Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File:                     V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier:          HGrf5Ja9d0ZBHlREy7QjjnKehlPNQ9iaoBfFXYcPTd4=
Subject key identifier:   7A:76:C9:75:0E:03:50:72:F6:CC:EB:0E:C9:5A:FD:4C:3C:15:4D:9F
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer:       /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial:       019749D5DCA715DEAF2BFDF67BE34DB26A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number:          0CB0
Signing time:             Sat 07 Jun 2025 10:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:41 +0000
Files and hashes:         1: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: GrJMU8rq4E0kmLssmDiCrud3752IY58CR87xWM/M0Vc=)
                          2: r_tsaMbjHoSCsd17cgTnbS8F0qc.roa (hash: GyoTnn/PfaIn4sRuGe7d5zf2OcCelYM3H/gIy6Qo2Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:dc:a7:15:de:af:2b:fd:f6:7b:e3:4d:b2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
        Validity
            Not Before: Jun  7 10:00:41 2025 GMT
            Not After : Jun  8 10:00:41 2025 GMT
        Subject: CN=7a76c9750e035072f6cceb0ec95afd4c3c154d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:ed:4a:d4:26:5e:c1:a5:f1:91:20:c0:ca:
                    c8:84:7d:46:44:9f:09:7f:72:90:de:a0:de:4c:ad:
                    46:66:64:e7:57:00:93:84:9b:3d:7a:89:0f:d5:50:
                    7d:0f:9c:7b:6b:81:6b:fc:38:7a:2c:22:74:68:c3:
                    ee:fc:c8:84:5f:00:01:81:ef:2b:71:a9:b7:d7:6d:
                    c2:93:3e:35:6a:9e:8f:f8:51:80:8d:e2:02:c2:3b:
                    bf:eb:56:a3:37:04:d7:97:f5:f4:b8:28:4d:32:dc:
                    39:ba:ed:3f:f5:a9:45:c7:28:26:fc:5e:a0:66:37:
                    4a:08:6a:fd:6a:9f:b9:34:82:d6:14:0c:0c:c8:0f:
                    b1:1e:47:fd:34:09:ce:f9:16:29:aa:e2:e6:86:c8:
                    93:70:bb:c0:57:c0:91:80:e0:50:01:6b:33:a0:75:
                    de:a3:01:6d:4d:b7:3c:cf:ab:3e:d4:57:a4:85:35:
                    29:19:46:10:bc:21:8c:44:12:cc:eb:ee:50:a7:8c:
                    54:12:3c:cd:ad:ff:f3:06:c6:be:6c:d0:f7:23:24:
                    c3:70:c4:d7:14:f9:21:e5:48:8e:4c:8a:05:93:c2:
                    43:86:b0:3e:da:3e:2c:d3:a4:c3:16:76:de:a2:0e:
                    02:81:00:f4:89:03:b1:77:fe:a8:41:c3:c8:a0:6f:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:C9:75:0E:03:50:72:F6:CC:EB:0E:C9:5A:FD:4C:3C:15:4D:9F
            X509v3 Authority Key Identifier:
                keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:70:c0:cb:dc:a8:17:e5:3f:b8:b4:40:ff:f2:37:42:c9:
         aa:f5:d7:9c:8e:03:6b:cb:80:33:48:60:f5:20:3d:df:dc:fe:
         1b:d6:ee:85:ff:09:d7:f2:e2:6f:44:14:33:37:b8:2d:ff:b5:
         8b:8e:a5:08:7e:01:3e:d7:8e:96:4b:0e:dd:e3:66:af:24:40:
         34:a3:01:06:79:f1:77:f6:a7:34:32:62:f1:15:f8:ff:56:19:
         67:1a:fe:24:23:70:15:e0:53:47:be:38:aa:e8:8a:00:0c:78:
         34:7a:28:82:74:d2:e8:bd:74:f3:ce:b6:2f:d2:fc:d5:20:70:
         25:f0:79:2c:1c:d9:75:5a:f9:68:78:6a:81:52:2b:36:f2:df:
         b4:b9:5a:07:39:af:f4:fc:a8:ec:1c:27:37:a7:26:56:50:48:
         1a:79:83:98:69:0e:d5:e0:99:46:39:53:1f:23:6a:12:6b:8a:
         b7:68:10:98:bf:7a:eb:f7:dd:3c:42:b7:09:6a:73:f1:30:72:
         9e:52:f7:cb:fa:68:81:f1:87:4b:8b:e6:4f:ef:40:08:5e:bb:
         35:de:14:c5:d8:bf:7d:9d:07:56:b5:21:ba:96:97:dd:6d:42:
         ed:0f:55:65:9c:2d:48:eb:8f:4a:ef:12:65:f9:77:c4:75:1e:
         a5:4a:12:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:36 2025 by rpki-client