Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File:                     DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier:          9ayuSXBlTcb30XRpq2PH3wScSQpIKHXYrve3nlHs8LQ=
Subject key identifier:   07:3A:3E:DF:CF:8C:0E:50:32:06:25:0D:EB:4C:F4:8C:A9:1B:3D:6F
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer:       /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial:       01964FA3511E7DEE7065A3576A3CB5F4B883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number:          DF
Signing time:             Sat 19 Apr 2025 20:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:25 +0000
Files and hashes:         1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: E2E83jG2jpLJ8CnAGUVutestUDyutvl1dwupOzeQV5A=)
                          2: F8pRiEheQa10SQdkNWvS99cZXUQ.roa (hash: ECJYqiZw6ZmZtQ04HHTXu/7XAKbIZCgVHRvo7AY0E6A=)
                          3: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=)
                          4: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=)
                          5: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:51:1e:7d:ee:70:65:a3:57:6a:3c:b5:f4:b8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
        Validity
            Not Before: Apr 19 20:00:25 2025 GMT
            Not After : Apr 20 20:00:25 2025 GMT
        Subject: CN=073a3edfcf8c0e503206250deb4cf48ca91b3d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:3b:f7:0d:0c:ce:d9:31:27:f3:31:30:a9:
                    88:f9:a8:35:be:3c:0e:e0:19:16:26:20:ee:6e:41:
                    52:df:03:09:7a:16:1d:f8:19:e2:bd:5b:0f:72:9c:
                    3b:74:7d:a7:c0:8e:eb:b4:c4:f3:76:71:ca:8a:e8:
                    b3:4a:33:6d:95:e5:5d:52:50:7f:61:e8:4d:4f:47:
                    77:e3:e8:3e:30:94:26:29:07:14:82:03:1b:61:17:
                    f5:ed:dd:00:5c:6d:a3:33:bd:67:0b:bb:b0:a1:51:
                    9b:e6:40:5c:be:a5:ed:77:3b:c1:45:e0:a4:bb:58:
                    17:5d:1b:15:e1:dd:ba:72:1f:53:28:57:5b:48:2f:
                    ed:59:90:22:3b:19:ba:96:ac:6b:03:06:83:9b:e5:
                    85:f8:56:94:52:d8:4b:3b:29:3a:67:35:66:42:37:
                    57:17:cd:88:71:1d:5c:45:0d:78:ef:e3:3d:1a:57:
                    de:3a:5e:a0:96:15:b4:36:e6:75:df:60:cb:bd:b7:
                    86:a7:62:34:8b:d7:4f:b7:c9:66:38:af:92:75:09:
                    44:91:4f:d1:9d:18:75:8a:2e:ea:76:01:80:af:f4:
                    bc:7a:a4:21:35:0a:d2:ac:74:44:6f:bd:04:04:1d:
                    b6:c4:27:13:7b:53:b1:54:43:54:e7:fe:97:88:bc:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:3E:DF:CF:8C:0E:50:32:06:25:0D:EB:4C:F4:8C:A9:1B:3D:6F
            X509v3 Authority Key Identifier:
                keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e4:f8:44:de:45:d2:64:c3:a2:60:f0:a2:3f:ae:4d:75:c6:
         1c:88:b5:fd:0f:45:24:1d:30:4f:32:87:b6:a7:ed:84:bf:6d:
         95:1e:d3:66:8f:e0:ae:2d:ae:89:ab:ee:39:06:1c:b7:ed:17:
         07:c2:6f:2a:af:cb:7b:54:b2:db:87:cc:38:af:f5:f6:f8:5a:
         37:24:e4:bc:85:8d:86:6e:86:cc:f2:b5:48:60:74:f5:67:41:
         92:b8:68:3d:fe:de:70:c7:5a:4d:ae:a2:7f:54:7a:db:39:7e:
         28:b4:d2:8e:cb:b4:24:ee:be:0f:16:d3:30:ef:72:47:b6:9c:
         9c:88:c0:2f:25:06:39:51:3a:8b:50:73:8e:c8:e8:2c:08:c5:
         c9:cb:58:be:16:2e:fc:6a:8e:70:2a:a0:a8:6a:dc:93:14:1b:
         6e:78:41:cd:23:38:06:f5:e5:8f:ba:d9:be:de:d3:09:3a:28:
         fb:bd:b0:1c:ff:e4:61:dd:46:b2:a3:79:02:76:e6:00:35:92:
         fa:d5:25:46:7d:9c:74:88:18:92:af:5c:64:ad:74:31:e4:71:
         65:de:e2:b9:32:da:df:70:36:9a:27:28:27:47:74:40:a7:e1:
         2c:73:12:c8:93:70:17:54:05:b9:74:06:8c:29:4b:1c:d1:3d:
         fc:ba:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:04:33 2025 by rpki-client