Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File:                     dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier:          p2GJmdjp1dbSZaniEtt6l8i3t1gx7vS+ngUluLixUt8=
Subject key identifier:   A7:76:C2:F1:44:82:1D:C6:B4:C2:30:46:6F:F2:AF:7D:D7:2A:B6:1E
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer:       /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial:       01964EFEA81DBDEBB32BC9733C5CF99CBB77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number:          1502
Signing time:             Sat 19 Apr 2025 17:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:33 +0000
Files and hashes:         1: 2NiHn34JPgLn7c-RHwoRuPR6WeY.roa (hash: WEVKN3PxbC0bS7JDTvFGcGPR4DkenMAV10t+2kflVIE=)
                          2: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
                          3: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
                          4: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: cuyz8NDJAm3ze/2NEIytNT9ZOY8YikCZb4ZDrYUshjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:a8:1d:bd:eb:b3:2b:c9:73:3c:5c:f9:9c:bb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
        Validity
            Not Before: Apr 19 17:00:33 2025 GMT
            Not After : Apr 20 17:00:33 2025 GMT
        Subject: CN=a776c2f144821dc6b4c230466ff2af7dd72ab61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:34:ca:3a:9e:1b:3f:06:8b:4e:ab:30:01:
                    e2:ec:45:cb:b0:af:e9:7d:05:ed:16:1c:51:e7:46:
                    94:ab:6c:98:0d:19:0f:21:e2:a2:39:75:88:84:6b:
                    5e:fe:27:00:19:98:fa:9a:59:28:11:81:9b:d8:95:
                    52:84:99:64:3e:be:cc:d9:11:83:bc:14:2c:96:30:
                    c7:53:47:b7:0b:e0:b7:6f:d6:b5:86:9a:24:3d:67:
                    d6:c8:a1:b9:2a:24:78:51:c4:4f:48:5d:b6:41:3e:
                    e3:3f:86:54:cc:97:d6:fe:eb:62:a5:77:f1:62:06:
                    c8:58:f0:77:a8:4a:22:d2:d1:9b:5e:96:8e:4d:42:
                    52:d6:e8:9b:7a:94:6e:3e:73:6d:c4:af:9b:40:1a:
                    62:8f:b3:94:7f:bf:82:fc:92:18:f6:c0:0b:77:a9:
                    73:8a:8a:5d:0e:60:f2:5f:68:a2:22:cc:1f:e0:5e:
                    b7:6b:82:87:e7:14:95:d8:f0:f7:2e:36:f2:c7:05:
                    94:7a:37:7e:67:a8:15:7d:19:3c:48:e6:b2:49:50:
                    ca:14:89:60:58:41:7c:50:37:88:72:93:6d:29:e2:
                    d8:0a:7d:dd:6b:ef:68:dd:95:5b:57:6a:f1:4d:93:
                    b6:15:bd:a6:c7:54:b0:75:29:d8:af:b1:28:8b:7d:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:C2:F1:44:82:1D:C6:B4:C2:30:46:6F:F2:AF:7D:D7:2A:B6:1E
            X509v3 Authority Key Identifier:
                keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:94:35:71:c1:f7:4d:5f:b8:b4:f8:08:f1:99:bd:19:71:
         3f:4e:3a:22:8d:27:77:00:f5:f2:b8:a7:32:0f:a0:e9:70:10:
         c3:64:fd:e7:23:70:23:9e:aa:f6:db:3e:a3:d4:9a:d2:57:99:
         a8:75:6f:28:90:4c:59:3b:b2:0b:e7:60:57:0d:d3:ff:94:d3:
         8d:9e:3c:42:60:6f:3f:16:b0:b9:e5:b6:d8:a9:99:f4:15:4e:
         15:e8:e9:12:af:60:51:35:5d:86:11:75:60:8a:d3:cc:22:eb:
         d6:c5:a1:c0:f0:55:3d:bc:e9:b9:39:a0:ee:9e:e2:35:89:56:
         4d:69:7e:c1:fb:cc:a4:9b:31:d2:a6:94:fc:35:a8:54:a5:04:
         64:5d:4c:19:f5:eb:88:20:36:3a:e9:7d:d4:b2:08:19:96:c3:
         22:d6:42:ea:96:c8:41:6d:6c:bc:cc:a0:c5:95:97:5c:24:c8:
         2f:97:56:4b:6f:87:b6:d0:ff:5e:df:e6:49:43:8a:e3:10:84:
         c6:e9:13:90:77:f0:c3:1b:2e:e9:39:a8:61:1e:e8:a9:65:7c:
         5b:26:21:4e:c7:c9:b9:1e:48:2c:f8:e3:0b:35:f1:1d:6e:77:
         0a:8f:3b:06:29:e0:0e:86:03:59:12:d2:0d:74:2b:7a:77:04:
         c0:52:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:47 2025 by rpki-client