Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File:                     dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier:          u0hPKAMjeHJQWqdY3R6TlqhJe2dKskMTdWuxH86ja0Q=
Subject key identifier:   13:CF:FA:40:73:93:FB:F8:61:FC:0B:28:03:51:71:37:F5:56:A8:7B
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer:       /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial:       019752348D70145EA8C05B8F506E67AEEED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 01:01:05 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:05 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:05 +0000
Files and hashes:         1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: RjT7w4jR9XEUt6xQxFQgCoy/LY0gz2WJpociZMRP1lc=)
                          2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:8d:70:14:5e:a8:c0:5b:8f:50:6e:67:ae:ee:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
        Validity
            Not Before: Jun  9 01:01:05 2025 GMT
            Not After : Jun 10 01:01:05 2025 GMT
        Subject: CN=13cffa407393fbf861fc0b2803517137f556a87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:14:63:ae:91:24:c1:32:b0:7c:fc:1a:38:
                    24:1c:d9:de:6a:aa:a1:a7:26:eb:5c:d0:02:03:8f:
                    a1:a0:47:28:a7:da:d7:03:d0:0c:96:72:54:3f:cd:
                    d7:0d:db:c8:4d:50:34:e5:5f:02:79:1d:f0:14:2f:
                    13:b2:f6:dd:15:f2:20:48:6e:4f:c1:d0:74:50:ea:
                    9c:0c:86:b4:00:96:ad:e4:3d:58:12:d5:da:65:5a:
                    13:c2:da:1f:39:1c:dd:9d:40:fd:da:f1:d6:69:47:
                    50:12:d9:de:db:c8:d6:a4:3a:40:fb:ca:95:ef:31:
                    d9:d9:95:ec:8e:43:c0:be:7a:9f:63:d6:d2:65:05:
                    84:0c:16:ee:27:81:78:c2:3c:14:35:07:f2:af:f9:
                    76:05:87:f1:f8:b6:95:0c:a3:48:66:00:6f:a8:f0:
                    41:f7:11:7e:a9:3b:8e:8e:3c:c4:8d:61:ce:2c:b6:
                    59:94:66:4c:ec:23:3d:b2:9f:46:0a:69:84:77:fe:
                    ad:fd:f3:29:d3:e1:ec:b5:26:88:ee:52:71:46:a2:
                    87:19:38:2a:da:78:29:f1:dd:35:a1:57:aa:2e:3f:
                    12:c2:b3:87:c9:5b:85:8a:5f:63:3e:dd:e6:69:d2:
                    e3:be:21:45:7b:93:6c:4a:bd:8b:5b:dd:71:9b:a4:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:FA:40:73:93:FB:F8:61:FC:0B:28:03:51:71:37:F5:56:A8:7B
            X509v3 Authority Key Identifier:
                keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:0a:88:2f:95:f4:0c:63:09:59:d0:b3:cb:59:7e:77:a6:
         10:2e:45:20:78:3e:63:20:4d:bb:3b:02:c6:62:9f:f6:32:15:
         8f:96:58:07:57:97:2b:78:60:9d:c7:cb:d7:16:f4:0d:ec:71:
         cb:09:c1:44:3f:17:71:a4:67:53:9c:e9:0b:21:2f:cd:d7:6d:
         52:aa:e2:61:87:f8:bd:d9:ac:bb:c8:59:12:ef:ed:48:ab:a9:
         fe:c8:66:7c:28:01:b2:e7:2f:37:b9:66:2d:ad:e3:a1:7f:21:
         b4:5e:e2:18:58:59:9c:8d:d2:d1:0d:8f:fc:a3:5c:1c:a9:67:
         90:8c:04:47:c9:01:7a:8d:21:1c:0e:54:05:ff:ef:34:11:1b:
         74:13:4f:0e:7b:53:b9:37:57:20:72:a8:01:39:2e:18:48:92:
         5f:e6:fc:36:f7:9a:41:29:23:77:9a:bf:06:5b:01:a8:fb:80:
         56:c2:53:35:f2:f4:bd:a0:b0:52:2f:87:f8:92:4f:88:67:d2:
         a5:43:56:3a:65:3c:73:42:20:38:40:58:f9:b5:61:7c:bc:99:
         e8:d4:4d:9d:f0:23:b8:6b:ae:eb:6c:91:a0:5e:8d:7b:48:b5:
         44:ae:2b:4e:8f:2a:b8:f2:87:a6:c7:8a:6f:63:dc:cf:46:1f:
         c1:af:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:59:05 2025 by rpki-client