Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File:                     dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier:          5UUVfZf80ZGQvJbFiFR9g9GIr/bMROrFR1bkWVQL4Us=
Subject key identifier:   0B:8D:70:E7:12:01:03:B5:E7:0D:10:01:2B:BC:D5:89:D2:AF:FD:C3
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer:       /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial:       019748C30CAD9EB32E269E736C3FA8C961F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number:          0CAC
Signing time:             Sat 07 Jun 2025 05:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:31 +0000
Files and hashes:         1: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=)
                          2: Nss2kO7vwED_lH6zuq8RSrb2rfE.roa (hash: 1BGYAn5SxYs9ABF+oBM6hfDnitlaPkyQv+8E/VsOmZ4=)
                          3: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
                          4: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: jUt8PZKZuE95wcvmu7yWd2CwhZI30G2+yrv1s01j8mY=)
                          5: wUhuDMSsBwbclPWnAiFhijhk7qY.roa (hash: q7eZn2UzqXEGHVmt/34LCyZFoshnRxuQaC2DK2NKxpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:0c:ad:9e:b3:2e:26:9e:73:6c:3f:a8:c9:61:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
        Validity
            Not Before: Jun  7 05:00:31 2025 GMT
            Not After : Jun  8 05:00:31 2025 GMT
        Subject: CN=0b8d70e7120103b5e70d10012bbcd589d2affdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:5f:ae:fb:9b:8e:53:ee:1b:d8:b0:13:27:
                    4b:79:20:07:29:3f:9e:40:43:e3:93:92:37:9d:7f:
                    40:b4:e4:fa:08:13:4a:af:fe:2c:1f:6a:b7:f1:42:
                    a8:fd:6a:ea:c3:82:4f:ef:2c:d3:59:d2:7b:b1:f9:
                    af:59:fd:66:ad:8a:79:73:7f:ec:9c:fd:9d:ce:6f:
                    bf:eb:ab:9a:86:79:9f:4b:25:0b:96:61:44:93:9f:
                    17:a1:44:d4:16:e1:23:ef:fa:a0:81:7a:70:d5:60:
                    2f:8f:fd:24:f9:82:8d:22:54:b4:5e:3d:ec:37:3c:
                    8f:bf:bf:ba:9d:42:f5:3d:23:85:92:f6:81:21:24:
                    ee:d2:2d:91:5f:d8:86:4e:f7:e8:0b:43:cb:9f:56:
                    77:9b:ee:40:94:41:8a:ae:92:55:20:e4:3b:82:f4:
                    32:70:a4:fb:af:55:27:4c:ca:70:95:54:28:eb:bd:
                    83:a1:9e:8a:ac:b8:2a:a4:8b:cc:94:8e:7c:d9:f1:
                    f3:9b:c1:28:aa:8e:60:59:87:a0:6f:c1:b4:14:d2:
                    c5:1e:e0:25:2c:d7:e5:06:bf:d0:94:84:45:bb:e1:
                    cc:9a:af:41:56:90:b6:7a:4b:d9:df:f9:a9:96:40:
                    8d:2c:78:6d:8a:c6:57:97:65:c1:c2:3f:2d:6b:e8:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:70:E7:12:01:03:B5:E7:0D:10:01:2B:BC:D5:89:D2:AF:FD:C3
            X509v3 Authority Key Identifier:
                keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7e:03:1d:9a:6e:37:42:7c:ea:86:fe:61:d7:47:d6:87:24:
         30:13:37:f4:92:81:d3:1f:f6:eb:8c:8a:85:a5:3c:bf:d9:f3:
         2f:b6:af:48:c7:e3:e6:b3:cb:52:d3:31:17:77:a9:ca:c8:29:
         04:cf:c4:79:fc:e6:99:65:64:f2:05:c7:f9:06:df:c3:01:cc:
         81:3b:77:23:99:34:1b:1a:e2:56:5b:25:45:7c:76:79:89:2d:
         9a:2b:8d:34:94:42:fb:80:74:5b:05:b1:b4:16:fd:f9:93:d2:
         73:e6:fd:db:f1:94:92:57:4f:70:0a:ba:49:b2:ce:e1:05:10:
         5b:23:73:5c:f3:3c:da:ef:ae:be:52:34:98:d7:bb:70:a2:b7:
         7b:27:ad:33:f2:37:9d:8b:68:65:35:88:45:d4:84:8a:34:6c:
         6e:24:09:e5:67:ef:2e:21:2f:27:94:18:4b:1e:1a:d8:83:46:
         ea:2c:06:3e:4e:0f:e4:f2:e0:f4:fc:1a:00:07:fe:dc:1d:cf:
         0b:35:89:e7:b0:a9:e2:cc:df:a3:de:40:13:3b:25:4c:45:ed:
         ef:26:cf:23:1a:37:f8:65:8d:61:db:b4:3d:38:1e:2a:63:d1:
         07:4f:fd:81:87:6f:6c:8a:46:ed:4f:1d:14:d4:3b:4b:32:e8:
         65:09:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:09 2025 by rpki-client