Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File:                     1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier:          X5VsPB4HVI4p8IhRsj7/L1x6oBmmO6HiY30R8OIwB2Y=
Subject key identifier:   03:E9:AB:4B:95:7D:BF:C5:17:34:12:0D:7F:53:5D:F5:CE:F3:F7:D0
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer:       /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial:       019655DCBA6A46764D6699615AB82CCB3060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number:          1500
Signing time:             Mon 21 Apr 2025 01:00:51 +0000
Manifest this update:     Mon 21 Apr 2025 01:00:51 +0000
Manifest next update:     Tue 22 Apr 2025 01:00:51 +0000
Files and hashes:         1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: YvNVD0n6CIH3ll+QRQqqsEKogn7uhdS63ocVNmzJUGI=)
                          2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
                          3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
                          4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:dc:ba:6a:46:76:4d:66:99:61:5a:b8:2c:cb:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
        Validity
            Not Before: Apr 21 01:00:51 2025 GMT
            Not After : Apr 22 01:00:51 2025 GMT
        Subject: CN=03e9ab4b957dbfc51734120d7f535df5cef3f7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:80:46:90:a3:45:8e:7d:52:45:94:a5:f3:
                    8b:e2:e7:34:d7:4e:6e:67:6b:a8:e5:d3:33:bf:74:
                    85:01:7a:e2:07:7f:69:9c:3e:7a:31:d6:11:50:2b:
                    1a:5c:da:94:58:3a:d5:ff:96:55:bc:f3:98:8e:2e:
                    fe:49:20:d7:2d:c5:e5:68:7f:3a:72:db:53:5a:b7:
                    d5:06:92:e9:71:fa:e8:90:16:b9:95:8b:29:62:9b:
                    8d:af:12:45:db:cd:16:67:ca:55:73:70:29:28:09:
                    b6:6a:25:ae:46:db:46:19:3c:63:d3:f8:42:5a:8a:
                    11:d8:8b:7f:ae:88:73:44:db:96:5c:04:1b:de:74:
                    76:4c:df:0b:ef:a6:50:4c:cf:f5:f5:f1:d6:e7:1e:
                    66:6f:0a:7f:44:a2:2f:60:77:3d:38:41:a0:de:c5:
                    4a:03:4a:31:2b:c8:76:1c:fa:b2:67:0a:53:bc:ae:
                    e0:a7:c4:52:a4:d3:65:88:2a:e2:da:5e:00:ee:66:
                    c3:4c:4a:15:2b:c6:48:a1:84:39:74:69:05:d2:3a:
                    55:e2:70:13:e2:21:dd:8c:7c:5a:dd:3c:0d:7c:ed:
                    2a:22:20:a5:6f:e4:a4:85:38:59:07:17:a9:74:5d:
                    65:e5:87:b5:12:0e:69:d1:b0:95:d2:b5:ca:9f:0f:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E9:AB:4B:95:7D:BF:C5:17:34:12:0D:7F:53:5D:F5:CE:F3:F7:D0
            X509v3 Authority Key Identifier:
                keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c9:35:03:c4:41:6f:5e:46:7d:ca:83:42:28:c6:56:fa:08:
         cc:d9:13:27:46:d8:8b:ca:f7:b7:d9:17:69:7f:4e:64:34:d1:
         d5:d4:29:ac:5e:c0:5a:06:71:35:03:d4:37:21:75:76:8a:d7:
         cd:41:f4:4e:d4:d2:3a:4b:c9:4c:9b:d1:d8:ff:58:d5:79:7b:
         7b:0a:d3:d4:80:05:7f:af:f2:9c:af:16:23:06:bc:fe:33:b5:
         19:a5:4f:c0:3c:c7:07:ef:d5:3f:cd:b6:a8:d5:ee:24:a3:cd:
         07:f5:44:be:08:1b:41:81:d2:51:fa:a4:9c:63:a6:b5:04:b0:
         5b:f8:85:7a:cd:ae:f8:d8:b7:1f:33:be:46:d0:ad:08:9f:16:
         5f:2d:1a:30:6c:55:3a:4c:eb:8b:1b:84:0a:34:a5:a8:ad:49:
         ee:5c:ad:40:4d:6a:78:26:fd:5d:e3:85:7c:83:d6:d0:d2:95:
         86:e3:84:93:50:10:c0:95:dd:5e:5c:1c:3f:94:b9:a3:7a:41:
         30:4c:f8:79:c9:ad:18:45:b4:cb:97:a5:32:ff:8f:16:cb:ba:
         34:d0:68:17:3d:3c:fb:1f:53:46:cb:52:47:71:9d:22:0c:53:
         46:a0:56:ec:0e:8c:f2:ae:bd:d2:54:b3:c0:e9:62:07:bc:63:
         4b:3c:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:33 2025 by rpki-client