Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File:                     DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier:          bbVgV802nWPIrNvd5zmfypZKBq4jJvDuplzX1+dXwfc=
Subject key identifier:   C2:7C:31:9E:C1:E3:01:60:38:58:65:92:1A:B4:1B:B8:9B:82:40:2E
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer:       /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial:       01976D743C1A4AEABCB9856720D674EDD9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number:          153D
Signing time:             Sat 14 Jun 2025 08:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:23 +0000
Files and hashes:         1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: J/ndXt6Ee/CqFN7r23LlkgBZObOAAIk8AY+SOVDS+J8=)
                          2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=)
                          3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=)
                          4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:3c:1a:4a:ea:bc:b9:85:67:20:d6:74:ed:d9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
        Validity
            Not Before: Jun 14 08:00:23 2025 GMT
            Not After : Jun 15 08:00:23 2025 GMT
        Subject: CN=c27c319ec1e30160385865921ab41bb89b82402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:14:f0:59:54:2c:46:99:b1:ba:0c:bd:90:
                    97:31:ee:d3:60:b0:3a:14:de:79:8e:46:d9:01:31:
                    b0:99:a9:50:5c:3f:8e:b5:8b:25:bb:dc:f2:67:9f:
                    ca:b2:03:f3:d5:a6:f9:5b:3e:2d:67:7d:f3:35:41:
                    59:d0:5c:79:57:62:9b:6e:e1:26:23:61:ea:b0:33:
                    7b:c0:92:c2:41:2b:7b:f0:86:bd:6c:6a:66:b2:62:
                    20:4b:f6:e2:fc:01:aa:7d:51:cd:55:0b:48:77:0e:
                    41:ad:73:3a:77:58:aa:b2:46:79:d3:6d:ed:4f:ab:
                    4e:03:66:0e:09:d8:4f:b3:35:04:e9:80:d1:c3:e9:
                    e2:b9:e5:54:57:b9:1d:1e:8a:8d:c2:08:80:9e:da:
                    20:c1:a9:80:c3:8c:32:aa:bd:28:6a:29:c2:e1:b4:
                    ba:50:95:2f:43:ba:ca:45:7e:54:9e:1a:d9:d7:88:
                    00:a7:f4:22:fd:bf:42:c6:26:45:c1:55:fd:33:77:
                    03:c8:6e:b0:a8:03:c1:fb:14:e7:54:43:4b:54:1a:
                    4c:70:31:cf:ac:51:21:60:44:3f:69:0c:d2:58:cc:
                    21:2e:5f:6c:57:1b:a3:eb:37:63:fa:c9:94:de:3c:
                    21:39:d8:5a:e9:1d:b8:7c:f5:28:cc:84:7d:11:8b:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:31:9E:C1:E3:01:60:38:58:65:92:1A:B4:1B:B8:9B:82:40:2E
            X509v3 Authority Key Identifier:
                keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:cc:4f:e1:7e:9e:17:f8:a3:d5:0a:1f:6c:85:ef:1e:ed:
         3f:42:0a:03:bf:7f:0c:aa:5a:26:4d:d5:f8:20:67:3e:4b:5d:
         82:5e:4c:0b:6e:9f:89:a9:3a:47:4f:1d:b8:be:5d:e0:33:69:
         34:10:08:ab:dc:48:c7:9a:d2:98:f1:64:58:14:04:b9:3d:71:
         0a:16:5c:77:5e:0c:da:c6:6a:3b:69:4f:24:d6:51:b9:27:71:
         e4:ac:cd:86:66:08:99:22:0a:8b:28:1e:53:47:c2:a9:08:f2:
         cd:80:c7:d8:ca:4f:15:a3:e5:04:24:61:af:a5:66:6c:a9:4e:
         a7:fa:81:30:ad:69:a0:94:98:a5:d9:c8:98:80:71:66:11:0e:
         19:00:27:1f:ed:68:86:a4:86:c6:e4:87:31:f3:62:73:fd:19:
         30:92:28:8d:81:9e:04:04:cb:4a:cd:8f:e0:5b:cc:3c:0a:92:
         7d:44:fb:c3:09:ff:db:26:00:26:2c:05:f9:1f:2f:be:7f:00:
         b5:5b:bb:dd:5c:c1:59:ec:c1:e7:88:1e:15:fa:1c:05:95:72:
         2e:07:22:e7:05:5f:c1:49:88:f3:88:65:4e:f8:a4:c1:15:11:
         5e:ff:3c:08:97:03:18:96:0a:52:3d:51:7b:43:ac:39:40:c0:
         bd:16:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:15 2025 by rpki-client