Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          /KJmqWtwWnGonw8NsV9HPLrP94PkL9fwydZmoKPhlkI=
Subject key identifier:   9F:9E:25:6D:65:33:C1:73:4C:38:7C:4B:AE:3C:6B:EB:A9:A3:AC:7D
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       0196B3A17CAF03E27886E24C74CE1166E37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 06:00:26 +0000
Manifest this update:     Fri 09 May 2025 06:00:26 +0000
Manifest next update:     Sat 10 May 2025 06:00:26 +0000
Files and hashes:         1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: lOTkKdSreUpQSyX+ai5O9Glm7zVsn4nb2UB4YQN6eN8=)
                          2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=)
                          3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=)
                          4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=)
                          5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=)
                          6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:7c:af:03:e2:78:86:e2:4c:74:ce:11:66:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: May  9 06:00:26 2025 GMT
            Not After : May 10 06:00:26 2025 GMT
        Subject: CN=9f9e256d6533c1734c387c4bae3c6beba9a3ac7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:e5:8d:64:16:fa:5a:26:b7:5b:4f:7c:83:
                    73:7b:e5:85:07:71:bb:81:d5:91:41:9c:8a:c3:b6:
                    b2:bd:65:36:3a:48:f4:d8:bd:10:4f:02:48:dc:fb:
                    92:97:da:05:da:07:b9:2e:03:ae:4f:29:c4:18:10:
                    c2:35:ec:b2:da:27:9c:01:fe:82:21:66:6e:fc:73:
                    d8:fc:3c:4f:1f:0a:b9:1e:a2:aa:ab:00:6e:6d:67:
                    80:20:db:bb:16:f1:00:8b:03:e7:ed:9c:0d:ab:9c:
                    db:a9:01:14:53:43:ba:3c:ff:0c:29:ca:eb:4a:86:
                    21:05:59:40:a1:53:3a:1c:54:8b:dc:f1:f1:34:b5:
                    29:46:21:9f:43:19:c4:dc:a4:c1:c8:02:10:47:52:
                    7d:eb:ba:1e:42:33:69:54:3d:b9:0d:b6:52:6f:69:
                    b6:14:24:ea:d9:dc:cd:8b:18:ee:85:79:1a:ae:a1:
                    8a:49:3f:b6:cf:66:74:01:37:17:ec:e2:eb:57:0c:
                    46:05:8a:7e:6d:c6:bd:27:02:0d:76:9c:54:6e:e7:
                    35:97:10:b5:64:23:64:a4:86:e7:6f:f2:6d:75:bc:
                    f3:a5:45:60:17:0d:54:dc:33:3b:08:1d:f1:28:88:
                    41:d1:f2:88:2f:ce:e3:2c:61:40:4e:86:a2:09:00:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9E:25:6D:65:33:C1:73:4C:38:7C:4B:AE:3C:6B:EB:A9:A3:AC:7D
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:9c:56:88:0d:32:f9:54:27:e5:d2:f7:1e:60:1e:90:b4:
         44:21:3b:f4:b6:37:fe:c6:5a:38:de:26:ff:86:2e:6f:bf:6e:
         76:0d:34:d7:ba:f7:ee:62:a1:4d:a7:02:0e:5a:41:4a:37:96:
         b9:e5:83:5a:d6:67:a6:38:10:f4:8a:ab:0b:ca:17:d1:5a:50:
         a2:ad:9c:e9:67:44:d3:af:8a:83:60:2a:fa:d3:30:64:b0:4b:
         0f:e1:ab:56:d0:30:03:2d:0f:95:f2:a0:7a:fa:ba:bf:21:2b:
         a2:a9:69:11:f7:34:3f:94:fc:cc:ef:cc:b2:6b:47:0e:96:6e:
         f7:c1:f4:4c:b9:a2:25:4c:65:52:c1:41:ac:a6:34:73:13:f6:
         04:26:81:a3:3d:93:f9:f1:2b:b5:04:26:31:6b:1d:6b:72:46:
         23:d3:42:f2:1d:33:5b:cf:61:34:23:1b:fc:f4:23:c4:e8:ec:
         74:ac:f3:47:62:77:63:d5:5f:4f:7b:a1:60:0a:9d:dc:d2:c0:
         c9:0c:c0:15:be:78:e6:3d:14:3a:08:b4:1e:32:46:1f:51:54:
         06:3a:75:50:6d:63:4f:2c:7c:a9:ed:e4:19:9e:09:9b:66:31:
         d3:f7:6f:9f:ac:19:50:9a:ba:9f:c8:5a:3c:2a:41:33:d0:45:
         a0:dd:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:39:05 2025 by rpki-client