Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
File:                     DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json)
Hash identifier:          CyseAJsZMa789uwpIMWcPVQB9O4Q1A372NQONYyYQVk=
Subject key identifier:   84:A8:6B:ED:69:E3:C4:81:0B:2A:AC:C5:50:2F:13:39:B2:DA:B6:84
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Certificate issuer:       /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial:       0197474264DD7DAD9EDEA8C99117D68791CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
Manifest number:          040B
Signing time:             Fri 06 Jun 2025 22:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:22 +0000
Files and hashes:         1: 02vGpL6-3nXJHwSBvN9lXUgbi74.roa (hash: ksLKWo621jduGsOvhJ7s2q3Q8Y3l+tWFD99a19w6yRA=)
                          2: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=)
                          3: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=)
                          4: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=)
                          5: 2OgvSkU6B3coTq_XrBtLh7r9aYI.roa (hash: 9oJ/pbxCoLxAu6aotf+D4FzsANtrhZV2j6G9rrhrP7Q=)
                          6: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: gkGNMh4wJNoX2aMtsw/e9NWkoAtSYeBTF0Pf7iYLQpQ=)
                          7: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=)
                          8: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=)
                          9: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:64:dd:7d:ad:9e:de:a8:c9:91:17:d6:87:91:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
        Validity
            Not Before: Jun  6 22:00:22 2025 GMT
            Not After : Jun  7 22:00:22 2025 GMT
        Subject: CN=84a86bed69e3c4810b2aacc5502f1339b2dab684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:f3:ee:04:2b:56:87:3d:49:53:7f:08:6a:
                    3b:78:cb:4e:57:4b:15:54:05:62:df:7e:70:78:9e:
                    52:86:a2:8f:f3:bd:2a:40:25:e2:e9:f8:66:d7:31:
                    36:e3:20:57:14:0c:2a:06:54:d1:a9:f7:6f:6a:57:
                    67:54:a9:f6:20:84:91:cd:0b:ee:73:7c:f5:ce:0f:
                    fa:44:aa:c0:fd:47:66:e4:03:ff:c7:46:9d:0b:27:
                    0e:a3:26:27:b3:d3:24:c9:09:f0:46:04:25:c3:87:
                    f1:53:6f:8e:2d:d0:de:36:6e:26:f4:7d:82:43:29:
                    4c:ca:f4:7c:5f:84:cb:46:f3:a0:06:04:f3:9f:17:
                    5d:6f:8d:06:23:46:46:9f:44:77:28:f1:0f:b2:48:
                    7b:1f:29:c7:db:23:e7:ce:7c:da:bf:99:ca:5c:d6:
                    6f:76:3e:6a:fd:be:f8:be:c5:68:54:0c:a6:50:2e:
                    ef:e0:e1:2c:65:08:4d:3a:83:f5:6f:29:ec:ab:cb:
                    c7:4a:8c:8c:eb:24:c0:10:62:32:1d:35:8e:2f:71:
                    91:fc:87:f1:24:7f:e3:5a:98:bf:a3:3e:97:4a:ba:
                    3c:50:2a:5b:c8:3e:fb:b0:ce:d0:c8:11:2d:1c:1a:
                    aa:7a:44:df:b3:71:b6:ee:7c:3f:c1:2f:f6:bf:ac:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:6B:ED:69:E3:C4:81:0B:2A:AC:C5:50:2F:13:39:B2:DA:B6:84
            X509v3 Authority Key Identifier:
                keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a5:e9:fc:84:28:e5:c5:4f:8f:36:a9:8c:d7:d0:1f:75:e1:
         11:79:a6:62:6a:c5:b4:27:2c:8c:41:24:df:05:de:ce:82:a6:
         ca:b9:a1:ed:7d:e5:58:57:08:19:12:a6:16:ea:57:af:59:a1:
         ba:99:d6:63:20:2d:6a:9d:f2:2e:14:e9:8a:d9:cd:ab:36:67:
         bd:c4:8b:e7:74:3d:86:11:e8:c0:a9:55:4c:8a:51:17:0f:11:
         81:2f:fa:0c:8f:1f:c3:d5:b2:40:fc:ce:b3:2c:5c:6b:b7:df:
         7e:50:e6:37:db:52:3f:e5:38:ca:12:c9:99:77:37:49:93:38:
         46:9c:8f:78:36:1c:f4:22:8e:b6:0d:e5:6c:0c:f6:8f:bb:fb:
         6e:d9:05:a9:8a:43:2e:af:e5:b4:61:59:9b:16:70:40:79:d5:
         64:12:9f:07:51:a9:33:e1:14:67:4e:37:a9:a5:67:1d:07:cd:
         2f:f9:af:39:4c:bf:86:3e:e5:e2:8a:9e:f1:d6:f7:5a:c8:56:
         45:e6:eb:ab:18:c2:59:21:ee:a4:40:75:c1:c8:38:91:6e:3a:
         9c:5c:ec:5b:9b:45:8b:4c:68:d3:ab:82:ad:55:7a:ee:e9:90:
         cb:05:2a:b8:2a:d7:6f:b6:0b:80:1c:6c:b0:89:95:d4:78:53:
         7f:f1:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:07:35 2025 by rpki-client