Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File:                     DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier:          qlKmmbzWRiin2NYwjD9CaDFh+kZK36DBscu0XvtbHos=
Subject key identifier:   A9:1A:AE:E5:6B:7E:4F:FB:78:1E:CE:45:F0:50:54:8A:81:8D:C5:78
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer:       /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial:       01974AE86D19DD3837720539DCE3CE4B37A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number:          0D5C
Signing time:             Sat 07 Jun 2025 15:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:35 +0000
Files and hashes:         1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
                          2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: 3BhQuKMuV4c6r9JsYjHSTV9GYZJhL3yylt6JITqFDFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:6d:19:dd:38:37:72:05:39:dc:e3:ce:4b:37:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
        Validity
            Not Before: Jun  7 15:00:35 2025 GMT
            Not After : Jun  8 15:00:35 2025 GMT
        Subject: CN=a91aaee56b7e4ffb781ece45f050548a818dc578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:f9:32:f3:5f:8e:f4:99:2a:8c:b1:d3:63:
                    00:21:eb:0e:47:17:03:d7:db:23:57:33:f3:c7:42:
                    b4:d3:0b:03:92:4c:56:40:6e:84:85:59:69:a9:8c:
                    1a:57:85:eb:f3:a9:0c:ac:8d:83:ef:07:c0:8e:ad:
                    f1:4d:1e:f1:90:7b:10:66:7e:3f:c5:96:5c:e3:10:
                    e0:f3:64:01:43:d3:59:e6:df:4a:d5:31:e7:54:74:
                    94:f6:3d:d6:d5:b6:c1:91:ed:9a:72:2a:cc:91:94:
                    84:88:37:b8:bb:cd:65:ea:a5:ee:f0:c2:b2:d5:5d:
                    e2:28:db:d4:30:5c:96:d9:08:28:c4:e2:af:94:3a:
                    12:fb:61:43:f5:86:0d:f0:24:27:f2:23:94:45:6c:
                    9f:ea:d4:23:59:81:05:94:da:2b:59:37:9b:6d:48:
                    8e:68:42:a5:fb:7f:c5:8d:58:d3:30:d5:9d:08:0e:
                    53:22:0d:09:fb:de:ff:ee:62:9f:e6:cf:08:f0:60:
                    cd:95:bc:9a:d7:db:2f:42:35:30:7f:55:22:5a:e8:
                    6c:e3:12:71:fb:89:1a:52:04:fb:29:73:aa:e3:90:
                    9c:a2:3b:59:d0:88:41:b2:ad:e6:05:38:8e:d6:a6:
                    57:d5:28:51:87:89:7e:bb:46:59:12:21:69:08:84:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:AE:E5:6B:7E:4F:FB:78:1E:CE:45:F0:50:54:8A:81:8D:C5:78
            X509v3 Authority Key Identifier:
                keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:b3:f1:03:02:33:91:09:04:41:96:6f:e3:a0:5c:f4:24:
         8c:17:58:a9:a5:35:e2:4a:0e:65:7c:32:00:c7:fd:fe:fa:e2:
         27:ec:a5:ca:7c:dc:d1:ee:62:52:4c:0a:dd:04:40:20:3d:70:
         aa:3f:2b:71:22:9d:c1:eb:b0:ef:20:5d:cc:7d:91:1b:92:29:
         35:a4:e7:24:ad:27:71:83:de:1a:53:93:6d:0a:6b:21:cc:4c:
         cd:6b:5a:47:72:51:cc:3e:ea:18:df:58:2e:a4:2e:0d:6c:79:
         ae:6a:4f:ac:01:f1:0e:a1:86:72:55:2e:ed:d5:d6:5c:03:9a:
         70:03:88:7d:c9:79:7f:4c:a3:ed:ec:1a:a4:49:9d:4e:85:85:
         53:86:8a:56:cf:0e:47:48:ad:e3:27:a7:b8:4f:15:b8:a4:1d:
         eb:98:8b:bc:d8:d6:0c:9c:f7:9e:21:bb:f7:d0:80:6f:3b:67:
         e4:d1:a3:8c:63:56:4a:fb:ed:f4:eb:21:2f:71:71:7c:42:2f:
         6f:09:61:9e:05:5b:2f:17:00:d9:d5:dd:43:10:b0:4b:8e:05:
         97:0b:8f:c2:0b:25:b5:96:f4:9c:e6:42:82:1a:c3:2c:4d:dc:
         34:d9:77:f4:37:18:bc:52:65:49:ef:4f:df:62:3e:57:f7:39:
         05:4b:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:46 2025 by rpki-client