Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File:                     0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier:          DLV6RMyJEX1Rj3bsmJQBN1C7LIbJtb6hZVdGufOhQf0=
Subject key identifier:   85:B6:62:55:04:7F:8E:48:D5:25:3C:48:72:8F:2D:30:B9:08:32:B1
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer:       /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial:       0196041CBE4A893C03922B3C720971243938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number:          083E
Signing time:             Sat 05 Apr 2025 04:01:54 +0000
Manifest this update:     Sat 05 Apr 2025 04:01:54 +0000
Manifest next update:     Sun 06 Apr 2025 04:01:54 +0000
Files and hashes:         1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: 4QYec2RQdY3pnhhsvduIy6bIof4qkX5fytNejsC/FI0=)
                          2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:04:1c:be:4a:89:3c:03:92:2b:3c:72:09:71:24:39:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
        Validity
            Not Before: Apr  5 04:01:54 2025 GMT
            Not After : Apr  6 04:01:54 2025 GMT
        Subject: CN=85b66255047f8e48d5253c48728f2d30b90832b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:f1:13:fa:1a:7e:d3:9c:cd:b5:b1:9c:c8:
                    34:bc:c0:b6:99:ee:80:ee:6f:f6:06:49:3e:ca:be:
                    c8:cb:18:65:58:49:14:ae:95:3a:0e:40:7c:f0:78:
                    02:05:7d:fb:74:4c:b9:b6:6b:a4:c8:32:22:6f:25:
                    6e:06:31:53:d4:68:15:74:ce:43:ec:f4:0d:bc:50:
                    c9:bc:4d:d9:e2:22:c7:fb:48:91:99:a2:c5:25:85:
                    f5:5f:b2:f8:e6:9c:25:65:e1:4c:92:82:74:ae:4a:
                    9d:14:c3:4c:fd:1c:1a:a6:1c:79:6a:f5:b8:3e:90:
                    9d:6b:35:46:21:85:2e:ab:af:6a:f6:00:50:0b:e0:
                    62:cc:88:00:14:e2:77:73:e4:c5:10:97:a5:be:01:
                    e5:de:6d:d4:5c:9b:94:47:fa:dc:1c:91:dc:63:6e:
                    73:2f:ce:81:86:d6:7a:07:c8:6d:ef:c9:58:02:c7:
                    3e:74:53:75:a8:12:7a:d8:77:ba:ef:31:39:e0:90:
                    18:7a:8a:99:30:e5:a2:2c:e7:79:d9:46:4b:13:04:
                    bf:22:82:96:ad:73:a0:2f:e2:58:a9:b4:d7:aa:cc:
                    6f:f5:40:ca:1b:b7:af:6b:61:d0:44:47:65:44:92:
                    6f:f0:69:8a:15:b0:40:84:de:53:ff:a1:f6:39:16:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B6:62:55:04:7F:8E:48:D5:25:3C:48:72:8F:2D:30:B9:08:32:B1
            X509v3 Authority Key Identifier:
                keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:c6:47:c4:f0:81:66:cc:ce:27:f3:63:60:b7:75:f1:f4:
         ef:09:1a:c4:2f:9d:52:f8:8d:a4:8b:01:79:04:34:b0:25:98:
         6f:dd:1e:61:ad:84:ba:19:f9:4b:46:9f:0e:2b:a7:df:21:6f:
         68:7b:03:56:7d:82:3d:f9:4d:96:58:25:57:04:4b:f8:90:20:
         27:6a:97:46:e4:28:9c:09:7c:61:0d:b7:2a:92:5b:1b:eb:2b:
         12:00:4c:79:df:7b:dc:3f:8d:df:65:c2:98:c9:36:58:25:e0:
         27:1e:0c:13:a0:9f:28:9b:0f:ad:cd:04:f3:92:26:96:d8:25:
         34:7d:42:28:20:3e:40:80:3f:9f:09:16:d1:d2:c3:96:17:2a:
         06:69:87:14:4b:f0:cb:90:6b:fa:c3:60:ce:c4:aa:d5:2c:83:
         1d:f3:5b:f6:b8:fa:92:bf:61:b2:05:26:e8:80:69:03:c0:71:
         78:a2:3a:c2:26:9d:80:ec:51:2c:4e:74:ff:72:39:87:78:cf:
         9a:20:2f:17:40:32:d9:2b:be:65:3a:ef:38:7d:1c:0f:f4:d4:
         02:53:81:0e:58:6b:92:a7:50:67:83:54:d0:6e:27:fd:bb:e1:
         85:8b:b1:e2:bd:45:df:9b:a0:bd:b1:85:37:72:38:c1:36:60:
         92:2b:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:40 2025 by rpki-client