Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          GD06agS6EAXI/hb+vvq9Icyf3v+NXaKe3gXJlpe85Yg=
Subject key identifier:   F7:D0:70:93:18:50:75:4D:12:84:A1:82:47:7F:E5:E6:C3:EB:71:3D
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       019771516C4FA7D4B34BAA1F34BCD5475587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          1590
Signing time:             Sun 15 Jun 2025 02:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:50 +0000
Files and hashes:         1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: uZQP6ZoT1N71630uXsWlz2nFUXk1qLR+rE5dRvrQSC0=)
                          2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:6c:4f:a7:d4:b3:4b:aa:1f:34:bc:d5:47:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Jun 15 02:00:50 2025 GMT
            Not After : Jun 16 02:00:50 2025 GMT
        Subject: CN=f7d070931850754d1284a182477fe5e6c3eb713d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:2f:05:11:cb:03:68:94:b8:c3:b0:ef:3a:
                    00:4b:5c:22:6e:2d:41:0d:bd:18:26:38:a3:f6:ea:
                    02:95:c3:95:f3:48:5c:0c:86:1a:51:18:cd:dc:14:
                    cf:e3:86:c9:b7:71:00:b5:08:d4:30:86:e0:07:4a:
                    2e:3a:ac:e7:d9:54:ea:24:3f:3b:49:6c:5d:3e:0e:
                    9d:af:07:1f:f2:72:c4:98:c6:b5:6b:49:f6:3d:63:
                    c1:50:14:95:d0:48:02:4e:b1:4f:8a:ba:6b:0c:92:
                    74:f5:86:c0:c7:92:8f:4b:27:09:b0:1a:6d:95:dc:
                    b5:6c:45:53:92:ef:81:55:5c:ed:39:40:6d:53:0c:
                    26:cd:b1:37:91:73:8a:76:74:29:0f:92:38:c2:fe:
                    01:ae:14:51:ad:1e:18:72:be:20:8f:04:ba:08:ca:
                    d4:89:ec:a0:2b:86:7a:51:7a:38:47:ed:b7:dc:f5:
                    03:0b:e6:e0:d3:e1:24:19:1c:34:65:87:70:5f:64:
                    e3:57:b8:f7:a9:e8:f6:63:b5:85:50:3a:a7:b1:ec:
                    53:40:70:8e:e9:ee:9b:70:e0:90:ca:5a:5b:e3:b9:
                    9f:fb:cc:9b:b0:c3:51:22:e2:15:17:9a:2d:fb:17:
                    22:21:0b:c5:84:d2:8e:d4:55:35:c4:91:66:60:ea:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:70:93:18:50:75:4D:12:84:A1:82:47:7F:E5:E6:C3:EB:71:3D
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a4:af:b1:01:81:6b:ec:f6:b3:79:8b:c8:48:18:56:12:94:
         ed:41:d9:cd:8f:b3:c7:0b:d6:a3:13:bc:7e:e6:2c:6f:8a:17:
         66:8b:b6:72:7a:c1:57:33:cf:58:1d:b2:2d:86:55:45:e5:a0:
         ca:f1:af:a4:fa:04:1c:60:24:ab:9b:1a:4e:44:4d:86:d3:fd:
         ab:eb:ae:3d:5f:8c:8b:6e:1b:c0:99:91:04:67:3a:54:54:ee:
         53:69:3d:83:6c:9c:b0:61:68:9b:d8:e6:2b:b7:f9:7b:c5:f8:
         0c:55:69:61:10:bb:a7:16:53:93:45:62:dd:6e:4e:b7:ee:31:
         e6:87:b7:55:bd:f4:2f:51:78:dc:fa:d6:7f:14:9b:0d:28:73:
         88:88:50:49:95:87:ac:18:46:24:a3:29:8c:c7:f8:7b:17:f6:
         5e:1f:12:35:70:88:1c:f4:86:b6:cd:a1:4e:8a:3c:ed:7c:bf:
         b3:e3:d1:68:7d:7f:36:c2:27:dc:a1:c3:f1:a3:f3:bb:53:97:
         d6:ec:5d:47:af:db:5c:52:a1:48:06:3d:3f:6f:33:0e:b2:64:
         02:f9:4a:27:09:b3:27:d3:82:2f:e5:02:e8:e0:e4:a5:9b:80:
         44:3e:dc:a7:d4:2f:9a:8d:c1:07:ff:23:a7:bb:cf:ed:14:f6:
         5b:8e:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:30 2025 by rpki-client