Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File:                     DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier:          Ib++KAbo+qIyWNE4tqkOT1X3MRBvjC5P841z8zEBRAw=
Subject key identifier:   5F:BE:53:48:2D:45:01:95:48:71:AE:31:C6:3E:1C:3E:67:F7:A5:ED
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer:       /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial:       0197715172AE1D72242E9EE5FD000C2C1C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 02:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:52 +0000
Files and hashes:         1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: 5/M4hwj3h3ELcy9yfag2nqAlJjsn4PXJnmRmk4eB5fQ=)
                          2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:72:ae:1d:72:24:2e:9e:e5:fd:00:0c:2c:1c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
        Validity
            Not Before: Jun 15 02:00:52 2025 GMT
            Not After : Jun 16 02:00:52 2025 GMT
        Subject: CN=5fbe53482d4501954871ae31c63e1c3e67f7a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:bd:20:86:f5:03:32:98:a8:95:75:4a:0f:
                    e0:d3:cf:50:1d:89:29:23:dc:13:f2:ce:2a:60:b7:
                    63:04:d0:b0:50:06:c0:1b:b8:c0:9a:90:15:ba:c1:
                    98:98:c5:fa:e5:9f:01:17:4e:b7:cb:d9:b6:7d:61:
                    46:34:40:f9:f1:a6:fe:c5:93:5f:69:39:f1:e3:06:
                    b3:6b:bd:b0:7d:01:f6:21:69:c3:5e:ce:f6:05:74:
                    ea:3b:bb:d7:e1:8d:0c:d5:22:0d:b8:0d:3c:e6:d9:
                    fd:7d:8c:ce:56:c3:fe:74:54:6e:94:55:e4:49:96:
                    6a:e2:58:f0:4b:9e:f5:4b:94:40:a1:7d:c6:24:4b:
                    04:b3:4c:91:89:eb:c8:a6:cf:07:97:d5:8b:5e:da:
                    6f:cd:b6:54:d2:76:1a:05:a7:cd:12:f5:a9:b8:e1:
                    e6:ae:18:aa:08:10:ff:2d:ec:1c:5b:78:06:42:d5:
                    20:03:8f:03:24:c3:7b:53:f8:0e:c1:bd:43:03:e4:
                    bc:2c:a2:f3:77:9d:de:bf:5a:60:79:f1:1a:de:de:
                    a2:f4:e2:f6:8c:99:3f:69:c4:c9:9f:24:11:79:da:
                    9d:ad:7c:44:8b:45:ac:a5:e8:29:71:23:4c:13:a5:
                    8c:68:2e:83:63:b5:08:1e:a8:df:3e:48:d1:54:0c:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:53:48:2D:45:01:95:48:71:AE:31:C6:3E:1C:3E:67:F7:A5:ED
            X509v3 Authority Key Identifier:
                keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:77:2c:96:b0:ce:b1:32:12:34:60:4c:6d:af:e4:10:cf:ba:
         4d:05:f2:2a:29:d5:90:9b:cd:43:08:1c:49:07:3f:2b:74:ac:
         42:fc:07:03:96:0b:d2:f7:d2:17:9e:84:6a:fe:74:01:06:36:
         cd:d3:6e:b8:78:1e:e9:65:03:37:8a:46:07:6c:ec:21:1f:59:
         d9:2a:fa:7c:ec:37:1a:04:ae:2f:df:1c:16:87:5f:19:08:ea:
         3f:60:97:59:fb:94:f9:8c:d8:fc:68:47:4f:4a:cb:c0:ab:b7:
         3b:58:aa:a4:73:a4:b4:e7:ed:87:cf:e2:ce:53:64:0c:59:2e:
         a4:54:2a:a4:75:8b:82:6e:57:30:ca:ce:60:54:86:bb:f1:2b:
         56:17:67:53:a9:81:ab:26:56:06:90:79:f1:77:ef:60:ca:6a:
         3b:ca:6c:83:a4:16:d4:4b:a3:1d:4a:34:c4:7e:f0:1c:4b:9f:
         9c:a4:0a:48:c3:11:ad:d1:3a:e4:a7:b5:aa:20:ed:09:7e:c0:
         ce:95:51:56:f3:f3:8d:9e:31:02:bc:9f:99:b8:02:3c:54:6f:
         6d:e5:ca:71:62:71:46:ea:d1:e6:08:11:ac:cc:48:e8:a1:47:
         3d:2e:50:d1:db:0f:bb:ca:c1:49:96:b1:de:34:fc:e7:32:e6:
         be:e5:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:58:53 2025 by rpki-client