Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          iJooNVpNX7VOV4Y1LDDEtZGLT/75EIYYWwRCsCkRllE=
Subject key identifier:   7E:30:D7:4D:A4:A5:10:90:5A:46:B7:86:1E:89:29:FE:01:E8:18:2C
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       01964FDAC291CFA1AD5F46D36C77E5ABCBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          0E50
Signing time:             Sat 19 Apr 2025 21:00:58 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:58 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:58 +0000
Files and hashes:         1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
                          2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
                          3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: qYd2b1yFNvuK2AjOeg6la7UMUKHKuLySF2S4BRYrcnw=)
                          4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:c2:91:cf:a1:ad:5f:46:d3:6c:77:e5:ab:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Apr 19 21:00:58 2025 GMT
            Not After : Apr 20 21:00:58 2025 GMT
        Subject: CN=7e30d74da4a510905a46b7861e8929fe01e8182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:52:c2:3a:70:1f:5a:a2:ce:1c:a0:b6:af:
                    3f:dc:df:f9:87:a4:01:7e:8b:ee:04:91:c5:6d:24:
                    0c:b2:71:9b:90:05:c8:40:34:db:1c:c6:c9:36:73:
                    4e:58:90:1d:78:c4:d4:37:31:2e:a0:37:ae:88:90:
                    3e:60:bb:15:1b:d7:24:16:8d:3d:e3:2e:01:fe:7a:
                    95:5e:7c:d4:ae:7d:48:c8:ba:06:c3:f5:9e:a5:d8:
                    00:b8:7e:a8:77:82:06:cc:a3:63:80:20:56:43:56:
                    a2:c9:35:c4:7b:e1:37:84:f8:53:02:da:20:22:e6:
                    77:1e:ce:30:fa:80:24:8c:b6:a3:01:32:a5:20:24:
                    9b:23:46:36:cf:05:f1:f7:6b:f2:11:87:db:b7:8b:
                    5e:2d:29:ec:a1:b2:5d:4d:c7:a0:e1:6d:2e:5f:ce:
                    d5:63:66:e9:1d:13:df:a6:48:20:33:cf:01:30:6f:
                    69:df:08:b5:76:d1:c6:6a:35:bc:fa:2f:90:5e:9d:
                    3a:d7:38:5e:77:94:ff:43:43:87:4d:c7:8d:d7:83:
                    6d:18:f2:eb:53:13:58:54:42:46:55:d9:5e:7a:07:
                    d3:62:82:d4:e8:10:07:40:c8:2e:cb:31:82:b5:bf:
                    f9:06:82:29:1d:17:65:e3:66:34:52:13:c1:f2:0c:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:D7:4D:A4:A5:10:90:5A:46:B7:86:1E:89:29:FE:01:E8:18:2C
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:de:86:c1:a8:94:fb:86:a2:5e:fa:6a:59:1f:f1:82:f7:
         e0:e2:f6:12:0e:71:71:1d:1e:bd:70:09:9e:59:19:5c:15:68:
         d0:b3:7f:72:a1:c0:a2:6a:0d:fc:7f:6c:c4:aa:83:ae:75:14:
         a2:1d:1a:50:26:c6:5b:2a:3d:b8:2d:48:b7:c2:97:f9:b9:84:
         6c:f9:6c:18:d0:39:20:f2:c6:6a:1b:c6:25:bd:14:2b:9d:c6:
         eb:af:f0:70:d8:88:90:b3:86:c4:d0:c5:2a:f5:7b:4a:60:54:
         53:54:5d:1d:a9:ee:29:73:1a:25:ad:5d:b4:37:4b:09:88:69:
         40:d1:4b:18:fe:43:e0:c3:38:7d:75:16:07:36:53:e0:d1:29:
         90:f1:bb:59:18:85:0c:0e:4f:f3:3b:42:d0:9f:e6:47:25:de:
         fd:ab:de:e2:36:f5:3f:43:5f:e5:80:8e:b0:98:73:41:71:8b:
         2b:6b:26:52:20:1c:54:e2:31:5f:80:59:ae:44:e1:c7:46:44:
         51:7e:6c:56:01:02:e5:87:85:39:d1:f7:91:ca:c4:18:e2:57:
         25:59:cf:9d:0d:82:49:e5:c0:3a:46:63:ae:7e:bf:d3:11:9b:
         f5:1b:6c:3b:bd:86:1c:5c:18:b6:d0:6f:4d:15:60:39:05:e2:
         5b:87:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:42:02 2025 by rpki-client