Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File:                     1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier:          watSms4JUvNI1++YMJgcSM9vOq7BUSJEsOiAcUN9YDM=
Subject key identifier:   41:CE:D9:D0:95:82:4C:8B:3D:C1:9C:83:8C:5F:50:0F:5C:86:EF:8D
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer:       /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial:       019853448A3B1844D90CC7EF0A2F27C53AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number:          0977
Signing time:             Mon 28 Jul 2025 23:00:57 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:57 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:57 +0000
Files and hashes:         1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: xG7QASKdlFrsScygCB5Me57qq9WHr2KxOMMhhKJbK4s=)
                          2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:8a:3b:18:44:d9:0c:c7:ef:0a:2f:27:c5:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
        Validity
            Not Before: Jul 28 23:00:57 2025 GMT
            Not After : Jul 29 23:00:57 2025 GMT
        Subject: CN=41ced9d095824c8b3dc19c838c5f500f5c86ef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:f5:ca:c1:4c:f9:99:ba:c7:f6:85:4e:bd:
                    7b:b3:6b:62:fc:db:fe:ab:d3:b0:70:34:6a:af:15:
                    a1:48:9e:c3:d9:76:3a:c7:2f:1d:89:7c:21:9e:a4:
                    44:2b:ae:19:c7:da:fa:2d:a0:88:06:da:35:9a:80:
                    ef:21:82:eb:f1:77:2f:bd:df:62:63:e5:b1:19:18:
                    d8:24:ec:2d:da:38:51:ee:cd:12:ac:8f:7d:40:fd:
                    a5:96:9f:bd:2b:a9:39:d3:cd:73:b2:c1:1c:bf:bb:
                    02:92:6b:32:6f:41:9b:1a:73:07:4a:ae:eb:b5:5d:
                    02:5a:50:19:79:10:2d:15:2b:79:a5:1b:8e:77:36:
                    d7:40:aa:45:a1:5f:03:49:d8:42:1a:dd:2c:19:73:
                    43:3c:a2:f2:37:e4:05:ae:d2:9a:1f:05:a7:1d:bc:
                    4f:58:b7:e6:f0:79:98:6b:44:95:ad:c6:61:29:d8:
                    22:30:ea:f9:9c:c0:26:eb:35:8d:d0:d3:b6:8c:04:
                    a2:84:99:50:74:96:6e:12:49:0e:d1:d0:76:18:88:
                    40:48:d4:9f:12:2e:1f:30:ca:13:3d:b3:8e:39:cb:
                    8b:ce:e1:1f:9c:9a:0b:11:f0:1f:69:e6:d7:20:3f:
                    d6:b3:0a:89:71:ca:a9:c8:9a:b4:c9:d1:ef:ac:55:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CE:D9:D0:95:82:4C:8B:3D:C1:9C:83:8C:5F:50:0F:5C:86:EF:8D
            X509v3 Authority Key Identifier:
                keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:9d:1f:4b:61:c1:1d:39:7f:9f:a5:2d:53:ac:1b:aa:55:
         3b:9e:19:26:2d:64:62:8b:2a:c7:0a:92:63:53:84:f8:88:c9:
         4b:7c:9c:66:10:ae:c0:f3:e2:d8:db:41:c4:c2:67:26:50:b2:
         4c:31:70:d7:a2:92:c7:3f:0e:04:fc:52:b9:a0:96:60:05:35:
         30:cd:55:e8:31:7b:73:1f:e3:05:4c:bc:36:de:d2:bf:b2:bb:
         aa:07:d5:b0:d4:e4:7c:9e:f2:52:a9:a0:52:18:08:48:c0:07:
         3c:f6:bc:82:ad:57:aa:f2:f8:8c:96:c7:6f:66:e1:2a:1c:5a:
         5a:4e:86:71:11:33:39:b3:67:63:7e:2b:85:75:53:cc:82:9b:
         13:93:11:8b:bd:5e:07:42:d0:3c:e8:d0:4e:ea:c4:ba:a4:01:
         c3:02:c7:b3:0b:d9:c1:5c:dc:11:86:c7:2b:5e:12:9f:c3:75:
         75:88:17:19:c9:5e:3c:81:40:86:84:69:7a:e1:42:19:0d:82:
         76:18:8d:e9:03:d4:37:4b:17:1d:94:de:5a:5d:7b:39:3f:15:
         f4:d3:8b:89:52:cb:1f:a7:d2:51:70:93:18:6b:d8:94:7a:0f:
         3b:40:21:8e:e1:bf:b4:0b:ad:fa:d1:3b:e6:fb:a0:e7:2a:1d:
         f1:fc:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:28 2025 by rpki-client