Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          CWhTpARbxqYCryZrnxU9GOxUT5LrAGqmlvcV9Rlc9hM=
Subject key identifier:   E0:9C:AE:5A:7C:5A:95:43:83:89:F9:9F:AD:FD:76:C0:05:E2:0C:A5
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       019510C7338FF582AB315F078325B3AD2F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          0265
Signing time:             Sun 16 Feb 2025 22:00:44 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:44 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:44 +0000
Files and hashes:         1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: ytJPdsXYWXJwE5L13XLQfVoaNvMTU1tWcmL1TEFnskQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:33:8f:f5:82:ab:31:5f:07:83:25:b3:ad:2f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: Feb 16 22:00:44 2025 GMT
            Not After : Feb 17 22:00:44 2025 GMT
        Subject: CN=e09cae5a7c5a95438389f99fadfd76c005e20ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:98:83:b8:e9:d9:8d:5f:36:85:1c:17:c4:
                    b2:cb:08:4a:12:a5:dd:00:64:4a:4e:96:34:90:19:
                    db:23:18:28:82:10:2b:43:f7:81:85:22:a8:7f:c9:
                    cf:29:63:9b:66:13:83:9c:bf:6e:34:d3:cc:29:fc:
                    41:15:5a:d4:a6:1a:57:70:ea:5d:eb:e8:53:b2:8f:
                    ff:62:79:19:15:8f:4e:d4:80:61:4b:3e:9d:58:f0:
                    1e:a5:76:a0:dc:c6:3e:2a:85:11:4b:bb:dc:24:8a:
                    25:fd:d2:a3:0b:fe:b8:b1:40:87:7c:a5:bf:44:4d:
                    7d:39:8f:ee:a5:28:16:24:be:71:8a:3c:db:49:ec:
                    cc:c5:81:f3:8f:af:0d:92:91:aa:79:48:01:d4:ab:
                    09:8d:57:11:cf:70:d4:6f:fb:ed:b6:66:c0:41:90:
                    3d:92:4f:85:0b:9c:ee:2a:8b:e7:8e:bf:15:41:37:
                    38:7f:48:50:6f:44:a4:23:1a:86:e2:94:3a:3e:80:
                    90:11:a6:42:2d:bb:9d:c0:54:90:0d:cb:b1:5d:4a:
                    73:a2:ce:f6:b7:73:88:09:c5:57:4f:cf:7f:67:4c:
                    8f:49:70:7f:4a:d2:a4:dc:3e:7d:dc:b5:07:06:98:
                    d1:99:48:a3:9e:b9:3b:ec:d8:1d:cf:0e:4e:d8:a6:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9C:AE:5A:7C:5A:95:43:83:89:F9:9F:AD:FD:76:C0:05:E2:0C:A5
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:2f:d1:f4:3d:d0:12:82:6c:b1:2e:0b:64:c5:0c:4b:18:
         75:99:f7:3d:57:6c:d3:18:e3:31:18:8a:a5:e1:97:22:0c:30:
         dc:db:ed:4d:80:73:a9:94:40:db:32:71:a6:a6:c0:04:bd:2a:
         c5:4f:28:52:09:24:c5:57:a3:db:4c:34:a1:8e:d3:d5:51:92:
         eb:1b:31:26:4b:3b:f9:08:59:a9:5a:37:f1:9b:f5:15:5b:dc:
         4e:75:40:bb:b0:ea:ef:46:61:d2:72:31:6d:49:95:5e:16:b0:
         78:15:a7:a7:94:48:82:a0:dc:12:a6:1b:c2:e6:87:3c:40:fb:
         27:7c:86:68:6f:38:b5:29:c1:34:b0:de:a5:2d:30:07:9d:16:
         b7:c5:49:c9:b9:40:8d:e6:02:07:79:bc:34:ac:56:8b:9c:ef:
         d9:c9:51:c0:a3:04:d1:d2:33:10:a4:83:19:5a:f4:03:3c:80:
         c9:5d:66:42:00:9d:c4:d2:e8:03:a3:b1:2f:98:3e:ea:e9:71:
         15:92:3b:b3:42:d7:b3:4c:4e:89:49:8d:e9:6c:22:2d:bf:5a:
         e7:19:ad:18:96:68:74:57:3b:bb:b2:94:fa:e9:f8:1c:d2:75:
         b3:cc:ee:b7:d1:ec:fd:b3:ba:32:08:81:aa:06:ab:ed:62:fe:
         85:f3:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:51 2025 by rpki-client