Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
File:                     DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json)
Hash identifier:          pizW2Rl4O6T8ATqGljx3crouUcqxltH7SKfrkv7j7Qk=
Subject key identifier:   E8:94:66:1A:66:56:4E:75:B7:16:4D:38:40:AF:3B:86:57:CE:FC:31
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Certificate issuer:       /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial:       0196022DD3E7A1357EB05B8A5DF281962BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
Manifest number:          035E
Signing time:             Fri 04 Apr 2025 19:01:19 +0000
Manifest this update:     Fri 04 Apr 2025 19:01:19 +0000
Manifest next update:     Sat 05 Apr 2025 19:01:19 +0000
Files and hashes:         1: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=)
                          2: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=)
                          3: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=)
                          4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: 69Yqm1k/3zNhpA57xvTs2gpCjwpm7kTJfjdz+bsE5OA=)
                          5: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=)
                          6: UHRFReo-1BSf9UQ2btO_-d0ls1M.roa (hash: 4+IADTWz685Jfzvpde+f4j7X/Tayc+bQXgSrPnujl58=)
                          7: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:2d:d3:e7:a1:35:7e:b0:5b:8a:5d:f2:81:96:2b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
        Validity
            Not Before: Apr  4 19:01:19 2025 GMT
            Not After : Apr  5 19:01:19 2025 GMT
        Subject: CN=e894661a66564e75b7164d3840af3b8657cefc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:93:b0:af:1a:a5:53:95:d6:04:b9:63:8a:
                    4d:f6:28:fb:2b:c9:36:77:f0:d4:02:1a:7a:54:28:
                    30:cb:85:31:07:66:67:90:be:0c:9e:93:7e:e4:ca:
                    b6:c0:aa:c4:c3:75:bb:ca:a7:36:55:03:47:4d:f2:
                    4e:0a:9e:68:fb:4d:d7:7d:92:cd:99:87:de:66:28:
                    85:86:bc:72:0a:1b:8c:f2:6f:9a:82:84:c1:19:f1:
                    78:e9:8e:de:c3:c0:2a:d8:cd:cf:96:ba:d2:17:fb:
                    6a:4f:ea:94:30:89:f6:02:fa:02:6f:50:41:94:84:
                    a3:db:d2:d9:c1:c4:9b:49:41:56:1b:61:02:fd:0c:
                    38:06:87:36:9a:fb:4d:c0:75:8d:36:61:96:22:33:
                    b4:ef:bd:16:6d:74:9f:ad:40:9d:05:f3:b4:05:07:
                    1f:28:d0:b1:7c:cc:3c:b6:72:78:21:70:dd:cb:80:
                    dd:d6:6b:9d:3d:75:38:47:f0:16:20:3f:7c:ff:55:
                    78:96:af:bf:74:d6:0e:44:c4:5a:59:76:46:af:dd:
                    96:45:eb:90:c8:8c:97:72:3e:ee:5e:66:bb:9f:84:
                    30:bb:dd:9e:dc:cd:ec:f2:07:b3:0f:ec:a7:4b:7e:
                    83:d2:c3:ab:ce:d9:bb:db:98:63:be:25:0a:49:5d:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:66:1A:66:56:4E:75:B7:16:4D:38:40:AF:3B:86:57:CE:FC:31
            X509v3 Authority Key Identifier:
                keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:45:e4:2c:bc:aa:59:ee:02:dc:26:dc:12:fb:c3:f3:c4:ae:
         6c:03:94:f7:4d:d0:c3:0a:99:ee:25:8b:13:9a:89:bd:c3:55:
         d3:71:b0:a2:65:dc:64:35:2a:f5:ac:97:c2:e6:3a:69:96:b9:
         08:6e:09:d7:24:60:1c:af:f9:b8:8f:dc:9d:3a:27:6a:f8:0f:
         c9:15:d3:63:98:d0:4b:85:b9:21:66:f0:3c:e9:4e:08:ea:25:
         94:a0:d9:ac:d1:61:92:de:1a:f8:0c:a1:9e:3f:ba:db:70:04:
         32:59:97:cd:3e:3a:e1:2f:a7:d9:c2:a1:6e:45:a4:f2:35:a2:
         c3:42:17:22:e1:7c:40:d5:cc:2e:41:7b:b6:29:9d:2b:53:aa:
         1b:e2:ab:76:70:09:2a:14:a6:ef:7d:5d:08:0f:fe:d7:66:b3:
         37:c3:14:91:e9:9e:10:54:67:70:06:37:ff:b7:d8:7f:db:68:
         51:9b:5c:a0:bf:fe:53:9b:62:40:27:27:45:7d:0d:e3:74:ca:
         4a:12:47:02:15:23:ba:90:29:7b:20:0c:a2:ab:90:48:8f:bc:
         84:9b:05:55:fa:17:fa:d2:61:69:06:d3:2d:9f:67:1e:d3:13:
         9c:54:a3:f9:27:42:15:12:92:6f:f0:e2:30:57:32:d8:f5:21:
         e4:eb:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:03:20 2025 by rpki-client