Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File:                     dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier:          LNzsZwacMrz1A0GYrdKkWpScBHbY0TroegJvLQ+ihS0=
Subject key identifier:   6F:01:8E:4C:AD:46:A0:79:25:1A:8A:FE:55:B9:2E:E6:41:DD:96:86
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer:       /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial:       019688491BBBE8DF0EF85D58C2C1D7ABDD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number:          0460
Signing time:             Wed 30 Apr 2025 20:00:14 +0000
Manifest this update:     Wed 30 Apr 2025 20:00:14 +0000
Manifest next update:     Thu 01 May 2025 20:00:14 +0000
Files and hashes:         1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
                          2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: USINFvpM2bvAqnCF638vG+Tp3RyHjLAYagVXyCTIiXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:49:1b:bb:e8:df:0e:f8:5d:58:c2:c1:d7:ab:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
        Validity
            Not Before: Apr 30 20:00:14 2025 GMT
            Not After : May  1 20:00:14 2025 GMT
        Subject: CN=6f018e4cad46a079251a8afe55b92ee641dd9686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:ab:2e:c5:f4:b6:bd:4c:9c:5c:e9:7d:94:
                    f3:15:cf:62:6f:97:0c:62:29:b2:22:e3:41:ce:66:
                    ab:6f:e2:cf:dd:3a:f4:9f:91:cb:0c:ac:02:0b:66:
                    69:fc:8c:70:3a:a8:31:a2:0b:99:13:d5:13:91:2f:
                    0f:0a:e1:3f:6d:cb:23:c5:8d:13:8e:20:9c:b5:99:
                    a8:d5:ce:75:6f:e8:4d:1b:81:e5:de:77:72:27:de:
                    3e:27:d8:3e:cd:70:e4:1e:f3:00:92:7e:59:37:65:
                    72:27:ef:a1:3e:1a:fb:c6:ef:c8:56:28:29:d7:fd:
                    53:0a:dc:49:c9:7b:f6:26:fa:56:ba:78:55:54:3b:
                    15:c6:a0:9e:d1:da:fa:51:98:dc:2c:42:95:9b:32:
                    94:4b:8a:78:5f:6f:0d:cd:81:a0:54:82:33:e8:f9:
                    e2:3b:e1:a4:8b:b6:80:ef:ed:2a:9a:1f:d4:66:c4:
                    5b:2e:50:bb:49:3e:86:c7:f1:b8:51:9a:ae:e9:30:
                    59:9a:9c:f5:45:57:03:b5:52:20:fb:30:fc:a9:1e:
                    48:70:84:ea:1f:46:bc:31:9e:47:de:99:8c:67:f0:
                    42:77:9a:2e:da:75:bc:c1:c8:b9:bb:d1:a2:f8:68:
                    a6:ad:72:21:b8:8d:e8:dd:ff:a1:8b:c5:dc:70:34:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:8E:4C:AD:46:A0:79:25:1A:8A:FE:55:B9:2E:E6:41:DD:96:86
            X509v3 Authority Key Identifier:
                keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:d4:73:88:d5:7d:8d:93:52:34:cf:de:c3:87:fb:73:a8:
         53:d9:88:7a:24:68:08:06:94:44:35:a8:f7:8f:aa:18:fa:37:
         8b:69:a8:e9:7d:71:08:a2:df:33:04:40:df:5c:b2:57:00:63:
         82:2e:3b:94:f6:58:19:79:c1:14:a8:67:54:bc:85:53:d8:b0:
         91:a9:09:65:2e:25:f8:16:da:57:a1:b6:02:44:5b:0a:7c:68:
         8b:a2:4f:b9:ab:bf:a0:95:4e:78:cd:1d:4a:8a:3a:45:15:b3:
         23:37:7a:70:3d:d1:ee:71:f7:ac:9d:dc:61:b6:cb:0f:ba:db:
         b9:f0:da:1a:20:8e:d5:f1:a9:3b:34:be:4e:c4:a7:2b:b7:a3:
         c0:6c:d3:97:62:3a:6c:f5:66:71:2e:7e:b3:e1:9b:7a:89:c1:
         4c:e1:ea:4a:a0:d8:64:c0:5b:b2:f9:ed:83:d9:b5:7a:a5:40:
         df:d3:7f:3f:20:a4:df:a3:f9:ab:54:9b:df:45:4a:11:96:78:
         74:aa:df:d1:00:35:b1:02:ae:f2:3c:bf:e8:f3:e0:ed:73:08:
         f3:e6:d6:d6:60:05:f9:00:2a:fb:94:bc:d6:8f:14:a2:31:f2:
         ed:2b:0d:83:13:79:79:ea:24:99:59:cf:29:53:dc:35:3c:26:
         4c:dd:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:49:35 2025 by rpki-client