Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File:                     1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier:          OX/LKF3IyMNy1Temq64cPgBnmSWK5vHOxNGLrCz358U=
Subject key identifier:   8F:2E:13:E2:F8:E0:8A:ED:13:85:87:CC:16:DC:E1:9C:7B:C6:0B:C4
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer:       /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial:       01968CCADEE26610BB1A82E3579341BF699F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number:          0C55
Signing time:             Thu 01 May 2025 17:00:27 +0000
Manifest this update:     Thu 01 May 2025 17:00:27 +0000
Manifest next update:     Fri 02 May 2025 17:00:27 +0000
Files and hashes:         1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: BWGZgmuyRdU+2LVd/Or6rlkB2KFYO0DCTP0B51EP/e8=)
                          2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
                          3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:ca:de:e2:66:10:bb:1a:82:e3:57:93:41:bf:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
        Validity
            Not Before: May  1 17:00:27 2025 GMT
            Not After : May  2 17:00:27 2025 GMT
        Subject: CN=8f2e13e2f8e08aed138587cc16dce19c7bc60bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:8c:b4:45:8e:9d:c3:d6:1b:ca:ff:bc:70:
                    71:aa:43:c2:76:4b:14:da:df:02:66:2c:83:97:ca:
                    46:6d:ee:5c:60:bd:e9:e2:65:8d:8e:2d:83:02:67:
                    2a:c6:9a:5b:14:b0:6f:4f:26:19:b1:14:ca:18:6e:
                    9e:9f:ea:cb:59:fc:12:52:21:b5:bf:43:b9:02:77:
                    5f:69:ee:e2:09:cb:c2:8e:03:11:a1:be:f4:86:5d:
                    2c:19:f8:7b:01:5a:83:91:10:0c:fb:d7:d0:81:b4:
                    50:fd:3b:25:60:81:0b:6c:b9:09:96:cb:13:3a:54:
                    e2:94:b8:b8:16:a7:91:3e:fc:3e:8f:04:c8:11:99:
                    9d:63:b1:66:e8:0a:2f:fb:fe:3a:ea:ec:1c:48:ad:
                    7e:4e:5b:71:3e:08:22:75:4d:d9:64:2a:05:7a:2e:
                    57:06:55:a1:0c:f6:6b:b5:89:5d:1f:eb:b5:a6:97:
                    da:3e:c3:32:fb:b7:be:5f:93:e8:0d:20:81:22:e7:
                    1c:4b:83:c7:a6:df:63:18:8a:23:25:20:5a:11:9b:
                    a7:26:86:dc:d0:18:29:c8:9a:91:02:46:dc:a9:3a:
                    4b:5b:b4:f3:93:74:1c:74:84:f5:69:16:ef:02:37:
                    bd:70:19:33:86:6e:4d:6a:c0:43:ad:f0:3b:93:b1:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2E:13:E2:F8:E0:8A:ED:13:85:87:CC:16:DC:E1:9C:7B:C6:0B:C4
            X509v3 Authority Key Identifier:
                keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:b0:ba:5a:0c:82:7b:36:87:f0:b5:c7:ad:fb:a4:b4:41:
         af:02:de:0e:17:d4:fe:21:74:fd:ac:57:94:2e:1c:c6:01:ff:
         8c:0d:b5:3f:b3:75:a8:04:fa:85:9b:09:d3:aa:84:4f:2f:68:
         59:22:aa:75:d1:b3:4d:8f:a6:1f:3f:13:1f:7b:a7:22:fd:cf:
         8c:67:28:b7:84:11:26:bb:87:01:b9:70:01:d9:de:18:69:d0:
         88:17:c5:3e:16:c8:0a:cd:ee:9d:94:ae:f1:26:55:6c:cf:c4:
         5a:d6:73:cd:57:d8:7d:2f:07:39:79:74:0d:e1:2e:ca:88:48:
         5b:02:0a:5e:89:11:3c:fe:74:df:20:12:7b:88:33:a2:1b:dc:
         21:f7:0a:ac:7b:e1:e2:bb:03:35:8a:c5:dc:1a:da:a8:df:26:
         ae:05:41:bb:81:d3:2b:e9:38:91:7c:f9:21:d1:85:81:d2:cf:
         61:78:96:6e:4c:0e:1a:23:89:0c:8d:13:89:06:01:a5:5a:8b:
         56:b9:f8:a4:4e:97:d1:c8:d3:da:f5:0a:7c:f8:85:7c:97:37:
         c6:b3:67:97:11:d2:d6:28:f4:77:f3:9c:5f:3e:c3:c7:df:79:
         7b:73:9f:cd:8b:bb:ff:28:69:c2:db:82:56:23:8b:2b:21:ed:
         55:de:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:21:03 2025 by rpki-client