Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File:                     _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier:          7hXSQWlmeeFc664F6RVy3pgd0uSJsbri8ncjBwwoACA=
Subject key identifier:   83:98:AE:C3:82:9C:93:E9:4F:1B:2F:FF:00:11:A5:DF:D4:BF:08:1E
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer:       /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial:       01974DE9DBE994C936385A70C33990B8E900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number:          055C
Signing time:             Sun 08 Jun 2025 05:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 05:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 05:01:01 +0000
Files and hashes:         1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: B9nQGATQc9wop4AnXPcGkv91pAwppoF6sEPOznOKYw0=)
                          2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:db:e9:94:c9:36:38:5a:70:c3:39:90:b8:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
        Validity
            Not Before: Jun  8 05:01:01 2025 GMT
            Not After : Jun  9 05:01:01 2025 GMT
        Subject: CN=8398aec3829c93e94f1b2fff0011a5dfd4bf081e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:7c:90:ce:cd:31:ce:db:03:25:57:70:ba:
                    88:c1:64:de:df:56:7d:34:89:c4:11:c3:da:34:38:
                    e0:2d:06:08:fb:7f:34:93:4d:6c:a6:55:98:dc:dd:
                    2f:9f:d6:f4:0c:fc:41:33:db:c5:79:7c:7c:7b:ae:
                    b7:7f:f9:18:fb:c1:c7:8d:78:f4:3e:3b:7a:40:6d:
                    39:05:0e:09:3d:40:f2:a2:bc:74:bd:0e:45:c3:01:
                    13:50:f4:06:35:cd:8a:2e:e7:b1:9f:1a:64:c1:f7:
                    e4:a0:bd:55:97:98:1f:ec:bd:1c:41:86:b0:d6:a6:
                    24:0c:b6:61:bd:e4:73:e4:f5:d4:7a:aa:99:6a:4d:
                    39:1e:48:c4:09:5a:a0:3e:f0:a5:e1:19:16:a1:60:
                    75:ad:38:18:69:f2:f4:69:d3:fe:b9:61:91:3c:ae:
                    d0:44:be:ae:fd:4e:1c:49:03:1a:71:e1:db:32:0a:
                    9b:34:2d:3b:0a:19:16:a6:3c:41:8f:47:a0:c8:20:
                    a6:f2:56:d1:0a:8a:18:07:fc:72:a7:04:c2:5f:20:
                    fb:d3:86:72:e5:37:ea:59:94:ae:d3:1b:65:15:58:
                    5f:d6:dd:f7:16:9e:76:80:3f:64:47:96:91:42:61:
                    09:09:ba:c7:2a:6d:4e:f2:05:a2:b8:d1:8d:15:e4:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:AE:C3:82:9C:93:E9:4F:1B:2F:FF:00:11:A5:DF:D4:BF:08:1E
            X509v3 Authority Key Identifier:
                keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:61:40:3c:d7:e6:e2:76:98:7c:dd:bb:03:eb:eb:3a:95:77:
         5b:96:69:21:68:ea:4c:89:61:34:36:cd:64:8d:ae:8a:8a:68:
         1c:80:f2:6b:15:ec:1f:05:14:18:79:dc:ce:b0:fb:96:de:ec:
         0b:f0:d7:a9:fc:f5:54:9f:4f:2f:c8:10:61:03:a1:64:5d:57:
         1b:a6:bd:31:ab:64:ed:6b:4c:4d:8c:7f:26:b4:1d:a6:13:9a:
         d7:57:01:32:37:8e:79:0c:af:53:13:79:2c:07:ea:50:a5:43:
         1f:f7:d2:53:90:f3:2c:28:a8:5f:aa:ae:cc:e0:b6:05:c8:db:
         94:2d:79:61:37:b8:42:7c:b7:d4:8e:30:6f:2d:69:44:fb:45:
         7a:8e:3a:51:0c:49:1d:d9:e5:08:8b:8f:af:81:14:7e:f5:63:
         06:1c:e3:5d:69:86:7d:09:7a:7e:ba:20:da:d6:72:05:72:7a:
         da:44:52:75:59:aa:ad:5a:79:c8:61:25:bd:ac:57:de:64:55:
         6e:81:0e:8d:f6:63:50:e3:62:53:b2:a7:4f:fc:f0:8d:3f:e6:
         ca:2f:bc:06:52:92:10:bd:4b:02:39:df:4f:ef:a5:ac:db:64:
         45:8b:12:b7:d4:24:dd:1b:35:41:86:90:c4:11:1c:2d:96:7c:
         a9:23:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:25 2025 by rpki-client