Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          izCDe/YZBEFPCka5k4/tFt4PFZmAt0BOM9MjJdo+wfo=
Subject key identifier:   E4:4D:F9:60:ED:79:EF:0D:7D:F8:D2:78:1D:04:AF:D4:57:D5:89:D8
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       0196759E8D03B06BCCBD0AC7B03455AC4DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0697
Signing time:             Sun 27 Apr 2025 05:00:47 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:47 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:47 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: EashlQRpjjctmja2AUlALAUcitF7ARNTgEL8wuBsfgc=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: 4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa (hash: S0ISeClce5TxDsWjgivJh0Ti1wUrqurbMyCPE36tiVY=)
                          4: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:8d:03:b0:6b:cc:bd:0a:c7:b0:34:55:ac:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Apr 27 05:00:47 2025 GMT
            Not After : Apr 28 05:00:47 2025 GMT
        Subject: CN=e44df960ed79ef0d7df8d2781d04afd457d589d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:16:0c:f0:f3:29:c2:4d:83:0d:38:a0:d8:
                    6c:cc:b6:f5:ff:77:ae:28:53:2b:24:28:07:bf:e9:
                    34:58:20:ad:84:36:1c:be:32:7a:81:aa:63:25:a4:
                    fa:37:80:ea:21:9a:f0:f0:dd:cc:7f:39:b6:c9:1a:
                    a4:82:1b:96:ce:d5:da:0f:62:ab:1a:ec:66:83:3f:
                    fa:de:30:fc:4f:e5:84:18:ce:bd:aa:e6:24:1a:5f:
                    98:a9:e3:d4:22:cd:38:e5:b4:97:f6:ca:f4:c5:4b:
                    c2:a0:4f:91:5f:71:b3:8b:1d:0f:c6:36:05:df:3c:
                    82:3f:49:81:a3:75:fa:23:fe:41:9c:fb:b8:50:03:
                    e7:02:16:a1:42:f2:2f:af:e6:4f:94:b8:58:a2:08:
                    96:e3:ac:aa:b2:19:da:5f:14:f2:0d:76:8a:9d:91:
                    b9:c7:a3:ba:a2:f8:0e:f7:9f:eb:07:70:db:18:87:
                    d0:70:ed:58:3d:e5:94:a1:0e:1d:56:ae:88:a1:37:
                    49:1a:ce:f3:b0:1c:ba:1e:44:14:49:5b:f9:a3:6f:
                    7e:1d:f6:a6:e3:60:46:e4:34:da:e6:7c:c6:ca:88:
                    dd:5b:21:e8:88:6b:89:ce:f3:5f:6a:bd:95:6e:3b:
                    1a:ea:45:a2:c5:c3:ac:d7:ce:fb:9a:f0:b7:56:11:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:F9:60:ED:79:EF:0D:7D:F8:D2:78:1D:04:AF:D4:57:D5:89:D8
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:70:60:18:32:67:b9:e3:7e:67:c7:85:64:d2:dc:1e:90:
         7b:8e:30:fc:e3:04:eb:69:9f:3d:69:fe:ef:ce:a3:aa:7c:29:
         96:d2:87:e4:4e:cb:80:ab:7f:4a:0a:6f:38:7d:0d:b0:01:5a:
         08:23:95:cb:09:3c:df:f5:71:c8:26:e9:c7:59:4d:eb:ef:48:
         0d:a4:67:63:97:f1:e8:6b:e3:61:a6:8f:33:05:ad:91:62:02:
         30:73:e0:92:91:6e:dc:ec:d2:0c:e8:c2:bc:a0:41:94:6c:76:
         4c:bd:62:55:45:7a:ba:07:6f:6a:0a:81:0e:b3:58:bb:32:ba:
         f6:39:b7:5e:b8:dd:05:81:08:42:94:c3:da:59:d4:88:b8:df:
         3c:c2:1c:ac:47:02:d2:51:8a:2b:38:c3:36:c9:d5:92:8d:73:
         0a:47:b1:95:52:3b:ff:47:72:9c:2f:3e:ff:58:4e:5b:5c:3a:
         8f:82:82:25:2b:b5:09:85:68:f7:d5:93:90:f3:54:e5:08:05:
         85:cb:31:03:51:ba:1a:bb:90:26:12:11:54:55:71:56:cf:9e:
         b8:33:d0:61:1b:e0:d4:3f:d1:ee:84:59:ac:d0:2c:b5:08:fa:
         84:8a:09:6d:8b:83:0d:cd:64:3e:01:48:1c:b6:76:78:7d:83:
         23:c5:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:39 2025 by rpki-client