Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          xwhrN5ErA6U/hveWaovYPRNETZNGf2HRKLWYlh0Tkv0=
Subject key identifier:   E7:B1:66:31:9F:83:05:40:F9:B1:D9:88:8A:AC:F5:B6:E2:76:20:E1
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       0197583615AB048B81C0F42081F036980291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          1433
Signing time:             Tue 10 Jun 2025 05:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 05:00:28 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:28 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: Qxfz5c8T+PitqbMs31JEM4RapTcWs49ZI10+PYOEHBU=)
                          2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:36:15:ab:04:8b:81:c0:f4:20:81:f0:36:98:02:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: Jun 10 05:00:28 2025 GMT
            Not After : Jun 11 05:00:28 2025 GMT
        Subject: CN=e7b166319f830540f9b1d9888aacf5b6e27620e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:8e:7b:1c:ef:37:3f:85:5b:69:dc:d6:2c:
                    df:a1:73:17:56:da:8c:15:e7:67:ea:f1:ce:51:e4:
                    d6:87:7b:9b:38:32:12:5f:13:bf:e0:71:2d:e4:01:
                    49:86:cd:c0:73:63:69:4d:23:c7:ed:dc:d3:be:de:
                    08:70:d4:66:0a:d0:db:fc:ea:67:cd:92:84:18:8d:
                    4d:f1:b7:78:da:44:43:67:23:68:3e:f7:27:2f:50:
                    65:03:81:1c:87:cf:b3:93:f5:61:1c:bb:1f:41:51:
                    92:03:ca:b2:7c:ec:65:5d:7c:92:99:f3:a8:04:18:
                    3f:bc:d2:3c:b8:bf:4a:a2:42:9d:f1:ae:73:4d:24:
                    80:b6:b9:8d:e3:69:e8:58:59:8f:51:74:ff:9a:ae:
                    f6:14:cb:c8:f6:b7:4c:ec:67:59:7c:60:70:ea:34:
                    7a:7d:82:6b:d1:8a:30:b6:fd:df:b6:8c:57:03:36:
                    ae:06:41:9c:ed:47:1c:a2:9b:9b:4d:b1:f7:76:53:
                    48:ca:0c:00:7b:6b:44:01:00:6f:cc:3f:fd:84:d1:
                    53:59:6b:6f:45:93:cb:55:b0:b6:e5:cc:54:75:81:
                    54:c5:a8:d2:39:1c:59:78:24:6b:78:79:c0:97:dc:
                    54:71:d2:b1:39:05:44:0f:a2:08:dc:75:cb:cc:41:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:66:31:9F:83:05:40:F9:B1:D9:88:8A:AC:F5:B6:E2:76:20:E1
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:b3:40:e2:6f:d8:9c:da:b3:c6:bd:5a:11:64:17:6b:86:
         27:11:90:54:0e:ac:be:b3:a8:21:d9:91:48:43:0c:5f:6c:e0:
         15:1a:62:92:59:a9:0a:5e:dd:e9:ae:34:e9:c8:55:ed:93:a9:
         49:4f:ae:24:ab:1e:68:df:d0:af:e7:b9:1c:7e:e4:55:be:64:
         95:44:e8:6f:f3:0a:28:60:d9:11:28:55:40:b1:09:c5:db:d8:
         64:30:ab:1a:d8:2c:95:2a:b8:dd:d8:aa:7e:16:00:e3:82:c4:
         4e:79:41:30:f4:76:b2:2d:fb:a7:69:52:35:79:c9:2d:8e:ff:
         0e:b0:23:b8:44:34:33:51:2e:e3:34:b8:ff:65:db:6e:27:a5:
         a2:45:b1:49:b2:7a:68:67:4d:e6:14:d0:cf:ea:bc:2b:09:0e:
         d5:dd:96:92:41:4c:f2:4c:f8:c0:49:a4:7a:b4:91:58:21:bf:
         1f:70:79:47:c5:27:09:db:97:f5:c0:b1:93:1d:e5:26:11:98:
         56:09:9f:d3:33:18:80:c1:a5:42:a0:c5:e5:41:a6:08:8b:0a:
         3b:6c:a5:de:42:d5:95:56:f6:cf:7b:f4:95:3b:24:81:d0:aa:
         31:fe:c4:49:2f:85:fe:2b:4a:6d:9a:31:ca:99:fb:86:9f:35:
         12:04:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:12:55 2025 by rpki-client