Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File:                     DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier:          Apd3uYU4/1D3teXOx8cNlXPKgIB+qt9R0gA6+Zbx2oQ=
Subject key identifier:   AC:C2:9B:48:9C:86:FD:63:EC:76:5B:23:E8:6F:4E:A7:5E:86:09:34
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer:       /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial:       01965312243D7C6329D26C1B73DD2585FD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number:          0C2C
Signing time:             Sun 20 Apr 2025 12:00:19 +0000
Manifest this update:     Sun 20 Apr 2025 12:00:19 +0000
Manifest next update:     Mon 21 Apr 2025 12:00:19 +0000
Files and hashes:         1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: t1hoJJ5BC7g6c5Z4eirT7SI3lvwz3yr89sVQhR3nDvo=)
                          2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:12:24:3d:7c:63:29:d2:6c:1b:73:dd:25:85:fd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
        Validity
            Not Before: Apr 20 12:00:19 2025 GMT
            Not After : Apr 21 12:00:19 2025 GMT
        Subject: CN=acc29b489c86fd63ec765b23e86f4ea75e860934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:a1:73:55:40:d9:af:b7:a6:65:58:62:73:
                    ed:ff:52:6d:cb:65:53:d1:64:56:9b:fc:68:55:0f:
                    7b:58:07:81:d9:df:b7:df:f6:ac:ef:4f:21:bb:f2:
                    6e:d6:0a:6e:b3:8e:5a:a3:cc:87:18:1c:b0:99:12:
                    a0:de:da:3c:43:1b:40:74:68:b6:0f:5f:91:fc:da:
                    6e:c9:b5:d2:7c:fe:f9:eb:8c:fe:a8:37:15:bd:79:
                    cd:c7:db:04:83:df:e7:0b:49:15:8a:29:93:56:c6:
                    2f:19:62:ff:fc:97:24:00:1f:31:6a:5c:30:08:99:
                    50:0d:94:05:39:df:3e:2b:00:c7:d3:58:4c:33:01:
                    c4:51:bb:89:10:ee:47:df:67:90:e9:eb:d8:09:f4:
                    2d:0c:32:d6:1a:84:62:35:b3:8f:b1:df:36:b3:9f:
                    87:45:6e:f3:8d:43:ad:27:1e:30:a2:22:a5:5e:3a:
                    21:d8:6f:bb:a8:21:7a:36:c3:4c:0b:12:b4:71:c5:
                    62:45:10:8a:0c:63:20:42:8b:a3:8d:27:e1:8a:e2:
                    d3:6a:ad:13:01:68:0f:28:53:bf:d3:80:f2:c4:ba:
                    71:1e:43:9a:72:1d:fa:89:d5:1e:be:64:27:34:25:
                    f9:c6:5c:9d:af:a9:3c:9a:6f:c2:22:1f:b8:b3:d2:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C2:9B:48:9C:86:FD:63:EC:76:5B:23:E8:6F:4E:A7:5E:86:09:34
            X509v3 Authority Key Identifier:
                keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:36:1f:38:62:78:c5:5c:9f:f9:c2:61:c0:44:45:45:e0:df:
         39:a5:78:a9:7a:73:c8:3f:5a:6c:7d:c7:c6:8b:37:d5:a5:07:
         91:f9:47:9d:08:6a:22:c3:1f:53:cc:fe:89:2e:e4:c2:33:5b:
         30:3c:a6:89:cf:4a:e4:7f:6b:16:35:98:a0:a5:bd:51:fa:6c:
         ee:86:b0:e7:3f:af:16:79:d2:a6:f9:13:ca:53:47:7c:b4:09:
         6c:04:06:35:71:5d:45:50:c6:ea:74:47:bb:20:1a:a5:91:c2:
         16:70:e1:12:4c:b1:7e:8a:4f:c9:bc:32:a4:58:32:6c:47:65:
         3d:ed:9a:69:39:ed:6a:c2:ee:f1:04:d6:0c:72:e6:2c:a7:28:
         f7:d1:2b:b5:78:2b:9a:f8:c1:3b:74:d7:d1:44:01:a6:99:39:
         9f:ff:78:c3:d1:50:7b:9a:06:68:97:f7:5c:7a:a3:e8:42:f8:
         66:55:ba:cf:1e:b1:61:b2:6e:85:97:1f:d5:02:43:90:3b:0c:
         dc:5d:a1:88:da:72:cf:48:6f:aa:15:29:7a:9c:1d:df:55:be:
         b6:da:bb:d5:6a:f8:f3:d9:3c:3c:6a:32:31:a3:22:32:2e:87:
         34:8b:d1:4d:db:d6:f4:fb:7b:89:69:7a:d7:88:0f:e3:fb:dd:
         82:9f:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:07 2025 by rpki-client