Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File:                     1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier:          mjq1vHi/GmVFpVRx4CefuoSEEBh/irIObq2kKkvKA3M=
Subject key identifier:   32:1F:67:06:8A:C8:09:EF:33:97:79:47:C7:B0:CC:81:E9:A2:86:B4
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer:       /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial:       01968E145907F7C686E223BF583966D3B0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number:          0CA4
Signing time:             Thu 01 May 2025 23:00:20 +0000
Manifest this update:     Thu 01 May 2025 23:00:20 +0000
Manifest next update:     Fri 02 May 2025 23:00:20 +0000
Files and hashes:         1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: R2DEFZLDHRkTIpmstIPzqUCWHbq798JQLmYLFc4PRoA=)
                          2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:59:07:f7:c6:86:e2:23:bf:58:39:66:d3:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
        Validity
            Not Before: May  1 23:00:20 2025 GMT
            Not After : May  2 23:00:20 2025 GMT
        Subject: CN=321f67068ac809ef33977947c7b0cc81e9a286b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:67:66:50:40:cd:ca:6d:d5:ef:87:fe:38:
                    97:7a:bd:8c:98:6e:c9:00:68:08:79:aa:8c:46:64:
                    6b:2d:44:9c:e4:09:46:b3:2c:75:30:35:10:e5:60:
                    5c:a0:41:b0:92:49:87:0c:e9:46:e5:07:91:4f:c7:
                    78:a7:5e:76:6c:79:89:f6:a6:e9:a6:c0:2c:d1:20:
                    d7:ff:ea:ed:97:e5:45:08:d1:86:0a:54:a4:93:df:
                    f0:f5:e8:2e:f6:2e:49:35:3a:dc:b4:76:ec:a8:e7:
                    2d:45:1b:49:fa:81:64:00:b6:bb:ec:25:16:71:c3:
                    8e:a7:36:51:24:3d:99:37:64:9e:c2:2c:69:0d:89:
                    cb:6c:65:c5:78:63:fc:ae:0f:b1:86:8e:e6:41:d7:
                    c7:7f:a2:5b:aa:2c:bb:90:33:83:16:9d:6e:a9:19:
                    5c:56:44:71:16:20:8b:fe:47:a4:c8:33:23:7f:14:
                    ae:58:d4:da:79:37:f8:59:93:01:56:2e:86:ab:8f:
                    c7:cf:86:2f:d5:ff:33:97:4a:34:a2:85:d6:67:f5:
                    54:54:d9:e4:d6:4e:e9:c8:a5:48:5a:a1:ab:35:dd:
                    01:b1:4e:40:cb:00:93:06:93:bc:18:33:c4:93:39:
                    0d:b5:7e:59:39:a3:40:14:81:c1:a9:be:2a:5c:20:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1F:67:06:8A:C8:09:EF:33:97:79:47:C7:B0:CC:81:E9:A2:86:B4
            X509v3 Authority Key Identifier:
                keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:07:7a:f1:56:0e:b2:ab:76:8b:81:87:1a:a6:2c:70:18:
         05:26:f8:46:5b:54:b7:d8:8e:ab:11:c5:78:b0:f0:1e:95:06:
         6d:0b:5d:e4:b6:64:e2:22:68:b3:2a:1e:71:bd:7b:21:91:bc:
         c8:51:12:ce:7a:a5:6a:f8:bc:b1:52:4d:cd:8b:68:01:20:e2:
         fe:ee:08:53:1f:57:de:ef:22:ff:6b:b4:c7:c5:c1:93:60:a5:
         9e:a5:51:88:d8:ee:1f:17:31:a7:57:74:29:7b:13:bf:e5:f0:
         0f:b7:b9:90:47:f2:cc:55:e0:10:59:2f:a6:08:c8:03:60:93:
         4b:94:23:ae:43:08:4d:bf:09:3d:ab:19:a0:7d:aa:53:0e:98:
         99:d3:ec:bb:fb:da:85:d5:0b:c1:f1:15:5e:89:0e:93:49:08:
         b2:bd:a4:58:49:49:1c:c1:9a:4a:94:46:5e:43:65:26:59:ef:
         64:de:4d:a8:49:44:67:64:2c:98:80:27:41:83:c9:8e:97:4e:
         a2:44:91:0e:12:9c:df:2b:29:43:14:90:88:55:79:04:a3:34:
         f3:b4:9c:ed:d7:3b:25:c5:81:a7:ef:fc:f1:86:ea:2b:94:b7:
         13:e5:ca:12:78:03:db:ed:c3:fd:ac:3a:15:a0:08:cc:f6:d3:
         8e:30:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:17:15 2025 by rpki-client