Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File:                     Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier:          ApSWqcnvPl9HbdT3Y7V9ikw47TydrbOkEmD8PRogiIM=
Subject key identifier:   68:3F:0D:89:B0:CB:15:2D:F2:3C:59:BD:D8:EF:89:69:C5:2B:4A:2F
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer:       /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial:       0196BB92FE55B364C06DE45D767112E270EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number:          1538
Signing time:             Sat 10 May 2025 19:01:34 +0000
Manifest this update:     Sat 10 May 2025 19:01:34 +0000
Manifest next update:     Sun 11 May 2025 19:01:34 +0000
Files and hashes:         1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=)
                          2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: HSL0l58VFGanjofWrXOw5PciCxQUDrLiFlnMP4UHHkM=)
                          3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=)
                          4: pLsgoPgZwon5ItvVTFUsJaF7654.roa (hash: GzKHsFlhzzykyT0JK5oyDh4dgIyu8uoam0jj3L6SzGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:fe:55:b3:64:c0:6d:e4:5d:76:71:12:e2:70:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
        Validity
            Not Before: May 10 19:01:34 2025 GMT
            Not After : May 11 19:01:34 2025 GMT
        Subject: CN=683f0d89b0cb152df23c59bdd8ef8969c52b4a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:ca:c9:95:1d:fe:b2:e3:6a:e7:2d:77:b4:
                    b3:61:0d:67:46:81:6a:a8:a3:01:a4:a7:20:1e:73:
                    bd:17:27:19:b8:ad:9e:0f:13:0b:d9:c8:63:39:c0:
                    22:86:fa:a5:23:b2:46:1c:7f:2f:04:dd:af:75:1d:
                    c3:e4:28:01:83:45:9d:79:3c:c9:82:fd:bd:c6:14:
                    a5:73:2c:c6:f9:7b:9e:96:2f:9d:07:d1:92:6c:a1:
                    c1:33:d0:67:a0:26:3c:73:68:7b:8b:5a:1b:9a:ee:
                    7c:84:0c:82:fd:db:6a:d1:e4:6c:f3:2a:62:46:e1:
                    dc:99:07:4d:4b:a3:78:2c:47:c1:78:aa:fb:4a:9f:
                    2e:cb:95:de:35:1f:a0:ef:27:49:b9:91:a2:ef:32:
                    1d:25:17:f0:32:74:a0:61:c2:18:80:d2:f5:d2:42:
                    43:fa:0b:1c:08:8c:00:81:2d:3a:0e:6b:b3:e6:e5:
                    07:79:82:df:12:53:8f:b2:45:42:ff:c2:f5:87:3e:
                    75:af:cf:1e:88:42:fe:11:a1:80:cb:88:77:d9:2f:
                    62:be:d7:fe:f3:3c:87:15:02:b8:54:58:b3:a6:ff:
                    ea:d4:e2:e1:3c:55:3e:d8:23:54:bf:54:b1:39:d6:
                    cc:c3:9b:68:83:41:24:33:2a:c6:20:37:25:86:a1:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:0D:89:B0:CB:15:2D:F2:3C:59:BD:D8:EF:89:69:C5:2B:4A:2F
            X509v3 Authority Key Identifier:
                keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:36:6f:32:dd:ba:a3:b6:91:ff:d2:ba:de:70:37:11:0a:
         45:3e:d6:f8:ef:8c:13:03:32:0c:96:f4:f2:13:2a:64:f1:e8:
         b6:a2:d1:5b:e0:d7:42:40:05:a1:fa:bc:43:6f:73:e8:15:49:
         04:c5:4c:ca:a6:84:c1:ab:2a:23:20:42:67:24:55:3f:25:98:
         10:29:78:cb:d9:3c:b6:6a:5e:9f:fb:9d:ee:88:e7:c0:8a:69:
         e8:55:79:38:2a:d8:2f:91:f8:14:ed:fc:34:88:44:e3:3c:b2:
         a9:87:ee:99:65:00:e3:a9:b4:75:c6:3b:5a:b3:6b:81:78:73:
         aa:be:40:c2:8d:48:bb:e7:f9:13:96:bf:c0:30:41:f7:e5:d5:
         3c:a8:59:8c:47:8c:74:58:81:a2:d7:04:2b:df:19:25:47:af:
         54:20:09:1e:20:dc:b0:16:65:ba:b9:c0:f0:2a:ba:39:5d:1f:
         17:be:5f:03:cb:66:28:f8:4b:f8:11:a8:6f:49:92:83:90:1b:
         0f:60:49:62:f4:13:c8:30:cc:33:bf:f6:48:08:5a:fb:31:06:
         60:16:96:44:9a:cf:13:7d:7c:50:56:34:01:5e:34:d6:39:47:
         55:e9:55:b6:55:be:e1:1e:cd:49:05:26:86:36:71:38:a6:33:
         21:67:b5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:00:05 2025 by rpki-client