Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          SOY8+KYc1YzrUFY+TNx44efnnlwphZ4slPPgBqeF4N4=
Subject key identifier:   D9:7D:A4:2F:47:BD:17:FC:B3:16:D4:D3:55:C2:D5:81:92:24:DA:1D
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019675304B0ED801E8A27AF65D5CD37AD4BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 03:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:21 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: 0azQp0OMjn26PiywOs5KAcQZ4pEqCCmVszh0d+dbic4=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:4b:0e:d8:01:e8:a2:7a:f6:5d:5c:d3:7a:d4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Apr 27 03:00:21 2025 GMT
            Not After : Apr 28 03:00:21 2025 GMT
        Subject: CN=d97da42f47bd17fcb316d4d355c2d5819224da1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:7f:ee:58:71:75:96:16:e2:ef:85:7c:e1:
                    e3:93:8a:c9:4b:4a:71:60:00:15:8c:f6:80:39:eb:
                    03:37:0b:f7:a1:6e:9f:59:c2:b4:04:8b:de:3c:89:
                    91:70:dd:a8:bf:0e:8f:d9:7b:47:67:4e:ed:0f:01:
                    11:b6:bb:8e:0d:c6:8c:0a:eb:28:95:6f:75:aa:19:
                    e1:44:ca:9c:48:d5:5f:ff:71:37:d8:b2:3e:d2:3e:
                    38:12:44:8e:ae:83:27:a3:80:05:74:6d:4c:64:80:
                    49:67:fd:69:f3:0c:72:74:17:a4:fc:88:a5:f5:b2:
                    35:4c:20:e3:27:89:bd:b7:9d:23:70:c0:03:46:9f:
                    ba:e5:97:b8:b8:71:3f:f9:2a:ce:ff:24:56:c8:34:
                    40:8a:89:33:20:59:24:80:b4:24:90:2c:cd:94:03:
                    6a:98:e3:b5:26:fb:a5:ae:2f:08:ac:5e:84:e2:b9:
                    f7:63:0c:b1:36:35:4e:8b:c2:c9:ae:1c:07:31:0e:
                    6c:c0:73:07:91:eb:bd:72:b5:bb:7f:0d:33:38:e7:
                    ea:22:77:e9:91:05:b5:f6:9a:55:d1:4a:8c:b0:12:
                    18:39:cf:5b:fe:2f:78:59:c6:e0:2e:93:0a:6e:59:
                    e3:7e:f9:1c:2a:57:2e:2b:6b:65:44:59:68:c9:d8:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:A4:2F:47:BD:17:FC:B3:16:D4:D3:55:C2:D5:81:92:24:DA:1D
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:38:63:dc:d9:94:a5:33:92:fc:6b:67:6f:0c:87:41:1d:
         5f:85:37:5e:01:d0:1b:54:da:56:2a:25:ff:42:5f:50:3b:fc:
         ca:94:03:7c:ac:67:ef:34:48:0b:b0:40:18:f4:46:a3:2e:fb:
         b1:93:a0:2a:8d:d7:7d:7e:97:d1:7d:75:b5:3e:be:ca:ad:e6:
         15:0a:53:82:0c:b0:f9:08:3c:e1:a7:25:ae:8b:f3:1b:b9:6a:
         20:37:be:a9:94:37:eb:ae:b0:15:56:b7:eb:72:8b:59:9b:a0:
         02:3a:ce:f2:5e:0a:b9:da:4d:6b:e6:65:09:a5:45:21:40:ce:
         e4:ac:a8:41:e5:17:cd:af:10:67:8c:54:03:80:40:7e:4f:18:
         23:22:0a:bf:4b:74:0c:28:13:42:c1:a6:68:b5:1c:8c:69:23:
         32:77:33:91:01:25:25:28:46:a5:7a:cc:70:b5:6a:e1:97:72:
         97:a1:a0:35:5d:12:55:11:2f:e1:97:ba:79:59:2a:34:80:d6:
         9a:06:2f:29:67:e8:1f:2d:ce:f6:58:3c:76:2d:9a:e2:5d:7f:
         21:8a:96:e4:3a:2b:43:43:35:49:03:1f:d6:d7:d9:2b:41:5e:
         e7:cb:4c:7c:0f:a8:00:d6:05:20:3d:b1:3f:c4:fa:d8:e8:2c:
         a3:82:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:38 2025 by rpki-client