Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          aMWC9SJMcEKRU8vBZk3Let8rP38hKnXbpsZ1HoSl27A=
Subject key identifier:   31:B6:E4:17:14:45:53:84:2A:D3:1F:58:F8:68:E1:82:94:BD:8E:E4
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       019611A09CE848F70FAB00953FDF92B81980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          14DF
Signing time:             Mon 07 Apr 2025 19:01:00 +0000
Manifest this update:     Mon 07 Apr 2025 19:01:00 +0000
Manifest next update:     Tue 08 Apr 2025 19:01:00 +0000
Files and hashes:         1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: u8M70FS+1Cy7a7/QD8L2EXcAz5PtoTlVKME/u9U90lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a0:9c:e8:48:f7:0f:ab:00:95:3f:df:92:b8:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: Apr  7 19:01:00 2025 GMT
            Not After : Apr  8 19:01:00 2025 GMT
        Subject: CN=31b6e417144553842ad31f58f868e18294bd8ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:88:3b:46:5b:24:72:c1:da:0c:6a:b9:0d:
                    4d:4c:22:9b:b7:87:f3:d0:23:93:05:d4:ed:a6:98:
                    fc:dc:b4:fe:31:4e:3f:b3:9d:b4:87:a4:56:41:3f:
                    b0:5b:1f:ee:be:62:18:2a:a0:89:b1:f3:ab:94:37:
                    5e:15:8c:1b:6e:18:30:3d:25:50:af:71:18:93:63:
                    78:df:0d:a8:b0:a2:ea:62:cb:09:43:d8:87:a5:2e:
                    5e:31:a4:7b:f7:ca:47:ed:bf:d0:41:18:3e:b7:ec:
                    7d:c7:f4:33:e7:8f:ea:dd:35:e2:74:95:5a:27:fd:
                    5e:26:bf:b1:84:c2:70:e3:9a:2d:2f:f1:6a:a4:ae:
                    3a:c8:5f:bd:42:00:c3:4b:74:da:ec:53:7d:be:70:
                    a9:87:a1:1d:f7:40:58:8d:ed:a9:15:30:49:d7:db:
                    23:e3:96:a7:83:2f:ab:c1:b9:b8:f2:cf:b3:91:3f:
                    d6:41:1a:6e:65:82:32:9b:d7:8f:70:1e:65:d5:6b:
                    82:de:0d:a2:f9:01:1a:38:c5:88:4e:2d:e5:74:75:
                    5e:d9:12:86:4f:b3:b8:3e:49:1f:18:04:f9:3d:f6:
                    db:01:54:c6:47:a0:fe:7f:76:f4:16:bc:a5:0c:ee:
                    c1:7f:2e:46:67:20:7a:6e:c8:09:29:31:40:70:94:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B6:E4:17:14:45:53:84:2A:D3:1F:58:F8:68:E1:82:94:BD:8E:E4
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:ff:1d:28:08:10:9d:3f:29:85:4e:14:19:3b:e4:f4:77:
         77:4c:c2:5e:b5:3e:d8:44:98:73:b2:83:29:71:de:77:a5:87:
         14:a6:c2:4a:96:6d:9c:82:39:45:37:b9:71:7c:a0:b4:7a:0e:
         86:ee:0c:60:d2:28:20:68:07:1e:59:4d:f5:64:40:3c:d8:b8:
         34:d3:96:57:88:55:bd:70:4b:34:07:d7:66:40:37:41:53:53:
         83:0c:ad:59:2b:86:81:4e:31:f0:b0:4b:c5:1a:af:3b:f5:2c:
         1f:51:8e:80:33:88:20:3d:ab:22:d5:90:72:08:5a:42:f3:67:
         89:16:83:3f:41:05:d3:10:33:05:9e:12:e1:67:0d:2f:5a:9b:
         11:a7:92:6f:5f:5d:43:12:46:be:29:d0:3b:a8:03:c0:a0:86:
         66:b9:ab:ce:c8:40:60:88:1a:81:9c:24:1e:db:76:99:7e:cc:
         ed:01:d4:b6:8b:6a:b8:ec:f1:29:70:cf:d0:3f:c2:37:eb:45:
         bf:cc:6c:6e:d7:e3:7e:13:22:41:7d:a7:78:83:a3:89:45:e4:
         7e:9f:36:36:e3:51:14:5e:9e:95:58:f2:54:8c:f3:1d:c1:b1:
         5a:cc:12:a3:26:51:98:8a:c5:7d:83:81:64:85:8a:0f:ad:d1:
         27:ca:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:31 2025 by rpki-client