Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          NcPMSWrTeOL5HQJ/qd/Ivi3+yBm/ZrRcAkkEUmNUq+I=
Subject key identifier:   46:01:7B:9C:AB:ED:61:A1:38:3D:52:97:6E:8D:23:8E:D0:F5:21:F8
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       01976D746E2ECBFCD64501BF7DEEF9491CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          143E
Signing time:             Sat 14 Jun 2025 08:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:36 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: K+4AU+0xtLP++9OQxdjxuA4xzsMyHNalI3tabRjG+Sk=)
                          2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:6e:2e:cb:fc:d6:45:01:bf:7d:ee:f9:49:1c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: Jun 14 08:00:36 2025 GMT
            Not After : Jun 15 08:00:36 2025 GMT
        Subject: CN=46017b9cabed61a1383d52976e8d238ed0f521f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:30:1e:4e:c4:2f:91:b4:ac:be:b7:96:9a:
                    ec:dd:8b:e8:ce:24:79:c0:9e:16:4e:03:75:89:76:
                    0d:55:e4:e2:b2:37:81:0b:de:62:db:d9:d6:75:14:
                    dd:0c:db:34:6b:a8:96:f1:f3:d5:b2:5c:cb:85:9e:
                    21:cb:1a:35:65:55:75:21:02:71:da:26:15:75:d5:
                    41:e2:88:7c:4e:83:5d:2e:74:8c:c9:18:be:10:16:
                    7e:7b:2f:41:70:c8:f5:1e:6a:5f:fa:9f:b8:ec:7c:
                    90:cc:10:6c:e9:67:38:77:8f:ea:00:18:3e:f6:ba:
                    73:59:2f:c7:b9:46:c7:9f:ee:e6:1f:72:a6:2f:cb:
                    97:6b:b7:9e:0f:59:f6:b7:68:52:29:57:9c:9d:b4:
                    76:b1:c0:8b:77:04:da:bd:2e:9e:bc:10:82:17:c5:
                    e7:c8:2b:74:9c:36:51:24:77:5b:51:9f:d9:eb:b6:
                    2f:2d:a1:20:29:25:34:5c:d9:a5:71:b0:37:73:c9:
                    47:6c:57:b9:9d:4a:a9:2e:a4:05:9c:8c:74:6f:4c:
                    07:19:b6:4d:94:f9:4e:b6:08:b7:ce:88:92:14:1f:
                    d3:87:2c:d0:3d:48:84:21:dc:bf:1a:13:6b:60:57:
                    82:39:a1:4a:4e:05:2c:3f:33:e4:96:d1:86:15:a2:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:7B:9C:AB:ED:61:A1:38:3D:52:97:6E:8D:23:8E:D0:F5:21:F8
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:01:dd:7d:6a:a3:a4:6c:25:68:06:2e:22:be:77:7e:ab:
         25:84:83:14:95:32:e9:90:78:4d:0a:e0:b1:dd:83:60:3e:d9:
         5f:00:93:e9:d0:58:ea:dd:2b:d9:ca:37:7b:a1:74:d6:cb:a5:
         b6:df:df:da:97:2c:38:e4:a2:94:50:c3:ff:99:c1:91:1f:77:
         d7:11:f8:0e:4a:a9:35:45:6e:df:19:d4:d2:cc:59:53:79:27:
         92:71:15:12:58:30:9b:f9:5e:2f:68:a6:d1:87:3b:23:57:a7:
         98:5f:a9:af:c0:a0:32:4e:78:ef:b1:34:ad:8e:81:aa:57:43:
         a9:8d:24:bd:cf:09:55:ff:dd:55:c5:cb:f6:7c:24:b6:ca:b5:
         e6:ee:68:ef:e8:cb:9c:99:5a:a1:07:32:1e:02:4c:04:2c:f1:
         43:86:fc:13:12:a9:80:e3:48:36:62:e7:13:28:34:92:ba:c3:
         7b:4a:b4:64:7f:ff:c2:54:ca:c7:83:f8:15:01:2b:90:8c:4b:
         f5:6e:1b:4b:17:c1:06:1f:91:e3:90:86:c7:ef:5b:03:c1:26:
         d0:34:6a:f9:da:36:67:1b:44:55:db:cc:99:df:10:59:8c:e6:
         34:33:09:4d:3b:b1:72:45:76:51:67:65:92:f8:78:fc:b0:5b:
         bf:3f:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:01 2025 by rpki-client