Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File:                     dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier:          rxcjl7tbisUbbJaCsYnIyYaZ+QdPCm8BDqnw605VWMw=
Subject key identifier:   32:A0:AF:39:0D:81:F3:5C:A0:3F:BC:AB:EB:CF:58:99:89:9C:50:B1
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       0196959759A98C00D0056ED8DF261C8B7428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number:          1521
Signing time:             Sat 03 May 2025 10:00:46 +0000
Manifest this update:     Sat 03 May 2025 10:00:46 +0000
Manifest next update:     Sun 04 May 2025 10:00:46 +0000
Files and hashes:         1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
                          2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: I065BqQqDm0fCrQhJmZZVATNZlUEk2uX2pggpgNNwh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:97:59:a9:8c:00:d0:05:6e:d8:df:26:1c:8b:74:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: May  3 10:00:46 2025 GMT
            Not After : May  4 10:00:46 2025 GMT
        Subject: CN=32a0af390d81f35ca03fbcabebcf5899899c50b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:ca:e2:81:df:a4:53:4e:a2:71:92:be:00:
                    f7:2e:52:ab:2d:da:92:2b:61:2e:95:5c:88:d5:96:
                    64:66:e3:f9:fe:0e:9e:8d:a7:79:9b:a9:8c:33:1c:
                    5f:cf:4a:78:dd:23:b1:ba:64:a4:14:d8:e1:26:d9:
                    09:4b:d2:f9:c2:95:33:50:ae:01:fd:45:bb:04:2f:
                    16:9f:2a:ab:97:b1:d5:23:7a:69:ab:03:d7:d8:fa:
                    4d:cd:b2:44:f3:3e:91:9b:26:ff:4e:af:88:98:f7:
                    3e:83:3e:4c:89:b6:6f:8c:a7:cb:91:d9:7b:84:9f:
                    6e:dd:28:f8:13:2f:83:14:33:93:c5:40:15:49:d2:
                    78:0e:20:62:c2:11:49:d8:d5:06:12:b2:ea:c4:e5:
                    2b:a3:d1:8e:cd:da:90:0a:51:cd:d8:35:b0:64:9e:
                    d5:74:a1:1b:1c:c7:f8:10:ec:b8:ef:ef:7d:22:df:
                    2d:a7:78:7a:2d:d6:7e:c4:4e:6b:99:c0:13:98:29:
                    e7:c3:0d:db:9a:5d:e7:25:fc:18:03:eb:26:f6:ad:
                    0b:1c:84:6e:92:f6:d1:12:47:df:f4:74:2c:77:4f:
                    c9:ee:a0:c0:9e:15:d4:46:a1:64:23:cf:ea:8d:c7:
                    ae:92:41:ff:43:6c:17:1d:d6:f2:06:66:08:e1:85:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A0:AF:39:0D:81:F3:5C:A0:3F:BC:AB:EB:CF:58:99:89:9C:50:B1
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:06:6b:08:09:50:5f:2e:b0:58:02:b0:3e:3b:09:34:18:b7:
         76:00:fb:d2:c0:d1:76:be:02:c5:cc:68:c2:7c:eb:7d:fd:8e:
         94:f5:01:83:b0:4d:fa:3c:b7:9a:b2:d1:0a:74:ed:ad:55:47:
         74:87:8a:15:9a:93:63:79:ac:cc:b7:16:ae:23:ca:91:14:55:
         bc:6c:95:f3:52:aa:65:42:b8:f9:5e:61:c5:bf:f5:0f:61:df:
         cb:20:1d:56:85:85:61:99:a5:9c:d5:2f:ae:9b:a6:49:f4:01:
         ad:71:f3:1e:70:31:ed:00:b0:42:12:73:bb:9d:75:4d:55:7c:
         ac:6d:08:34:af:32:2b:86:ca:28:70:db:4a:6d:0b:51:cd:3e:
         f1:e0:30:0a:91:a8:47:87:93:d9:70:ef:4d:ef:b4:72:f3:22:
         f8:a0:d0:41:d7:7d:ea:b4:fc:6a:af:8f:8b:7b:3e:98:75:ff:
         b8:8e:a7:b0:b5:c3:60:82:4e:f9:ba:95:00:2e:92:bf:f7:e9:
         74:35:12:6d:c9:dd:64:ea:b4:82:76:f2:10:0e:fa:0d:15:4e:
         e9:65:a0:f1:5f:d1:b8:09:89:02:09:7c:54:72:4b:54:dd:e5:
         1c:e3:0a:33:d0:34:ed:46:81:f5:ad:78:41:fc:1e:4e:03:a3:
         5c:bc:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:15:54 2025 by rpki-client