Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File:                     N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier:          BwPU/OoD8/vUEgQwKTAqH8oggPeD6jbqpT22m/A77UA=
Subject key identifier:   69:3A:E9:51:C2:82:AA:1E:68:66:C1:AC:D2:4C:94:A0:30:BF:14:42
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer:       /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial:       0196846D07AB36DD92E0573B32E475869E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number:          1254
Signing time:             Wed 30 Apr 2025 02:00:59 +0000
Manifest this update:     Wed 30 Apr 2025 02:00:59 +0000
Manifest next update:     Thu 01 May 2025 02:00:59 +0000
Files and hashes:         1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: nQI4o2GQu2k+tz/Q03gRVJ/zVzFQ+qYp2X/4J0KLkgo=)
                          2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:6d:07:ab:36:dd:92:e0:57:3b:32:e4:75:86:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
        Validity
            Not Before: Apr 30 02:00:59 2025 GMT
            Not After : May  1 02:00:59 2025 GMT
        Subject: CN=693ae951c282aa1e6866c1acd24c94a030bf1442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:1a:3f:a1:d7:50:e2:8e:7a:62:12:e9:5f:
                    a1:20:98:f7:a4:84:26:dc:d1:2d:c9:fb:32:40:77:
                    ff:f5:50:86:10:dc:45:ca:f5:e8:af:3d:98:3a:19:
                    28:01:51:2e:f2:93:e9:57:8a:10:15:76:9d:44:1e:
                    49:bc:f6:fb:fc:6d:48:01:1d:98:d4:ec:a0:46:bd:
                    34:86:a7:bb:fc:f8:79:72:d3:9b:87:a0:ec:da:a2:
                    21:15:3d:ee:bf:38:8a:e6:b7:90:4a:e5:00:c1:87:
                    81:88:c3:21:9f:52:15:ed:51:77:ce:01:8d:ef:92:
                    bf:07:29:79:0c:22:28:82:9f:08:61:c4:bf:5a:37:
                    78:07:19:29:42:53:90:c4:7d:f9:ff:e3:4b:13:97:
                    f4:d6:37:a3:11:e9:09:f7:fd:03:5c:0a:39:b7:8e:
                    3d:68:f0:9b:67:6c:06:b2:a7:87:3c:98:8c:58:b4:
                    90:c0:8c:73:48:e5:aa:80:47:97:5c:ee:b6:c0:5c:
                    d0:35:e2:0e:72:21:84:a3:68:26:f2:11:c8:22:a8:
                    b8:8d:70:aa:1b:10:5d:34:d3:6d:e0:e1:17:79:4c:
                    68:0c:e5:cc:49:4e:be:15:8c:9f:e9:d9:5f:66:11:
                    58:fb:dc:65:46:0b:90:85:05:52:50:14:c4:db:34:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3A:E9:51:C2:82:AA:1E:68:66:C1:AC:D2:4C:94:A0:30:BF:14:42
            X509v3 Authority Key Identifier:
                keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:c2:44:86:9e:4d:e7:03:5b:5c:a8:78:b0:fe:67:2a:3e:
         57:d6:fe:cc:1f:1f:3d:71:b7:52:b1:85:06:65:9b:1d:5f:77:
         23:84:91:6c:00:03:c0:2b:00:ec:8a:01:91:f6:03:4e:b4:49:
         6f:e7:fa:da:ad:30:0c:eb:a0:07:78:ff:ec:2a:9b:51:83:54:
         f0:3c:c4:65:89:b2:11:e7:f6:d3:3e:8a:65:ed:c5:e0:e5:51:
         b8:39:8c:0e:c8:f5:b4:3d:01:70:fe:f2:f2:fa:69:e5:24:dd:
         5f:f4:d1:be:39:5b:28:bc:ba:9a:f5:7e:8e:8c:90:fd:74:14:
         9e:13:a6:1a:e7:ed:95:91:7b:58:36:07:9b:ab:d9:de:7f:8c:
         80:d1:04:8c:e2:1f:9d:0d:51:ff:28:3c:f9:96:a8:e5:cf:3b:
         65:82:68:33:fe:af:19:57:79:6b:d9:4e:fd:51:1f:a3:6d:da:
         21:d3:a8:4c:c0:b6:38:bd:bf:c8:d7:be:36:d8:db:d2:65:9b:
         e3:de:79:ea:25:35:f7:d6:56:e2:bd:fe:e9:53:b3:47:4e:27:
         31:16:9b:29:de:54:0e:58:b1:22:bd:fb:52:41:6d:1e:4a:1c:
         85:bb:29:d8:6b:64:ac:79:3a:ee:54:7c:41:84:6c:9e:b6:e4:
         c0:d9:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:01 2025 by rpki-client