Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File:                     2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier:          n5SawfNrZBpKLG4Vk7xJ+elbFk+vdTEdx1h0TEjkyzo=
Subject key identifier:   E5:47:30:4D:32:FC:DF:48:D2:2F:3C:03:B5:F3:0E:86:B3:0F:61:02
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer:       /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial:       01963C8AF4135C73DB592548C67B47BCC187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number:          14F9
Signing time:             Wed 16 Apr 2025 03:01:01 +0000
Manifest this update:     Wed 16 Apr 2025 03:01:01 +0000
Manifest next update:     Thu 17 Apr 2025 03:01:01 +0000
Files and hashes:         1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: TCJICXmF3FeVRVWf+sKmpsCvl+zvJjsChohqD/hcZx8=)
                          2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
                          3: jWdU42AeB5hmcNLcJB4amqPIFto.roa (hash: qbiegPKmrBhrxPY1qr/z8fci1piffaE6KNVioMcvGi4=)
                          4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:8a:f4:13:5c:73:db:59:25:48:c6:7b:47:bc:c1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
        Validity
            Not Before: Apr 16 03:01:01 2025 GMT
            Not After : Apr 17 03:01:01 2025 GMT
        Subject: CN=e547304d32fcdf48d22f3c03b5f30e86b30f6102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:39:09:90:49:12:7f:7e:12:a5:06:24:20:
                    65:e4:98:a3:9d:a2:99:74:ee:10:a1:cc:12:81:5e:
                    88:a4:2d:1b:8f:02:f1:25:94:c1:81:52:b0:7d:e7:
                    11:43:1e:a6:3d:42:b4:5f:4a:45:24:1e:ea:93:c6:
                    ca:1b:43:1a:ef:9f:03:78:ea:32:75:bf:c6:6a:65:
                    f9:e5:1e:3b:fc:9b:bf:a1:45:46:37:cd:d7:01:dc:
                    b7:d5:0c:7c:28:fb:0a:ad:7a:1d:1a:b9:59:9a:c2:
                    e9:fe:00:ff:4c:df:4a:67:74:23:14:91:8b:5e:49:
                    3c:b3:77:43:f5:7f:05:8a:39:04:9d:e4:12:bd:88:
                    e5:95:cd:ee:61:de:b6:5a:2d:24:e3:73:63:43:2b:
                    b5:4e:50:44:d4:94:84:7c:50:c6:7a:00:3a:b2:69:
                    32:4e:6b:df:ed:af:ae:39:c8:56:fa:6f:0e:04:23:
                    8e:b2:43:67:10:84:1d:22:9f:9f:17:cb:bf:bd:d4:
                    b8:42:c7:d4:37:a4:98:88:ad:39:a6:2e:6a:3f:75:
                    4e:92:23:66:e3:40:cf:07:e9:e2:f6:85:e0:c1:c5:
                    81:0d:cb:18:62:67:f0:1e:cb:d5:85:41:e6:6a:a0:
                    96:47:c4:16:ab:cd:42:d6:5f:42:16:8b:c5:a3:4c:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:30:4D:32:FC:DF:48:D2:2F:3C:03:B5:F3:0E:86:B3:0F:61:02
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:15:a7:69:ae:c1:2c:6b:2c:db:84:f8:28:a2:38:61:f3:
         37:e2:c6:11:38:70:9e:dd:b8:d2:b5:56:33:ac:93:34:5e:bb:
         2e:30:8f:af:ec:84:62:9b:a4:6c:45:3f:50:b0:74:5d:c5:71:
         68:96:68:85:1b:b3:56:51:82:c4:ae:34:ad:ea:bd:18:e7:9d:
         2c:53:a5:bf:ba:4a:e4:d6:f1:d7:79:ef:e4:65:6d:2b:2d:1b:
         0f:9d:79:35:36:b6:09:46:6d:72:83:f3:a7:3b:22:f7:8d:fc:
         9b:ac:e9:3b:f2:1a:85:ee:47:72:31:fb:9c:fe:64:76:ad:0f:
         20:ec:cc:7b:42:38:02:48:f1:81:e3:6d:4a:a8:aa:15:be:a3:
         34:25:5b:b4:bb:a5:f9:ab:98:16:42:35:6e:38:d0:f6:d4:38:
         49:54:43:eb:98:d8:8b:f3:1d:6f:d6:56:d0:1b:93:c5:7b:e4:
         0f:39:96:59:c5:53:9c:ff:5b:da:b8:cf:09:86:fa:3b:24:e8:
         04:1a:60:bc:5f:5a:11:a1:10:39:39:7e:77:91:07:59:23:89:
         72:59:92:e2:1c:72:3d:d6:3c:c3:6a:d3:5a:b6:ff:01:30:98:
         76:2c:93:0e:74:c1:b7:25:85:4b:69:1d:06:df:00:6e:6c:d4:
         13:5b:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:27:15 2025 by rpki-client