Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          oPI+UWRCBQVzZFlorWsk2ghHgAB23gjsGsTiZC10fq0=
Subject key identifier:   49:99:13:F2:C0:5E:D2:15:4D:19:EA:B5:A0:45:B7:D6:FF:BA:CE:42
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       0197711AAE7F14E53BD310E9D187638BB0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 01:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:03 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:03 +0000
Files and hashes:         1: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: aMtqbUMyL7XTE76Yb40qjQMzdypBIq+FCcvJKp/HNrw=)
                          2: zAtYgiSv3lzLdQ7BBPQ53TQsCu4.roa (hash: oWvGPGIfuR7zXnkTrpVSOOMAOW1y+zKMrxGu/T9zook=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:ae:7f:14:e5:3b:d3:10:e9:d1:87:63:8b:b0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: Jun 15 01:01:03 2025 GMT
            Not After : Jun 16 01:01:03 2025 GMT
        Subject: CN=499913f2c05ed2154d19eab5a045b7d6ffbace42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:ac:49:a5:9c:8e:09:df:71:34:a0:0e:4f:
                    4c:81:c4:71:86:3a:92:68:98:30:d6:d1:3c:fb:0f:
                    8a:01:d5:65:47:c0:ec:3b:f0:b7:53:c9:0f:83:a9:
                    bb:23:ce:ec:24:e9:44:d1:62:68:67:8f:4c:ef:bd:
                    0c:d8:9a:ec:e0:5b:e5:a8:0f:7a:b6:70:4e:1c:fb:
                    25:18:1a:80:bb:35:08:d0:04:42:de:df:a9:8e:e6:
                    1a:4f:7e:04:2a:97:dd:19:23:c3:c5:7f:24:85:8c:
                    35:3c:b8:8e:02:41:2d:5b:e4:91:e8:ae:53:a2:fd:
                    d3:29:6f:28:0c:8e:e0:23:e1:31:28:0f:d7:3f:4a:
                    b1:77:d0:52:f1:b8:16:f0:e2:19:53:d0:f7:67:91:
                    1a:99:9a:72:83:dd:ac:56:fe:ad:be:de:d3:43:0c:
                    5e:a7:79:93:e6:5f:c4:64:ed:f4:42:fb:56:a2:4a:
                    5c:5e:b1:62:29:ef:e9:66:a1:20:16:22:71:96:7e:
                    31:60:06:fb:64:70:f2:77:f2:5f:e0:f2:54:c4:a9:
                    a9:a8:ea:03:d3:6c:f2:33:d5:c2:c1:5b:f2:bd:89:
                    35:40:9b:67:52:e1:1d:e7:4f:86:ee:38:2e:16:2e:
                    03:3c:10:76:bb:6d:08:1e:00:02:66:c5:12:9f:75:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:13:F2:C0:5E:D2:15:4D:19:EA:B5:A0:45:B7:D6:FF:BA:CE:42
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:04:2d:44:8d:98:a3:fc:e8:a8:16:b6:0d:73:e7:30:62:
         87:1a:4d:0b:47:8b:b2:65:2a:d9:45:4a:83:6f:70:5d:af:7e:
         f6:32:df:1c:ee:c8:ef:b8:6b:e9:2e:a5:8d:12:4f:04:8e:c6:
         3d:d2:e6:bb:7e:9e:42:93:aa:76:73:b5:a6:1a:19:01:7f:7c:
         3d:a4:b0:40:45:c6:b7:14:e6:0f:68:b2:e3:98:93:59:d6:0e:
         d1:fe:1c:b2:97:af:1b:cf:bb:e1:85:e1:1d:f2:9a:6e:08:96:
         3c:6b:7b:73:16:7c:e7:0e:d7:a1:1c:6d:ad:86:86:33:4b:ec:
         08:ef:a1:f6:51:c8:a1:c3:c0:45:09:10:5d:95:f0:79:ef:66:
         04:c4:25:41:a6:de:6b:f8:f1:be:20:4e:d7:5d:1c:5d:60:1d:
         02:53:57:b9:75:35:cf:56:e5:e8:72:f2:79:52:58:df:f9:d2:
         45:25:a3:e6:4f:18:03:bf:60:d2:70:95:de:6d:0c:41:ea:01:
         6c:54:ff:44:7f:73:e1:c2:60:26:47:cb:1b:48:ef:86:20:15:
         f6:92:98:d0:6d:53:80:12:4d:62:ab:71:b0:3c:9b:84:e0:e6:
         cd:53:3f:b3:9b:fc:52:fd:58:b7:e8:0b:e5:4d:87:02:8c:34:
         b1:eb:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:49 2025 by rpki-client