Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File:                     1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier:          RpXSKIHUolAtGm0NQ8hzoWzIIDkjhmsp9+9iubrsIDA=
Subject key identifier:   7B:80:D8:4A:CC:59:7A:CB:AF:42:16:F3:79:5F:E1:FA:4E:98:53:81
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer:       /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial:       0196771F0F204416EB71CD7B6502C22897F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number:          0577
Signing time:             Sun 27 Apr 2025 12:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:46 +0000
Files and hashes:         1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: t0j3AJVffYv6OtbHWMvz7C3XnIM8fLtZD8h9X1e1WcA=)
                          2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1f:0f:20:44:16:eb:71:cd:7b:65:02:c2:28:97:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
        Validity
            Not Before: Apr 27 12:00:46 2025 GMT
            Not After : Apr 28 12:00:46 2025 GMT
        Subject: CN=7b80d84acc597acbaf4216f3795fe1fa4e985381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:b8:f6:2c:78:fa:c2:54:fc:1a:73:93:3f:
                    53:3e:d9:08:79:2d:58:fd:28:2c:1c:df:32:76:99:
                    04:c6:78:69:37:c3:da:36:85:98:72:74:4f:d7:c6:
                    bc:45:56:16:88:05:a7:23:66:94:a9:78:0e:43:6b:
                    16:46:45:2f:7d:a6:68:b4:3b:de:8e:af:48:4f:10:
                    37:64:e5:ad:1c:fc:53:68:dd:ab:9c:cf:de:53:42:
                    6b:d9:8e:24:5f:b5:9d:8d:f4:c4:f3:bd:ae:67:ea:
                    04:6d:ea:a7:53:17:53:91:93:7d:6a:30:f9:89:aa:
                    33:c5:84:24:7b:43:a3:98:2a:b0:b4:37:8c:17:01:
                    67:69:c3:57:de:31:f4:a9:86:99:b8:4e:2f:a5:3c:
                    ef:6c:35:c3:d5:19:e0:7c:88:e5:b5:a1:be:cc:73:
                    03:9e:cb:19:36:82:cf:b7:7c:45:8c:88:0e:a6:a4:
                    b8:a1:50:af:ee:77:44:20:92:68:03:0f:a2:bd:7e:
                    a5:cc:9e:cb:14:fd:b4:a7:b3:f0:67:44:53:a8:ed:
                    5a:aa:ba:38:74:83:00:d3:c5:e2:61:ad:6c:20:12:
                    a8:f6:2b:1c:8e:a2:0e:47:8f:62:6d:6b:42:50:d5:
                    a3:97:c7:23:9f:1c:48:0b:7d:34:ac:e0:9a:39:14:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:D8:4A:CC:59:7A:CB:AF:42:16:F3:79:5F:E1:FA:4E:98:53:81
            X509v3 Authority Key Identifier:
                keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e3:1a:46:21:85:e0:ac:58:b7:b4:4e:3b:88:32:64:d4:f1:
         ed:65:0b:3e:ca:a6:5c:d7:b1:10:48:7b:88:0d:3c:b3:94:38:
         cd:86:07:be:08:4a:36:05:29:65:d2:58:93:c2:99:31:6c:96:
         ea:8a:cc:a2:57:18:6a:5a:9b:11:c9:5c:3a:2d:01:f3:f0:c3:
         1f:97:d0:d5:39:c4:7a:d2:26:7c:e0:7d:32:a3:21:82:a1:bf:
         20:46:f4:79:13:38:4d:91:c0:2f:56:53:0a:1d:98:50:51:38:
         64:9c:e2:76:e0:0f:3c:a5:d4:28:a5:63:c3:59:01:01:30:3e:
         e8:5e:f5:a3:a4:d3:bf:e7:b2:5f:21:18:2c:4b:13:be:38:44:
         de:3b:67:c5:b4:c3:e1:dc:3d:a2:a5:b6:2f:37:77:76:85:87:
         a7:30:e1:ae:13:a8:c5:94:b7:44:7c:fc:cf:1e:9c:d2:0e:70:
         78:3a:fe:fd:b8:70:fc:2c:98:55:14:26:08:aa:12:75:c8:c6:
         5f:f8:bb:6a:dd:6c:a7:9f:42:f1:e8:1c:a7:ec:99:b1:ac:c0:
         a7:e2:ec:68:11:4e:75:97:b2:a8:3c:6d:61:aa:82:86:8b:47:
         b6:97:55:d8:8c:81:51:1a:df:f4:cd:4f:5a:ce:b4:6d:c4:d4:
         93:af:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:03:41 2025 by rpki-client