Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          MwmSrvik+ReHy+nTDyMzDWhpEqH+OLPrCrJC0h5d3Eg=
Subject key identifier:   34:29:90:55:64:7F:AA:6B:0F:9A:D6:0E:05:2F:46:61:A2:F6:76:1E
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       0197488BED27CF387137BFD52FB0905995F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          1463
Signing time:             Sat 07 Jun 2025 04:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:18 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: GoH41KOKA9LcPyEQvnMnEaf9nANEU2Wz6T9wexZ/6lQ=)
                          2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8b:ed:27:cf:38:71:37:bf:d5:2f:b0:90:59:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Jun  7 04:00:18 2025 GMT
            Not After : Jun  8 04:00:18 2025 GMT
        Subject: CN=34299055647faa6b0f9ad60e052f4661a2f6761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:39:f2:79:60:e0:60:6c:d3:5d:82:ce:f6:
                    75:1f:d1:7a:e0:76:de:08:29:41:52:72:07:85:28:
                    09:12:e5:ba:29:9f:6e:f9:76:25:23:79:e8:bc:66:
                    8e:b7:18:bd:f0:73:7f:18:b1:39:3a:bb:65:6e:17:
                    dc:9d:bb:bd:d1:e7:d6:bd:f5:27:36:cf:7f:a1:b7:
                    df:a7:41:fa:b9:6e:6b:52:ee:b1:44:4d:c7:1e:4b:
                    1a:ee:5a:e0:dd:f6:78:54:c1:d1:dd:b0:5f:b1:11:
                    cb:f8:75:c6:a3:c1:f1:fd:ea:12:49:af:b0:4d:8d:
                    63:a2:3c:0b:73:2c:a5:ab:e0:d2:3e:4b:b7:44:12:
                    47:aa:56:13:16:34:77:eb:14:85:9a:de:4c:bb:d8:
                    1e:d9:8f:a4:13:db:08:08:01:cb:1f:ba:28:07:81:
                    9f:43:06:ba:e4:38:67:99:0e:5e:5b:f8:7c:6c:12:
                    65:44:57:e8:f5:21:25:00:ba:d0:e7:da:5d:8e:60:
                    ca:9f:b5:48:ba:2e:06:70:e3:50:a6:4f:09:44:40:
                    f3:26:90:39:85:4a:32:e1:6c:70:d4:d7:db:a4:5b:
                    8e:b5:76:ab:53:3c:cb:4b:6b:84:60:80:de:ee:7d:
                    9d:52:d7:b2:d6:6d:7a:cb:95:b0:9f:b9:74:c7:0f:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:29:90:55:64:7F:AA:6B:0F:9A:D6:0E:05:2F:46:61:A2:F6:76:1E
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:ac:e7:a6:88:b3:a1:a0:82:4b:b4:41:5b:5b:5e:04:55:
         af:5a:36:92:10:88:d1:90:7b:66:cf:f4:c4:ae:76:3b:2a:bf:
         6d:d4:60:8a:b9:22:28:5e:9c:19:7e:b4:81:6e:0e:70:c6:4d:
         4d:ff:60:8a:e1:25:65:54:17:76:cf:4d:1d:20:c2:79:12:51:
         70:56:5d:60:a1:28:06:f3:23:12:aa:52:9a:d2:2b:d9:7b:a8:
         8a:3c:f2:89:a8:37:d3:41:46:75:13:30:9c:bb:ef:bc:98:bf:
         89:91:71:5e:6d:1b:cd:5d:31:a8:9a:7a:47:f5:2f:12:d2:3c:
         49:34:64:3e:5a:06:83:1b:5d:15:b4:08:8d:dd:3f:42:ce:9e:
         99:ff:6c:f4:5b:95:d6:ca:71:99:74:9e:12:22:32:5f:7b:ed:
         44:e0:12:6d:e1:c3:eb:13:f9:73:d4:bf:36:73:34:41:c5:62:
         a7:32:ac:4c:45:5c:14:c1:64:84:1e:a5:12:76:05:42:af:43:
         d3:ca:66:16:63:2b:78:16:6e:fa:ac:0f:76:ca:5c:66:4d:df:
         ff:05:de:a3:d8:ce:9e:d6:a1:56:94:de:92:b9:f9:be:8d:8e:
         8a:4a:29:ac:49:ae:0e:de:bc:28:ce:c1:c5:30:91:a3:ec:fc:
         97:4e:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:47 2025 by rpki-client