Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File:                     0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier:          qInspD3Pak2LsC0sVhtYKoe5zTpcfDCi/k2vCMiJjQE=
Subject key identifier:   11:D7:53:05:BB:5B:1B:20:F0:FA:60:25:F9:4F:42:4A:5F:9A:2E:10
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer:       /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial:       01967F462FF47AC0A9FFF64D305EF601295F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 02:00:28 +0000
Manifest this update:     Tue 29 Apr 2025 02:00:28 +0000
Manifest next update:     Wed 30 Apr 2025 02:00:28 +0000
Files and hashes:         1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: lDV7AdZVlJu5tZ20VxaQCHbGygTxEfzee5pOSOlurfQ=)
                          2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
                          3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
                          4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:46:2f:f4:7a:c0:a9:ff:f6:4d:30:5e:f6:01:29:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
        Validity
            Not Before: Apr 29 02:00:28 2025 GMT
            Not After : Apr 30 02:00:28 2025 GMT
        Subject: CN=11d75305bb5b1b20f0fa6025f94f424a5f9a2e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:5e:d4:7b:c0:f5:61:fd:36:72:40:3b:b7:
                    dc:e9:77:04:1f:31:d6:ac:42:c7:7f:cc:8c:ee:76:
                    27:2f:3c:1a:ee:6a:f6:a8:a7:7b:cf:fe:fd:c5:17:
                    73:31:47:e4:25:51:95:de:64:6f:2b:72:09:3a:fc:
                    7a:e2:ab:49:ef:51:bc:8e:db:97:ba:2a:bc:32:25:
                    80:98:53:f3:3c:0e:6f:f4:a5:74:fc:20:5b:ef:c7:
                    15:00:6f:cc:d6:17:7a:ec:ec:db:00:03:e9:a0:b7:
                    2b:83:d7:15:80:85:10:71:36:f1:f3:a7:5c:00:c4:
                    26:6c:33:c1:07:0c:ee:ae:3a:17:52:e7:ca:aa:7f:
                    df:99:90:9e:86:9e:35:b7:bb:07:e9:30:3b:ea:b5:
                    b5:27:9c:fe:88:c4:ed:d3:ef:78:32:79:0e:3b:45:
                    7f:63:7e:e4:51:48:95:fa:62:79:a7:d3:d8:c9:2e:
                    93:4d:76:a6:84:74:50:a2:5b:df:b3:3d:fb:6f:18:
                    13:b8:ef:f5:3f:3d:ba:bf:71:0b:b0:91:a5:8d:85:
                    82:33:2c:c6:b0:b6:75:4e:27:f6:47:6c:12:7b:dd:
                    cb:a5:0b:bf:1d:00:1c:16:a4:1f:71:0c:1d:dd:19:
                    ed:3a:fe:38:22:1b:bd:f4:4f:ef:3c:34:9e:0c:d3:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:53:05:BB:5B:1B:20:F0:FA:60:25:F9:4F:42:4A:5F:9A:2E:10
            X509v3 Authority Key Identifier:
                keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:6f:bf:06:ef:d0:d1:7e:25:de:0f:17:98:72:05:75:a6:
         87:a2:95:1e:08:0c:92:5d:ce:3d:44:83:11:c5:bf:28:69:9a:
         ae:8c:4d:97:02:28:91:99:7b:51:55:fd:c4:d5:4b:f9:35:67:
         e6:e9:3e:8b:02:e0:45:5b:6a:5a:4f:b1:64:64:32:97:e1:a9:
         dc:c1:d0:1a:2c:b9:27:4d:68:bd:76:ad:80:c7:f7:7f:15:50:
         d8:76:a8:73:f0:e6:f7:3f:80:f0:53:de:1c:7b:46:ad:50:d3:
         42:e5:94:01:f5:4c:68:89:2b:b6:cf:39:2c:83:5b:de:c5:ab:
         9c:ce:95:08:20:7b:10:25:11:cb:f9:b2:fa:a8:86:5b:f5:d9:
         d6:19:44:fc:00:f2:d2:bb:a3:cd:0f:39:8a:40:40:8a:71:09:
         0e:c0:f6:43:1d:6f:4c:39:c5:fe:4f:58:8b:d9:cd:d3:23:0d:
         96:ac:11:27:29:c4:20:17:93:9b:f3:ef:ca:d9:23:a4:19:44:
         e2:60:12:2f:19:8e:d5:9f:6c:15:07:1e:9a:27:0f:26:54:75:
         d9:fd:63:3e:72:16:b0:f3:b1:6c:da:fc:b9:35:92:a3:52:a5:
         00:97:74:39:d0:3b:e0:16:57:46:a1:12:2d:37:67:57:ce:2b:
         a8:72:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:10 2025 by rpki-client