Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          cSqH1sC1dkHln9qW8WQWyOHdT7DJeAkWHdBS9FpLKiE=
Subject key identifier:   FA:E4:76:5B:3B:6D:42:FE:78:A1:58:FD:C4:A8:34:A0:86:06:D1:7F
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       01968992AA831BDFD016149222B9D03B74EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          13C8
Signing time:             Thu 01 May 2025 02:00:12 +0000
Manifest this update:     Thu 01 May 2025 02:00:12 +0000
Manifest next update:     Fri 02 May 2025 02:00:12 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: QsOW9BkF3uNT31UuFm9BUnxpLgobrmpi0ntvtfiLmzA=)
                          2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:92:aa:83:1b:df:d0:16:14:92:22:b9:d0:3b:74:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: May  1 02:00:12 2025 GMT
            Not After : May  2 02:00:12 2025 GMT
        Subject: CN=fae4765b3b6d42fe78a158fdc4a834a08606d17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:6e:be:67:a5:62:b9:41:d3:53:8d:c4:e6:
                    5a:bb:66:4d:0d:5e:ea:03:6e:12:97:83:9b:1e:34:
                    56:40:5c:97:9b:19:c1:4c:42:4c:22:6a:1f:77:83:
                    c7:61:dd:9e:fb:51:23:94:ee:cb:94:99:99:4f:57:
                    7c:0c:0a:7c:98:86:2e:d4:e0:da:fd:a7:71:72:29:
                    ae:c1:3f:e4:22:df:7c:ae:14:e2:3e:e6:ef:b2:a5:
                    df:fa:55:a2:4f:5b:b1:b7:da:8d:4b:71:c1:65:cd:
                    74:d1:a1:bb:f0:d9:25:c9:ad:ae:3e:22:a8:9b:20:
                    fe:7e:c3:4c:99:28:d8:bb:c3:36:1d:a5:92:f0:f5:
                    1a:81:25:60:72:95:d3:6b:1f:c2:99:c3:8e:81:a7:
                    b2:b1:0c:97:7f:88:5d:30:97:15:c3:5b:f9:45:91:
                    ed:56:2b:11:6d:63:d0:b8:c6:b4:b6:a0:f7:9c:c7:
                    ba:a1:ca:bd:d8:27:78:7b:fe:1a:9c:aa:d0:04:09:
                    80:b9:14:14:79:3c:a2:eb:5d:78:48:b7:b7:17:02:
                    1d:11:a4:46:8f:22:36:06:96:ac:73:55:2e:c4:25:
                    da:09:1c:b5:c1:c7:ff:5c:2a:1b:25:57:9a:fe:b2:
                    c7:4f:3f:32:50:88:b9:c6:32:70:f1:9e:c7:8b:13:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:76:5B:3B:6D:42:FE:78:A1:58:FD:C4:A8:34:A0:86:06:D1:7F
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:7f:7a:ce:bc:68:33:13:f8:45:3b:d7:63:69:20:38:68:
         7e:9a:7b:15:81:a1:1d:95:e2:6d:8f:7e:e8:08:69:b8:61:23:
         1f:7a:cb:5a:55:12:fb:c2:c3:d7:75:e5:90:86:97:c7:16:1c:
         44:cb:b2:55:51:1f:96:75:c0:e8:1d:99:e7:20:7d:a4:b4:71:
         0a:fd:1f:3f:4f:52:6b:93:b5:55:43:b8:cd:f2:d6:fd:aa:ad:
         ff:4f:5d:3a:f6:46:c6:7a:8f:4d:fc:12:65:60:b7:69:49:ea:
         a3:2f:e8:7e:55:2d:02:8a:36:a2:9d:20:ed:07:ec:2f:83:38:
         ee:e6:30:cc:76:f6:7d:5e:15:da:e5:25:57:89:0c:d3:cf:ad:
         1e:c3:b7:1b:a1:44:f0:37:c5:5d:03:96:09:bc:cd:14:6c:10:
         ad:9c:01:98:f3:ec:11:c6:63:81:d9:cb:ee:55:3d:f8:53:41:
         19:f9:b9:9c:d5:46:b1:df:cb:b7:ac:c9:05:24:6c:f2:7f:3a:
         39:46:44:74:a2:ae:6d:ca:97:64:39:e9:d0:ab:8a:4a:7e:22:
         59:47:74:19:d2:08:ed:f7:34:44:28:8e:61:b7:d0:9d:48:25:
         a8:82:34:03:d8:71:b6:4d:2e:e2:60:52:03:62:28:6f:4e:4e:
         33:2a:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:45 2025 by rpki-client