Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File:                     x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier:          aEDAX82fdvfADOJ99/DdZbyyv18DTKqHqg5fpjZR7xU=
Subject key identifier:   3F:DC:87:C5:0D:7B:AC:2F:92:79:A1:56:43:83:59:D7:41:49:53:F2
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer:       /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial:       01974D4524506FB7B641D1BD7A0D18888F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number:          1501
Signing time:             Sun 08 Jun 2025 02:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:06 +0000
Files and hashes:         1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
                          2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
                          3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: fRVpwKfeBaR4ID+C2UKJOmY0VVuJDHt5iTgOP8sWydQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:24:50:6f:b7:b6:41:d1:bd:7a:0d:18:88:8f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
        Validity
            Not Before: Jun  8 02:01:06 2025 GMT
            Not After : Jun  9 02:01:06 2025 GMT
        Subject: CN=3fdc87c50d7bac2f9279a156438359d7414953f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:c5:0d:c9:d5:63:dc:df:73:8b:21:2b:7d:
                    bb:3a:c1:f4:9a:96:f8:36:b7:0a:b4:5a:99:98:c6:
                    ef:36:1c:a6:5f:1a:e1:6e:02:bb:ca:2d:63:d5:c8:
                    c8:b8:d0:0f:24:ef:04:96:0b:95:7d:ad:13:7f:a2:
                    ed:d5:64:4b:b2:71:b2:5e:fa:d5:a4:9a:94:b9:b2:
                    9c:3e:78:35:c8:d8:56:9b:87:33:63:86:a0:57:e0:
                    b9:a4:f7:eb:01:c2:e0:c9:a8:6e:84:d4:fe:73:b6:
                    7d:c3:4c:45:6a:9b:ef:4d:e5:30:5c:73:e4:ce:8d:
                    d0:8d:32:76:59:d1:b1:53:d0:1e:06:c2:89:d7:49:
                    e1:d8:a7:e6:72:74:6a:76:79:ef:5c:a7:4c:47:b4:
                    d5:61:27:5f:e1:2a:7a:9b:9a:97:9c:5a:21:28:3d:
                    4d:0a:f4:66:42:21:1f:d8:75:e0:6a:57:f8:89:bf:
                    d2:11:9f:13:9f:56:24:c6:b3:f7:07:3d:68:0f:79:
                    88:22:76:3b:ca:ae:9d:75:da:90:09:03:1f:27:d5:
                    89:cd:f4:44:7f:b0:ae:7b:d2:2d:08:63:ad:74:50:
                    27:6e:38:15:85:e7:80:7f:dd:29:f0:cd:63:4c:6f:
                    6b:49:f5:bb:4a:fd:e1:0e:b5:a9:59:c9:4d:13:f1:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:87:C5:0D:7B:AC:2F:92:79:A1:56:43:83:59:D7:41:49:53:F2
            X509v3 Authority Key Identifier:
                keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:a3:f3:6f:19:7b:da:29:b4:1d:5d:22:1a:40:35:a0:98:
         8d:d9:fd:56:06:d8:57:6d:d1:19:1f:2f:62:2c:d4:0d:ac:90:
         b5:92:8b:24:f6:d7:c0:d6:2e:59:75:13:32:36:6e:2e:31:54:
         fb:09:8e:50:c5:3b:05:8e:ee:8a:7c:40:98:b6:90:b5:b1:fa:
         de:02:90:7b:4f:54:0c:78:d3:b7:c7:73:59:78:f8:aa:98:b6:
         7b:38:89:19:f9:8c:79:20:cc:fa:28:b7:ca:99:b4:be:02:8a:
         d1:aa:e2:3e:aa:a1:38:ff:2e:d0:af:34:d6:2e:b0:b8:2b:44:
         ed:76:2e:78:d7:33:85:fe:74:25:f5:05:99:8e:7a:c7:b7:6c:
         b2:d7:82:14:82:0c:67:1c:9a:89:d5:5f:93:76:01:52:1a:52:
         2a:e2:56:5d:3d:af:61:aa:ea:13:83:99:13:d5:88:6f:b9:32:
         b9:6c:f6:70:7f:10:2b:46:ea:d2:49:ec:8c:86:af:e5:70:c3:
         fd:0b:fd:a7:aa:83:93:b3:29:02:43:3f:f5:33:28:1d:98:33:
         5b:d6:bc:0f:f1:4f:0e:fd:1e:64:17:f1:8f:78:1b:dd:68:9c:
         1c:1f:82:20:d6:fe:8e:57:0a:18:ca:58:6f:18:64:f6:c6:36:
         4e:d1:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:19 2025 by rpki-client