Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File:                     DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier:          S+kQWgPt1gaf/Pe2FcA7ZM5yIcUQFwaWeGMBMZ9HeA4=
Subject key identifier:   CB:0D:F5:9D:2C:91:5B:60:23:3F:D2:46:11:0A:64:3E:BB:CE:5F:1C
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer:       /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial:       01964F6CE6F195A9A8DC9F847086E16E3DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 19:00:59 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:59 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:59 +0000
Files and hashes:         1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: f6rH8ELMgoxNPNsC1gqobMzYAiXL6R4mooumaYsMyOk=)
                          2: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
                          3: uZ6cxSQ0225PPhp2j-kmEHUZR1Q.roa (hash: BajzGRYh0a52YWAxzOkIkSFUZpyzgre8aTootK/khPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:e6:f1:95:a9:a8:dc:9f:84:70:86:e1:6e:3d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
        Validity
            Not Before: Apr 19 19:00:59 2025 GMT
            Not After : Apr 20 19:00:59 2025 GMT
        Subject: CN=cb0df59d2c915b60233fd246110a643ebbce5f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:c7:78:8d:ab:de:4a:b5:69:6a:85:70:2e:
                    fb:1a:cd:28:28:fd:a6:18:72:c1:f0:1a:73:bd:9f:
                    a9:f1:4d:9d:a2:2a:70:8b:93:86:fe:a1:e6:dd:ed:
                    bf:7c:1c:95:6b:67:63:f9:5e:79:5d:a0:e1:ca:f8:
                    39:57:e7:c8:f9:ea:6a:dd:0b:68:80:52:fa:5b:f0:
                    f7:ad:ee:7b:cb:2c:04:2b:1e:0e:fc:63:cd:da:da:
                    40:52:de:19:40:9a:8b:9d:fa:b8:71:e1:bb:90:9c:
                    c5:7f:c2:49:73:e9:ad:3b:21:f2:67:61:c8:ad:b4:
                    1f:65:31:85:6e:79:bd:ac:bf:f7:41:ca:43:38:9a:
                    fb:6c:f0:fc:c1:60:40:3d:c1:98:9b:c9:ae:78:70:
                    d3:3b:71:4f:43:84:fb:b2:5c:c9:cb:9e:bb:97:3f:
                    ec:e4:49:db:93:42:3e:c4:44:94:15:f4:02:c2:18:
                    11:aa:45:c7:88:9a:6b:68:1e:ab:8f:86:fe:60:6e:
                    85:78:57:7a:5e:9b:6b:bb:5e:be:c8:55:c6:36:3c:
                    5e:71:5b:85:28:c4:95:18:70:7a:7d:4c:aa:fe:30:
                    b9:32:80:4c:03:8d:cc:7b:20:97:a6:66:60:6d:b8:
                    ea:09:e6:d8:40:62:62:d8:0e:0e:29:90:b7:cf:80:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:F5:9D:2C:91:5B:60:23:3F:D2:46:11:0A:64:3E:BB:CE:5F:1C
            X509v3 Authority Key Identifier:
                keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:36:ee:82:7b:9c:eb:20:d0:49:79:04:5d:01:7d:f0:ad:c6:
         06:2c:44:b1:ec:28:d1:5b:fc:df:96:ff:1f:45:8f:06:3c:3d:
         36:96:74:62:2a:b7:29:9e:de:ec:51:b9:34:dc:86:84:22:a6:
         24:58:1a:ad:e7:48:4a:b6:8b:48:c2:ea:3e:d6:1f:28:e9:85:
         97:07:84:b0:e6:c6:9c:18:2d:6c:01:d0:38:88:76:ea:dd:ed:
         f9:3a:72:4c:14:38:eb:b7:27:ff:64:10:52:9a:e4:71:52:fc:
         2f:34:61:9e:e7:04:bd:0d:a2:70:f1:7c:f9:52:ae:0c:95:e7:
         3e:8b:c9:1f:08:e3:47:c2:c5:4e:a8:28:53:e7:6c:62:28:06:
         10:89:8d:bb:8b:3b:8b:b0:55:b8:b8:d2:af:17:de:93:3a:e9:
         5c:34:eb:6a:62:ac:0b:a1:02:79:63:a0:ae:77:88:81:af:1a:
         a0:2d:af:4a:d4:5a:11:81:af:bc:13:b9:ec:c6:4c:56:1d:aa:
         11:15:2f:08:1d:3b:b2:97:e8:e6:77:14:65:e0:0a:b0:e5:ca:
         34:07:82:96:7c:24:8c:2d:53:2b:e9:7d:6f:aa:5f:98:7f:37:
         ad:26:36:e9:b6:a2:32:a4:55:93:82:2f:8c:58:74:65:77:56:
         d4:8d:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:30 2025 by rpki-client