Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          xphXxpq2DKTCoILTuzKar7WDMpICzSUFo0oWdcNwKUk=
Subject key identifier:   A9:06:DC:D5:FF:5C:5D:32:53:FE:72:33:22:00:0A:F5:9E:A7:DC:2C
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       0197789D150B2C0DA2ABC6D461A68C1BB45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 12:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:49 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: ubsnwYbCI+9ebjXNvvfNiAk0bDpt4Va7LssoXsGgoio=)
                          2: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          3: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          4: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9d:15:0b:2c:0d:a2:ab:c6:d4:61:a6:8c:1b:b4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Jun 16 12:00:49 2025 GMT
            Not After : Jun 17 12:00:49 2025 GMT
        Subject: CN=a906dcd5ff5c5d3253fe723322000af59ea7dc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:95:f5:62:84:dd:24:94:78:c4:d1:93:1d:
                    82:4a:71:89:fa:2a:70:1b:f7:4e:72:31:a3:44:eb:
                    1b:e8:aa:a7:38:e7:be:30:eb:15:8b:db:75:95:02:
                    5c:5f:fd:19:09:bb:af:6c:79:07:08:19:7e:42:2e:
                    74:38:8f:c0:c7:be:a0:14:94:bc:8a:d5:f4:72:e8:
                    87:60:59:a3:05:b8:9b:41:d6:72:5a:f2:6d:f3:5c:
                    ff:bb:f3:81:c7:c9:a3:91:87:01:dc:67:b8:c1:b8:
                    bf:2e:26:ee:b1:e8:39:de:10:7c:c0:76:44:96:2b:
                    57:36:57:94:1a:cc:a3:63:c6:09:39:99:51:d7:c2:
                    8d:86:7e:b7:f0:4d:d9:37:43:26:92:d6:30:de:7b:
                    2f:08:e3:77:0f:45:c7:60:1b:df:35:55:c2:da:b4:
                    5d:f8:27:f0:72:7f:a2:4f:40:0b:5f:c4:95:69:da:
                    a7:c1:46:d6:b9:a1:b1:94:3a:67:15:d9:48:0b:c8:
                    25:f6:91:b0:36:7f:95:78:89:d6:2d:a3:ba:09:4f:
                    d0:25:f2:ee:30:be:58:0b:5e:14:14:57:2d:9d:df:
                    02:bb:72:8c:fa:e3:28:90:a9:24:ae:8a:67:c0:f8:
                    c7:01:c6:d8:d6:dc:18:8b:f0:6e:c9:b6:73:2b:67:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:DC:D5:FF:5C:5D:32:53:FE:72:33:22:00:0A:F5:9E:A7:DC:2C
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:cd:c7:09:a4:c0:47:9f:71:43:bb:d6:3b:c6:50:66:95:
         fa:09:70:b1:06:2e:03:b7:97:9b:a6:42:34:22:20:bc:c0:25:
         95:28:5b:5f:20:5d:62:1e:95:84:17:73:1c:e1:c3:bb:25:6d:
         c4:68:51:b8:fa:0f:80:0c:27:35:04:db:d6:89:7d:d8:85:40:
         7d:d7:57:7c:fa:75:1e:a6:4b:da:6d:f8:70:0c:d0:8a:ae:eb:
         20:c1:2a:c6:54:1e:0b:54:58:34:4a:c9:80:fa:b9:9f:70:f7:
         9e:cb:79:36:df:28:17:48:f2:ab:a7:37:9f:02:fb:84:38:7e:
         67:4d:d8:7d:7c:c4:54:d6:c6:12:15:70:a6:40:dd:b5:ec:7a:
         45:b5:97:62:1f:10:0d:7b:60:2c:0f:64:08:6d:34:42:fa:67:
         bc:ed:4c:69:c8:d7:69:0a:d0:b1:14:6a:5c:6f:25:9a:c6:d7:
         c9:40:02:59:27:7e:fd:13:fc:2a:f5:75:af:19:c0:bc:2a:a0:
         e5:08:fb:57:a1:4a:28:d4:71:65:83:b4:18:dd:f1:33:89:e4:
         78:68:b0:eb:e4:f1:26:88:98:56:59:dc:43:e7:c1:6b:11:98:
         23:11:1f:ec:ee:6a:3d:6f:e2:80:4c:b4:9a:d8:7f:fe:b1:89:
         81:dd:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:08:40 2025 by rpki-client