Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          55nDxfGJnwNARLNRBzUMtckkQnQnC5lfANa2eEAgjI4=
Subject key identifier:   4D:05:FA:B0:F8:B0:4D:CD:A7:3D:EA:8C:AB:A4:BD:2F:B3:7D:C1:F4
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       019652DBA5CE20BB1AA37BCB903673738586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0D15
Signing time:             Sun 20 Apr 2025 11:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 11:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 11:00:48 +0000
Files and hashes:         1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: sFxsDwcYd69CnVMzudAs/iU4a3RyIqv2QZ7SXmwf9h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:db:a5:ce:20:bb:1a:a3:7b:cb:90:36:73:73:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Apr 20 11:00:48 2025 GMT
            Not After : Apr 21 11:00:48 2025 GMT
        Subject: CN=4d05fab0f8b04dcda73dea8caba4bd2fb37dc1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:69:c9:82:bb:99:54:4c:ae:5d:f4:b0:ab:
                    37:32:84:39:b2:5d:60:d8:54:89:95:1b:b5:32:aa:
                    2c:a3:de:88:cc:39:62:1f:4b:6c:41:17:bf:96:9b:
                    36:1e:f5:72:f9:a2:9c:73:fd:0d:97:7a:b2:97:5f:
                    78:7a:68:7c:bf:ee:8c:9a:7f:33:a5:63:94:c3:8b:
                    22:79:79:be:83:59:4d:fb:a4:a8:7a:f0:b4:3f:c0:
                    61:e0:8f:10:11:db:13:63:3d:37:98:f8:4c:3a:12:
                    50:34:ab:dd:b1:2d:8f:71:56:be:ab:75:ce:ce:50:
                    f7:3d:6a:8a:1c:bd:7e:7e:3d:04:f7:e6:97:60:19:
                    70:53:d7:af:bd:b5:df:b7:5f:b8:99:4d:d5:3c:21:
                    91:6a:36:db:1b:f9:89:6a:55:20:08:0f:bd:22:db:
                    25:fb:bc:7d:73:d0:94:9c:f8:bf:4d:ee:11:3d:90:
                    5a:6f:f0:a3:0c:c0:52:02:b5:33:2c:40:f7:ff:22:
                    b8:1f:62:8c:59:e2:c8:34:b9:2b:f4:3d:f8:91:c0:
                    23:9e:5f:59:9d:c9:3c:1c:ac:b7:31:a0:5c:f6:75:
                    6a:b7:8d:a4:71:9e:d3:37:a3:60:8f:68:f0:fa:76:
                    d4:76:43:38:ee:e9:8c:56:fe:cf:5f:2e:22:aa:2a:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:FA:B0:F8:B0:4D:CD:A7:3D:EA:8C:AB:A4:BD:2F:B3:7D:C1:F4
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:74:71:80:90:0f:61:a2:92:d4:80:4c:a1:f7:38:df:5a:a9:
         a5:e0:cd:09:03:7b:fc:d1:71:65:1b:9f:f2:cd:53:c1:78:87:
         08:54:d5:77:c2:2f:bf:36:96:e8:ab:64:f5:eb:37:fd:44:58:
         c4:d5:c4:f5:ab:fd:93:9a:78:2f:8e:3a:75:2d:6e:d3:94:b8:
         84:c9:34:c3:38:1b:4b:ff:2d:28:28:0c:0b:2a:a7:83:58:78:
         a2:11:6e:d5:a2:ef:4e:22:62:6d:59:4b:68:39:05:86:6b:fe:
         38:a7:b8:5f:24:6d:18:34:e6:9c:00:82:a4:bc:92:bb:7d:2c:
         2b:67:d7:98:e5:6e:3c:16:9a:10:19:b4:22:6e:d1:70:24:45:
         cc:9c:e7:d9:4b:b8:59:b1:11:14:0b:a0:5d:0f:38:b2:47:c5:
         ed:5d:23:f8:b4:be:0a:66:2b:00:5e:ed:8f:2a:fc:72:94:f0:
         05:4a:1f:0a:be:27:91:a4:32:cd:22:0b:ca:12:1b:2c:54:67:
         83:88:c4:8d:4b:4a:4b:a8:80:34:00:2d:f6:c9:a5:e3:cf:19:
         f2:3c:04:da:af:59:87:96:88:75:ff:d1:78:dc:46:a7:71:7e:
         4a:1c:2f:d4:27:1e:5c:ae:8e:cc:80:6f:72:c0:fa:3a:9e:15:
         b3:a6:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:42 2025 by rpki-client