Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          KOSCkLK7NtFEaQG3GRFIGieaOVU0Fr7JHl9bjC+1zDs=
Subject key identifier:   CC:1F:33:06:8C:6E:98:CE:68:B3:A4:F7:42:6B:F8:73:1E:00:11:B6
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       01964D4714375214ACD1B792AACBDCA98C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          1382
Signing time:             Sat 19 Apr 2025 09:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:25 +0000
Files and hashes:         1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: DLpF47Hg01OYqJ9KfWWzP0hLII4NQf1tRV5v7Oi1lsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:14:37:52:14:ac:d1:b7:92:aa:cb:dc:a9:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Apr 19 09:00:25 2025 GMT
            Not After : Apr 20 09:00:25 2025 GMT
        Subject: CN=cc1f33068c6e98ce68b3a4f7426bf8731e0011b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:27:93:18:6b:29:8c:45:58:30:69:60:d4:
                    88:58:a8:c8:00:a1:eb:e9:96:20:a2:e9:93:65:6f:
                    0a:20:16:f6:a3:5e:0a:3f:07:59:18:0b:5c:bd:5f:
                    fc:3e:69:d3:07:57:a0:eb:14:0b:b8:70:a9:af:e6:
                    02:f4:f6:1c:c9:b5:52:72:e4:83:1c:93:66:56:fb:
                    a7:6f:51:5b:89:1d:22:3a:a0:5e:00:44:c0:f0:4d:
                    b3:5a:79:77:62:79:53:68:dc:39:54:32:8e:a8:36:
                    3a:03:bb:dc:42:68:dd:7d:90:c9:ef:9d:8d:4e:0e:
                    de:33:55:04:57:ca:05:81:48:cd:47:2e:eb:43:7d:
                    ed:29:36:4a:71:0b:71:fa:b1:3a:21:db:9c:56:c3:
                    b7:e9:34:e5:2f:c8:80:1d:e4:9e:93:66:c5:52:34:
                    68:e8:19:d1:86:12:19:b6:1d:fb:50:1e:94:fd:ae:
                    06:72:cb:10:02:c5:d1:76:aa:7a:25:f7:ba:c9:18:
                    ae:a2:95:92:ff:a8:7f:03:41:c2:60:a6:5f:2e:a3:
                    69:30:da:c1:df:ec:50:2d:8a:e0:7a:6e:2f:32:3c:
                    b1:e9:b8:63:85:e0:2b:ea:95:a7:b9:4d:7e:e5:7e:
                    9c:1c:0c:92:c2:ce:09:9c:c9:32:36:df:50:6d:ef:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:33:06:8C:6E:98:CE:68:B3:A4:F7:42:6B:F8:73:1E:00:11:B6
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:8c:ff:d6:34:18:a0:1c:47:74:36:89:33:ab:43:8a:1d:
         12:c1:44:f4:c0:5d:a9:a2:49:d7:0c:fe:e4:fa:e7:29:bb:a0:
         3f:2b:5d:f9:87:91:18:d3:ad:3c:01:db:fe:8d:ba:2c:95:60:
         3a:33:41:f7:51:43:24:a9:46:c9:5e:5d:ae:05:f4:e3:5c:d7:
         aa:60:07:6e:00:39:7b:1b:29:d2:e0:b2:0b:33:b8:0d:ee:74:
         b9:33:06:07:e9:ad:84:0d:c2:4e:ba:6d:6f:58:fe:19:f8:65:
         e3:ea:f8:6b:33:11:e9:e9:5a:a2:c8:15:32:be:80:f4:0c:4f:
         5f:54:44:d6:d7:eb:3c:d7:c0:65:bb:7d:80:eb:f3:75:0c:df:
         4c:35:c0:d4:5e:a0:49:3f:dd:c0:e0:fc:48:7a:a3:3d:97:eb:
         1c:1f:aa:3b:bb:d9:95:f4:b9:7b:b6:54:d5:4d:c5:57:e7:35:
         84:73:13:de:5e:a2:d6:7a:34:26:c4:f2:12:de:7f:85:37:87:
         6d:5a:71:67:f3:22:66:f4:fa:a5:f8:40:93:c7:e8:3b:6b:89:
         3d:ed:b1:b6:1f:62:cd:94:08:d7:3f:91:d6:b6:06:2a:e2:09:
         1d:0e:8b:1c:3d:15:f3:fb:df:69:6f:f1:fe:c3:30:e2:e2:c4:
         e6:98:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:04 2025 by rpki-client