Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File:                     1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier:          HZ+AT9D43qojbdUcToW/E96TZEPsFtvbzzACp+zqoaU=
Subject key identifier:   FA:33:07:7A:8D:79:86:E2:17:D6:E2:E9:24:A5:34:7D:B4:78:83:6D
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer:       /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial:       01974C68BD1E91A2559D32F2E996B2618689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number:          12A5
Signing time:             Sat 07 Jun 2025 22:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:21 +0000
Files and hashes:         1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: NqDXaK4K3MKje/rDpiy9WNp7bXT/4HMWQcQHuqCXh9c=)
                          2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:bd:1e:91:a2:55:9d:32:f2:e9:96:b2:61:86:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
        Validity
            Not Before: Jun  7 22:00:21 2025 GMT
            Not After : Jun  8 22:00:21 2025 GMT
        Subject: CN=fa33077a8d7986e217d6e2e924a5347db478836d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:e9:5d:20:a6:02:61:bd:97:bd:71:36:77:
                    d8:47:e3:5e:4f:96:aa:e7:7c:7d:25:30:82:ce:12:
                    92:98:2c:c7:f7:52:73:4b:95:55:4d:60:16:57:a2:
                    ec:ba:68:22:db:f6:fc:c9:7d:59:7f:5f:9b:9c:ab:
                    76:96:94:8d:f1:a1:fb:e5:68:f1:ed:45:a8:2b:b4:
                    f4:1a:66:5a:82:17:24:5a:3c:ef:bc:54:69:a4:77:
                    2e:6f:b3:20:ff:69:6f:c8:a2:2f:1c:41:f4:ea:a8:
                    f8:3c:04:39:f2:2a:6e:99:70:e2:37:22:2f:1f:c6:
                    b8:84:50:fe:cc:ae:5a:a9:45:35:26:66:31:15:d6:
                    54:bb:6d:88:48:53:8d:64:a0:6f:18:99:7e:4e:20:
                    50:aa:1c:ba:76:3e:d1:7e:bd:a3:da:88:d4:5c:7c:
                    c1:d6:9e:9b:ae:cb:93:53:c3:e7:fe:6a:65:1f:4a:
                    e1:2f:45:59:35:60:49:4c:3b:a1:c1:98:99:af:88:
                    9f:85:97:7e:02:92:9d:5f:0c:4c:b4:07:e1:5e:b8:
                    2a:78:fe:bb:ca:09:2c:0e:f7:76:76:97:dc:59:cf:
                    7a:8e:b6:e9:48:27:df:d1:92:46:12:34:e4:68:c3:
                    d2:14:b6:90:d7:76:e9:c5:3a:47:f7:ea:b5:41:85:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:33:07:7A:8D:79:86:E2:17:D6:E2:E9:24:A5:34:7D:B4:78:83:6D
            X509v3 Authority Key Identifier:
                keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:66:fb:15:70:91:e7:9a:3b:f7:e1:1b:d2:21:39:ef:94:
         bc:9f:9c:cc:33:48:79:f8:17:87:4c:9b:ab:d4:42:c0:4c:fa:
         45:75:ec:bf:be:88:69:c4:7f:7a:9e:87:65:5d:48:6c:b9:5f:
         ed:48:2e:3f:a4:43:63:2c:8a:22:c1:8d:41:b8:19:b3:77:09:
         2e:25:dd:e5:5b:5a:a4:e6:bc:e7:41:43:2e:50:ca:82:11:d4:
         c3:25:44:82:9a:5f:e2:d0:53:38:c1:51:a6:69:26:c3:b4:81:
         12:4a:d6:e1:d4:41:14:6d:01:83:6b:87:d1:14:e7:af:43:8b:
         6f:f3:19:4f:ae:90:ab:74:1c:4f:b1:5d:b4:8d:6d:5d:0f:98:
         39:33:ec:4c:65:11:21:9a:2e:70:69:83:65:47:e3:32:45:27:
         dd:8a:1f:f3:15:e1:95:fc:44:23:3a:15:91:fb:9a:d2:7a:65:
         84:9d:89:e8:df:a2:11:6a:75:8c:d0:b1:0a:59:81:64:c4:6a:
         66:21:a1:eb:1f:4f:ca:d2:cb:35:46:52:fb:de:63:8b:58:7c:
         0c:5a:0e:8e:ef:c2:df:d0:d8:2a:ce:64:e4:75:77:0a:24:51:
         3e:eb:98:f5:08:29:6f:8f:fd:84:fb:fb:89:9d:87:b9:ac:53:
         eb:12:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:20 2025 by rpki-client