Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File:                     DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier:          5DqbOIUhBG4hlcsv0YTUhdzw3TCH/hMksOxD/3/TYo4=
Subject key identifier:   75:97:61:43:0E:46:2D:E3:D8:2E:AB:5E:C0:D5:AD:B0:2F:6F:7E:EA
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer:       /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial:       0195900649251009F1363286113EE9FD8EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number:          0E92
Signing time:             Thu 13 Mar 2025 15:01:25 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:25 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:25 +0000
Files and hashes:         1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: 7S0J2F/T/qj5Gj1DLl2IfZss+27ouDqkJcWWndYiJ/U=)
                          2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:06:49:25:10:09:f1:36:32:86:11:3e:e9:fd:8e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
        Validity
            Not Before: Mar 13 15:01:25 2025 GMT
            Not After : Mar 14 15:01:25 2025 GMT
        Subject: CN=759761430e462de3d82eab5ec0d5adb02f6f7eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:91:52:da:bd:36:1d:93:b4:63:2a:e1:68:
                    d9:d7:3f:52:59:ba:ae:3f:c4:24:e0:28:2c:43:f2:
                    34:2b:2d:3d:94:b0:c2:07:65:80:c2:eb:3e:a7:db:
                    62:f4:91:0e:df:43:5c:a9:2f:1b:c0:2e:b0:de:d0:
                    8a:20:4a:07:ad:11:9c:aa:55:9f:07:c4:5a:67:51:
                    de:91:d0:a0:cd:8d:39:3a:3d:78:82:d2:71:c0:a6:
                    e8:cd:cc:3f:93:c8:2c:0c:9f:17:0d:2a:ff:8e:9f:
                    9f:c9:4e:f8:9b:32:06:b4:1a:8e:fa:c5:98:8f:88:
                    ab:12:c4:1f:cc:93:40:b0:13:6e:8d:4c:46:43:21:
                    9e:7c:b8:7c:de:4b:d0:91:e0:d1:11:4d:02:4c:78:
                    68:04:33:b3:50:ba:16:54:88:ca:3a:15:24:7b:aa:
                    31:a5:14:10:e5:a3:0d:a7:7b:f2:d7:f8:26:6c:40:
                    71:8d:09:f3:1e:b7:aa:4c:7d:e8:a9:80:00:72:3d:
                    cc:4f:37:55:9e:86:99:49:09:ed:26:12:0d:35:13:
                    08:06:7b:77:2c:49:07:6e:af:16:de:8a:3b:9c:73:
                    6e:99:a5:1f:4d:6b:27:9d:93:97:5e:57:34:95:5d:
                    bd:9e:ef:7c:33:5e:46:b4:49:5b:37:b5:2f:57:d0:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:61:43:0E:46:2D:E3:D8:2E:AB:5E:C0:D5:AD:B0:2F:6F:7E:EA
            X509v3 Authority Key Identifier:
                keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:11:0b:0f:09:fb:d5:28:bb:cb:2b:5c:a2:18:88:e5:ad:
         c4:fa:d5:b8:06:b9:5e:91:c0:79:e6:cd:2d:92:db:31:b9:61:
         37:25:95:c7:c9:00:a7:db:81:83:51:dd:55:59:2f:65:b4:d8:
         23:4b:25:fd:7b:68:2e:69:b0:95:7e:5a:07:76:0d:46:af:c4:
         5a:03:fd:4e:da:ad:29:47:f6:c3:4e:20:a2:d2:20:b4:36:90:
         90:18:4e:6e:45:20:a0:99:7d:5d:24:35:bd:a2:96:03:d1:36:
         06:2b:be:7f:00:cd:ba:f1:cd:44:3e:21:c4:dc:12:79:40:44:
         54:fa:ee:3a:37:d1:ee:d1:23:cf:4a:ec:6a:7b:b2:e6:b2:20:
         d7:02:00:88:b2:97:f2:4b:61:68:aa:8e:29:5f:5f:19:bc:22:
         00:cd:f1:fc:72:76:92:7e:30:59:c5:77:fa:5e:6a:56:86:88:
         66:be:c5:bd:27:b6:e0:83:10:dc:e0:3e:be:bd:8b:e5:3a:21:
         71:34:13:54:5a:7f:7a:6c:96:44:4f:a0:16:2f:53:42:90:d7:
         02:52:51:a6:43:2e:a0:85:63:38:b5:71:e0:8e:17:dd:83:e3:
         ab:92:83:fe:8d:8e:34:69:91:15:4d:98:c1:8a:1e:41:72:6f:
         04:f1:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:26 2025 by rpki-client