Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File:                     du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier:          zHHUhLWiFDh3EqJ1InVSfPp8W3aQ/Uj+Lmrugkdb2/U=
Subject key identifier:   17:7C:6F:C8:B3:11:15:88:56:94:5A:73:73:61:D6:BC:C1:B5:C0:59
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer:       /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial:       01967FB3EBBA0BDCB6BD9C275BD091DE16CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number:          0487
Signing time:             Tue 29 Apr 2025 04:00:19 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:19 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:19 +0000
Files and hashes:         1: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (hash: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=)
                          2: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (hash: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=)
                          3: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
                          4: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: qaPBxdaausQQPt8qWC1nWiDOArORFMBqfG0ZHYEe0W4=)
                          5: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b3:eb:ba:0b:dc:b6:bd:9c:27:5b:d0:91:de:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
        Validity
            Not Before: Apr 29 04:00:19 2025 GMT
            Not After : Apr 30 04:00:19 2025 GMT
        Subject: CN=177c6fc8b311158856945a737361d6bcc1b5c059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:ec:83:af:e4:c1:cd:77:6b:b6:15:61:4e:
                    f5:e2:a0:b4:d5:fb:b2:df:66:e1:b0:f6:7b:28:ea:
                    22:3b:80:5e:58:22:c4:5c:3c:4c:03:9b:d0:a0:a5:
                    67:76:d4:55:fe:0f:64:36:a4:79:cd:29:3c:14:e1:
                    16:ea:26:ea:e7:6c:c6:7b:7a:10:e1:4c:56:7f:8a:
                    35:65:9a:7c:dc:ab:72:19:92:71:9d:37:35:e6:0d:
                    62:c6:ae:57:09:c4:b9:89:f1:6a:c4:40:a4:42:6b:
                    84:7b:8a:76:2a:c3:49:10:40:ef:fb:b5:a7:8b:dc:
                    36:21:d5:4f:f2:9c:6e:5b:e2:c7:3c:65:8f:bc:a5:
                    d5:49:50:c4:2f:88:0e:00:36:b4:48:60:7b:14:49:
                    76:ff:f1:50:eb:5e:ba:25:e3:7c:27:d9:d4:da:0d:
                    6b:15:5b:24:b9:78:b1:74:ba:48:09:16:ca:fb:ef:
                    34:e7:a6:37:cd:fa:12:cf:dc:8d:3d:64:96:58:48:
                    93:b5:d2:dc:34:57:48:eb:dc:c9:52:dd:41:61:df:
                    b4:0f:30:9b:61:c2:a5:4f:4e:2b:0d:b8:9b:13:e7:
                    13:c2:9a:e9:eb:65:13:d2:bd:c8:87:e6:f3:a8:18:
                    6a:98:58:40:00:61:ff:90:f1:88:25:18:b2:4a:63:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:6F:C8:B3:11:15:88:56:94:5A:73:73:61:D6:BC:C1:B5:C0:59
            X509v3 Authority Key Identifier:
                keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:c1:cf:61:d7:54:92:72:3e:ce:54:9a:7e:3e:da:5d:02:
         12:60:58:17:f0:ae:f1:76:fb:a1:d3:b6:d3:71:2a:8a:e8:18:
         40:2d:bd:f3:93:9b:86:eb:3c:d2:1f:51:1c:09:1c:7c:ad:89:
         28:2b:82:f5:f1:5a:32:80:45:90:77:d1:bb:9f:7b:7e:b1:da:
         60:28:d5:fb:55:31:e5:8d:13:e4:9a:6d:8a:e0:70:52:6b:d0:
         d9:f8:2f:07:9a:e5:95:e2:6b:5a:24:9c:c4:b1:f0:43:df:80:
         53:62:bc:cd:d7:e8:a8:4a:67:f5:6e:34:3f:32:31:e9:d3:7f:
         e9:d7:0e:f5:e0:f9:65:16:76:0c:8b:29:5e:3d:05:2c:21:cc:
         1c:a7:19:b8:b3:83:01:94:03:6c:00:08:6d:dd:f5:86:3e:b3:
         7f:64:47:e5:94:1d:13:8d:02:06:ee:99:c9:d7:22:35:91:4f:
         a8:83:d0:d5:04:bc:ed:e9:75:83:fa:b4:08:90:b1:93:c9:78:
         a3:23:cc:9c:fe:a0:7f:a6:14:58:43:78:4b:33:f0:b2:df:d7:
         d9:56:32:1d:ee:f4:4f:f8:f0:18:5e:82:fd:c4:82:03:16:64:
         3b:3c:99:6a:30:8e:c3:ed:c7:35:2e:ee:db:bc:67:f2:dc:b6:
         cf:ce:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:32:07 2025 by rpki-client