Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
File:                     DppcMoOmoWtNIFp8Vko4JkHNhpE.mft (raw, json)
Hash identifier:          QSIZDOA/HalIK0E1PijOcixb1AOPKiOn2nxjYUJLhYE=
Subject key identifier:   9E:6E:1D:DC:78:05:33:E2:4F:E9:53:C6:31:EA:74:E9:D7:3F:96:91
Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
Certificate issuer:       /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Certificate serial:       01958F2A5949135D4523AAD96C9348B9786F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
Manifest number:          0BB7
Signing time:             Thu 13 Mar 2025 11:01:11 +0000
Manifest this update:     Thu 13 Mar 2025 11:01:11 +0000
Manifest next update:     Fri 14 Mar 2025 11:01:11 +0000
Files and hashes:         1: DppcMoOmoWtNIFp8Vko4JkHNhpE.crl (hash: 8jE1WMs6VW4YoRTPor7BoS1lNgPjagt6vlkUMXFVqGE=)
                          2: YFRpsaUmyU9EnR_gTKsgrH2_HMo.roa (hash: hg0m11jJ3WBuNJmw40K5KsiZlFjYLuwxrxAHutFP45M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:2a:59:49:13:5d:45:23:aa:d9:6c:93:48:b9:78:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
        Validity
            Not Before: Mar 13 11:01:11 2025 GMT
            Not After : Mar 14 11:01:11 2025 GMT
        Subject: CN=9e6e1ddc780533e24fe953c631ea74e9d73f9691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:9c:f4:b0:d6:ac:2e:a0:7d:69:a6:0b:53:
                    85:2d:76:84:7f:cd:34:ab:c3:55:57:4b:f1:64:05:
                    a1:8f:4d:91:1b:4c:74:39:48:92:8f:05:da:9c:54:
                    78:48:8d:a9:ca:6d:3f:ad:6d:1e:27:d0:5f:8e:fe:
                    f0:6c:f5:15:9d:5b:69:41:ba:f8:b1:b6:bc:51:40:
                    f1:26:e5:43:15:e0:b0:bb:4e:ab:15:2f:60:09:05:
                    56:0a:70:11:ba:37:88:ee:35:f8:f2:5d:4a:0c:73:
                    c3:42:b9:11:dc:ee:a3:b6:3c:e8:6f:b1:76:3f:d7:
                    95:a4:f7:2d:f6:a4:f9:61:7e:c1:53:32:22:ee:e0:
                    5d:65:a7:e2:cb:d7:d5:2e:8a:88:97:9f:25:42:71:
                    e2:a1:2d:59:28:5b:6b:66:0a:e3:fd:48:ac:38:dd:
                    3b:3d:d2:e7:fc:27:17:26:f2:ed:00:ba:cd:2a:f0:
                    0b:83:fa:f8:02:9a:b7:14:6f:5f:2d:07:36:d4:16:
                    75:9b:30:19:e6:43:bc:c6:c6:c9:a0:f1:14:fa:51:
                    74:d9:25:9b:d7:ce:15:21:a2:c9:e3:7e:6b:d1:74:
                    78:59:3d:c4:42:02:62:2b:2a:fa:64:17:b4:3b:fb:
                    56:23:9d:eb:61:93:dc:f0:24:30:ea:2a:e0:a4:46:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:1D:DC:78:05:33:E2:4F:E9:53:C6:31:EA:74:E9:D7:3F:96:91
            X509v3 Authority Key Identifier:
                keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:e5:f1:68:50:d7:72:63:84:ca:a3:2d:11:1d:0a:74:ae:
         95:c4:ba:19:68:b6:f2:14:0a:11:69:73:de:fe:95:90:7f:db:
         bf:b4:6c:b0:11:c2:0e:c5:76:2b:ae:83:c2:35:1d:72:44:2b:
         38:9f:72:ec:40:ea:a7:67:a4:f2:fd:c1:3b:1e:b2:4c:b3:42:
         78:a7:5a:42:b0:22:86:9f:3c:2d:bb:3d:04:45:5c:cc:e5:35:
         9c:f3:38:54:f6:ea:67:50:d2:a5:f2:aa:27:f1:86:e0:92:f7:
         55:b9:fc:4f:25:57:a5:11:c5:a3:2a:98:6e:bb:0f:f0:fa:a7:
         14:3f:de:25:3d:42:7c:38:60:77:dc:33:ab:f8:a1:37:11:7f:
         9f:d0:ef:dc:5d:fd:05:28:d7:17:73:92:c9:8c:21:09:9f:dc:
         cc:d4:4b:ec:64:34:b5:d5:cb:7c:ed:2f:99:31:45:6b:2c:85:
         2e:b9:0f:98:af:d4:9f:5c:f4:0f:d5:bf:7e:d1:f5:52:e5:61:
         cf:7d:01:fd:a3:33:c1:70:73:49:7d:0d:3c:f9:40:73:dd:a8:
         af:9b:a5:16:7a:f6:fd:f1:ea:1c:b1:6e:6b:ae:3c:50:a4:71:
         c6:d6:ff:34:46:e5:ee:5d:0d:b2:d6:eb:a9:68:fc:5d:fb:0a:
         6e:c1:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:41 2025 by rpki-client