Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File:                     dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier:          wbdiSOUF9v0GjShOlWubW/xNkaf3+X5sUBGpsz/QjdQ=
Subject key identifier:   A8:A4:0A:06:0C:F7:C6:BA:F5:17:84:F8:3D:60:6E:F9:DB:00:E9:77
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer:       /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial:       01963EAFF0A863AF76AC66D4282AA46E8048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number:          0816
Signing time:             Wed 16 Apr 2025 13:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:39 +0000
Files and hashes:         1: 8whQoCNJkcO8xIN4te953BPSKIE.roa (hash: Hi+Lg2/SC23FTXEW5HEq9SyVqw0M6I1sge9enc2fYd4=)
                          2: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: grsOvWEpYABlxDdUOcEQoM43T8xBWgwmfytAy5LwEjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:af:f0:a8:63:af:76:ac:66:d4:28:2a:a4:6e:80:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
        Validity
            Not Before: Apr 16 13:00:39 2025 GMT
            Not After : Apr 17 13:00:39 2025 GMT
        Subject: CN=a8a40a060cf7c6baf51784f83d606ef9db00e977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:ad:f6:01:7b:db:64:66:42:6e:c4:0c:94:
                    67:51:0e:08:05:45:e6:ab:12:f5:f9:bc:f9:48:c9:
                    fa:17:d5:e6:c1:21:36:5f:95:ad:53:ce:f5:dd:b3:
                    e1:d9:02:5b:08:40:8e:43:57:36:fd:93:76:d6:9e:
                    76:6c:03:7d:90:20:d7:3f:3d:99:8c:f1:75:e1:2c:
                    ca:1d:ca:a5:35:82:cf:78:4b:be:c8:63:20:fc:c6:
                    db:a0:21:84:ac:99:c1:41:8f:18:c9:fb:00:91:64:
                    22:04:ad:f3:05:e7:17:44:78:9d:6f:16:e1:3f:9e:
                    83:f1:ed:51:99:91:69:f8:ee:cd:0c:1a:09:29:b3:
                    36:11:cf:b4:78:07:2b:93:52:43:28:42:f3:8d:b3:
                    dd:03:2b:cc:10:63:05:a2:5f:01:d8:67:7a:bf:01:
                    30:90:04:18:60:c9:b9:a6:d1:9d:d0:6e:7a:8f:c5:
                    27:3d:8f:6f:07:43:83:33:73:4b:da:d1:1f:1c:5e:
                    89:f2:94:77:82:35:c1:35:25:d7:1e:d5:32:48:3f:
                    67:18:3c:db:c7:cb:86:9a:d2:6d:09:56:88:af:af:
                    b1:41:67:b4:56:66:0d:20:6c:9b:3c:88:fe:29:7a:
                    28:39:1e:67:e5:10:cd:6c:ab:43:50:ab:12:fe:61:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A4:0A:06:0C:F7:C6:BA:F5:17:84:F8:3D:60:6E:F9:DB:00:E9:77
            X509v3 Authority Key Identifier:
                keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:63:27:97:45:b9:2e:21:e7:a6:80:4f:9e:62:e7:36:ba:2c:
         45:62:4f:68:8f:0c:b2:1d:a1:8a:6a:1e:bd:91:12:9b:97:af:
         a4:a9:37:c0:0a:e6:1d:b1:06:31:9b:bc:93:08:78:82:67:b1:
         d9:c7:ac:56:65:d5:f8:18:d6:f3:14:b8:ab:02:40:88:72:14:
         ba:05:04:92:c9:5a:74:c4:a7:d1:ff:29:2d:a0:df:a2:68:21:
         0f:93:c2:16:da:4c:80:28:34:52:01:1d:e2:b2:40:c2:41:70:
         b4:5e:66:1c:f6:22:a5:8d:51:a1:70:c6:bf:98:27:06:cf:2b:
         85:51:fa:f4:b1:9f:da:4d:7a:6e:5c:d1:69:28:ae:40:26:6a:
         17:be:8b:0a:37:f8:b0:2c:5b:1c:8e:a0:42:54:67:2d:c5:d9:
         03:c3:39:b7:fa:92:13:b9:b1:87:ae:57:5e:ed:c3:d1:cd:2d:
         2b:c2:81:ed:76:20:3c:2f:d5:70:2c:d8:36:39:3f:72:c5:23:
         b5:81:7e:a6:80:6b:e3:ab:36:3e:66:27:e3:e2:13:f3:fa:c5:
         c5:f8:9b:cf:78:5b:ce:02:d3:0f:9b:53:7b:8d:4e:c7:74:f7:
         7b:38:e7:15:c4:39:38:1f:3d:24:37:66:ce:ca:11:c9:f1:5a:
         86:7e:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:11:28 2025 by rpki-client