Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File:                     g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier:          grDypGHaMs0phJKnf1yBkh77M8AhanHEUu6gIsq6zzQ=
Subject key identifier:   DF:85:B9:AD:4F:D6:7A:9F:98:AA:DB:15:A7:77:B5:E4:27:6D:5D:DB
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer:       /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial:       0196802279D254D95FD04C8030FEB679E339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number:          0136
Signing time:             Tue 29 Apr 2025 06:01:04 +0000
Manifest this update:     Tue 29 Apr 2025 06:01:04 +0000
Manifest next update:     Wed 30 Apr 2025 06:01:04 +0000
Files and hashes:         1: 0otUjOmrbrE-UtuXVDDSBPTMgt4.roa (hash: /6O4kder5Q4c9HIL3TM9q/fRb3AXNbQJDsO22/m8/9o=)
                          2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: IoB6AQUaN3+M978hBF9Yea7WMxfcQd3Ewh513X7psQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:79:d2:54:d9:5f:d0:4c:80:30:fe:b6:79:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
        Validity
            Not Before: Apr 29 06:01:04 2025 GMT
            Not After : Apr 30 06:01:04 2025 GMT
        Subject: CN=df85b9ad4fd67a9f98aadb15a777b5e4276d5ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:54:c8:c7:47:e7:19:04:a4:02:e4:ae:c1:
                    5a:6c:94:b2:5f:80:f8:67:01:d1:e9:33:c3:38:f8:
                    1f:31:5f:4d:95:7f:cb:ea:4e:e2:ed:f4:61:b2:80:
                    3a:5b:1e:44:cb:b2:ea:bb:de:aa:57:64:98:88:c6:
                    b8:8e:72:58:2d:b7:fb:f2:36:b7:75:d3:45:95:e6:
                    ff:6b:da:c2:15:80:37:29:66:04:19:e1:e6:0f:95:
                    f5:34:2e:74:5b:e0:1a:b0:ef:ba:5f:6d:6a:8a:7c:
                    aa:24:4e:3b:cf:b9:e5:00:18:eb:f5:87:19:50:c1:
                    22:cd:d0:7d:ff:ca:5e:5a:73:18:49:9d:84:e6:af:
                    89:bf:3a:c2:ee:b9:d4:d9:75:dc:67:4c:3c:5b:9a:
                    ed:85:15:fe:72:a9:a9:34:8f:2e:2c:cf:3a:9e:be:
                    a4:14:04:21:67:0a:26:46:3e:ec:4a:44:14:54:87:
                    d4:ff:f1:58:e0:f4:ad:56:9f:67:63:35:df:c7:f8:
                    08:fa:7a:79:b9:96:67:73:ef:79:77:2b:6e:a1:61:
                    f4:c8:6f:79:e5:ca:91:7e:a7:0e:bc:e7:cb:92:b9:
                    ed:06:a5:fa:46:a0:fe:5d:9b:7e:af:05:bc:b2:c1:
                    f0:b2:47:7a:1e:32:b7:4f:96:9e:0a:f6:9f:4f:d1:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:B9:AD:4F:D6:7A:9F:98:AA:DB:15:A7:77:B5:E4:27:6D:5D:DB
            X509v3 Authority Key Identifier:
                keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:2b:bc:c0:7e:22:84:a2:0e:56:bd:62:34:21:2c:5c:62:
         44:24:5d:18:c8:86:c9:dd:d5:7f:c1:7d:d7:77:ba:50:0c:cc:
         2c:78:a2:83:98:54:7a:17:ff:c9:11:32:de:5d:41:9d:2f:ae:
         5a:82:a3:8f:2f:f5:fd:ac:df:f2:ca:09:57:c5:c7:88:86:e0:
         d1:30:c2:fd:1a:6f:c1:09:fb:13:47:4d:0d:b7:1e:f3:f1:a0:
         5e:21:b2:f6:af:70:cf:70:dc:c7:b2:b7:21:a7:5e:7c:d6:e4:
         56:fa:4e:05:dc:f5:9b:c1:f1:ea:42:f0:dd:46:9f:63:52:9a:
         cd:39:45:ad:2a:b9:eb:b2:ef:f0:45:48:26:3f:d1:ab:a4:22:
         8e:03:03:46:4a:5a:39:cd:98:02:04:68:05:6f:9f:17:9f:54:
         37:43:ac:d2:65:22:e3:4d:fa:c5:74:ae:8d:37:da:00:f8:11:
         96:05:e4:f4:5b:c4:5e:fd:bd:cc:6b:60:a8:a3:31:d6:21:7e:
         a3:a2:b6:c7:85:62:c5:49:f2:da:e5:e0:74:75:8d:43:9f:c4:
         b1:52:1c:ae:86:41:28:5f:bf:63:d8:65:c7:af:eb:de:95:c8:
         21:a6:dc:98:d8:de:21:ad:72:fb:6b:08:6d:dd:64:37:92:30:
         ba:38:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:11 2025 by rpki-client