Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File:                     DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier:          xE83wAZnQkpKoA4y5p/f7gubyuImAWoGVXaxgJSf1CI=
Subject key identifier:   F4:46:1E:68:63:27:CC:0E:FA:3C:44:84:E7:EA:A1:70:D1:62:D4:59
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer:       /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial:       0197718815C798C67748E66DFC0B25208F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number:          092D
Signing time:             Sun 15 Jun 2025 03:00:33 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:33 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:33 +0000
Files and hashes:         1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
                          2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: 4GdiRixDpDlNwjbxk/1kZZUYeiWS/96Gtkj+SPw8qvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:15:c7:98:c6:77:48:e6:6d:fc:0b:25:20:8f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
        Validity
            Not Before: Jun 15 03:00:33 2025 GMT
            Not After : Jun 16 03:00:33 2025 GMT
        Subject: CN=f4461e686327cc0efa3c4484e7eaa170d162d459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:26:b5:5a:5b:55:ab:e3:d9:de:73:79:79:
                    29:fe:dd:b7:16:d0:5a:29:81:ba:55:40:f6:ab:bd:
                    30:3b:69:21:67:99:fa:5b:7c:11:af:68:cb:69:da:
                    4a:1d:9c:43:fb:eb:c1:42:97:8b:b4:e8:ed:55:00:
                    ef:f4:7c:4f:81:07:c3:c2:9b:59:b3:16:d5:0e:59:
                    b3:c0:4f:28:8b:c2:df:c5:8b:0a:eb:9c:ad:c1:37:
                    fa:d6:c6:b7:05:74:62:76:77:91:5c:e9:0e:e0:39:
                    91:21:37:b7:6a:13:8f:5a:cd:79:03:4d:80:1c:13:
                    66:42:a5:a7:5e:ee:10:3a:37:3c:12:4f:f3:03:35:
                    aa:5b:f2:00:99:97:c2:01:72:aa:a3:18:51:c2:fa:
                    09:27:f7:05:7c:1f:63:a2:67:5a:14:63:29:ce:3c:
                    07:eb:a2:90:8c:d4:1c:69:0d:da:61:cd:1d:c6:c7:
                    47:81:72:b6:08:76:6c:28:4c:d0:a5:05:03:f6:1b:
                    9e:cb:55:1a:b4:33:b5:8d:dc:ce:42:2f:94:7c:14:
                    4d:41:1d:d5:34:c4:50:92:2d:dc:ea:81:41:24:27:
                    97:c3:1b:b1:b6:89:0b:51:57:4b:7c:7c:f7:b9:06:
                    82:ee:e8:36:95:98:03:59:23:58:bd:b2:12:6e:34:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:1E:68:63:27:CC:0E:FA:3C:44:84:E7:EA:A1:70:D1:62:D4:59
            X509v3 Authority Key Identifier:
                keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:76:7a:0f:c7:bf:0a:b3:93:9c:64:b6:f6:68:fe:ff:5e:
         ab:a7:4b:b1:f4:e7:31:50:d0:2b:35:a5:df:fc:da:34:d4:69:
         a3:05:7e:41:c0:20:e1:ce:b7:5f:65:e9:f1:f9:e5:8e:c6:39:
         ac:5a:86:c6:40:a1:c7:aa:ef:0b:b3:a6:ca:9c:e5:e5:7b:0d:
         9d:de:ac:4f:94:4e:7a:08:92:02:e1:f8:9a:ee:e6:c7:9d:67:
         ca:53:8a:d2:74:92:fc:6a:b2:74:9b:51:5d:bd:a2:d5:45:97:
         63:af:f0:c4:46:0e:ec:be:e9:3c:53:3c:11:81:dc:12:65:e3:
         a7:76:a5:72:92:ea:02:f1:7b:bf:54:a2:7f:8b:e9:17:9a:c7:
         ec:20:00:55:b0:01:40:a9:d2:3c:52:fb:c5:99:8d:ec:c7:b3:
         b2:36:17:e4:61:47:6d:6d:f1:ba:0b:13:d3:c8:75:18:51:69:
         93:6e:3e:e4:d2:e3:f9:a5:a3:31:d1:fc:c7:47:ce:ca:2b:ce:
         b5:e8:af:a4:f6:7f:33:b1:b7:84:4f:9b:cb:fb:53:83:4a:44:
         c6:ce:db:4a:60:c3:d1:89:82:85:2f:d1:4c:77:60:2d:a1:b9:
         09:e1:3f:a3:9d:91:8e:4e:a9:b9:c2:2c:93:ff:38:e9:11:66:
         6a:7b:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:03 2025 by rpki-client