:5d:e6:a9:ce:89:5f:3c:
         78:2a:bc:72:45:a3:28:70:9e:10:f8:be:20:b4:8f:d4:ed:a6:
         4f:a1:15:ba:25:f3:53:e2:b0:86:d0:69:d4:95:b1:d3:f6:6e:
         bf:e6:c1:14:60:05:da:61:21:db:dc:8a:84:6d:9e:da:cd:41:
         15:6e:b3:a2:e4:46:16:32:4b:c6:64:3b:df:7f:55:f1:d9:da:
         ca:31:0d:b6:2a:53:d4:e2:0d:ff:52:b7:11:43:05:f9:8e:c9:
         b4:7f:6c:12:ec:8e:dd:64:f9:4c:25:c4:2f:94:dd:7b:f1:b0:
         5e:28:04:22:b7:f0:77:cf:8d:aa:51:a5:70:b9:be:56:66:9d:
         f5:31:47:97:c9:26:16:66:e7:2f:73:a4:24:30:e4:b3:8e:af:
         35:f7:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:06:36 2025 by rpki-client