Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          gNeEsGwOQtsQXSGWjaYyQJsUY3X+0ug1BWHwmPKXyrg=
Subject key identifier:   FD:D6:F8:ED:F3:FC:54:47:31:9D:57:5E:8C:E4:5B:C8:30:2B:D9:01
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       01965011A81C52074C7F52CF189598866528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0A41
Signing time:             Sat 19 Apr 2025 22:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:56 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: Js9j958m9ylRtqaIgY5AqldYQ8KoZ3xHXqnnyPc9rUA=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:a8:1c:52:07:4c:7f:52:cf:18:95:98:86:65:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Apr 19 22:00:56 2025 GMT
            Not After : Apr 20 22:00:56 2025 GMT
        Subject: CN=fdd6f8edf3fc5447319d575e8ce45bc8302bd901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:68:04:e2:81:e9:12:dc:91:18:4a:ea:92:
                    eb:a1:d8:15:f0:af:a2:10:2e:55:8b:1e:49:70:37:
                    69:06:8d:bd:f7:65:b5:59:d4:a9:7f:01:a9:75:1a:
                    8d:9c:c7:be:2a:6b:4e:14:9e:ea:eb:0c:c6:b4:62:
                    88:17:e3:d4:ec:bb:09:ec:49:97:8c:42:59:2c:df:
                    c7:c5:fd:37:bf:b2:01:3f:10:fe:66:29:e8:ef:6b:
                    e1:1c:6b:82:59:ad:6a:1b:9e:44:4c:20:51:70:30:
                    4f:65:a5:a7:e3:08:92:13:9c:92:02:5c:71:28:db:
                    20:84:e4:65:74:9d:cd:58:63:e5:06:a9:fd:d2:b1:
                    d9:cb:32:5b:37:97:b9:9a:26:49:4c:9e:aa:73:6c:
                    c2:83:75:64:73:63:d1:fe:e4:bf:fb:48:46:23:07:
                    c1:30:7c:05:ae:b8:15:90:97:72:8b:a1:77:70:76:
                    7f:69:5f:58:42:69:32:57:4c:3d:2c:a0:c8:df:ea:
                    5c:84:8f:04:3f:ca:1f:d5:cb:e1:13:d7:19:0f:92:
                    12:60:eb:ff:4f:77:08:9a:82:ac:27:18:20:23:62:
                    9b:2d:8c:c5:a3:fb:0d:2a:15:b1:8a:e0:7b:15:43:
                    53:3f:0b:c2:ff:f0:c1:06:a9:5b:9a:0e:d8:b8:58:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:F8:ED:F3:FC:54:47:31:9D:57:5E:8C:E4:5B:C8:30:2B:D9:01
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:61:08:f5:d2:85:68:96:00:6c:2a:ce:41:63:dc:02:13:26:
         a6:97:34:5d:34:f7:cf:82:5c:47:64:7b:e1:7c:c2:f4:38:9b:
         3b:a4:57:76:c2:3d:60:e1:b5:b1:ab:90:fb:43:6c:53:d0:dc:
         ca:96:b0:e9:91:64:69:aa:d9:a7:30:be:1a:c4:02:ed:53:e3:
         74:7e:e9:c3:52:51:24:54:f5:d1:87:b3:85:f9:8f:b2:b0:17:
         20:12:8e:12:f1:94:8f:4d:75:11:2a:c5:c4:68:ed:46:d5:7d:
         c9:cc:da:bb:4d:fc:ae:08:c6:de:b9:96:3f:4d:0b:46:84:62:
         d2:1b:8f:c3:d6:e9:36:18:d0:57:15:67:ef:dc:09:78:95:eb:
         7f:e1:85:03:2b:5e:50:15:c3:d2:57:7f:36:e9:91:32:12:80:
         f7:6a:f8:3e:a1:99:3f:e0:bf:5e:55:57:bd:f6:d3:d7:56:1d:
         12:e7:eb:7d:02:dd:c8:61:d7:a0:64:87:b6:e1:e0:dc:dd:90:
         1d:1f:7b:2a:60:7d:ca:84:c9:ad:ed:d2:47:8c:f9:9c:ed:f8:
         b5:ed:99:fa:23:2c:1d:68:aa:5d:73:e9:ad:ab:f4:ba:68:13:
         59:8d:a3:ea:a2:31:be:ac:1e:2e:ea:1c:58:32:8f:e2:98:ef:
         ee:89:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:19 2025 by rpki-client