Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          1yW+tu7k2hOzo3Pfz5lOrUg61VCNnkfeWDFInR7lqV0=
Subject key identifier:   E8:9F:61:2D:CC:A0:74:2A:3A:6D:90:E5:B8:7F:5C:FF:28:9C:02:59
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       0196B40F33791824D6B362F003F762FB052D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          0FD1
Signing time:             Fri 09 May 2025 08:00:17 +0000
Manifest this update:     Fri 09 May 2025 08:00:17 +0000
Manifest next update:     Sat 10 May 2025 08:00:17 +0000
Files and hashes:         1: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (hash: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=)
                          2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: MrS/89Ep4vNufNmmzWuj8GIrh1U/LtBfjf84/d7JTtA=)
                          3: dM8kA9UdpYik4eGdd4p2YObVlEA.roa (hash: 09Lj5oy/dbzOsXRPbe2C4Tko7I3Jb+mI9jtmELQT9g8=)
                          4: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:0f:33:79:18:24:d6:b3:62:f0:03:f7:62:fb:05:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: May  9 08:00:17 2025 GMT
            Not After : May 10 08:00:17 2025 GMT
        Subject: CN=e89f612dcca0742a3a6d90e5b87f5cff289c0259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:fb:d1:d5:f5:a0:25:c0:33:a9:41:db:63:
                    77:a7:59:17:42:92:21:e9:7b:b8:ae:4a:fa:55:51:
                    49:a2:e3:72:c0:e9:5d:12:92:33:4a:4d:ad:bf:ca:
                    6d:f9:b2:7a:f9:e5:3f:9a:9b:51:00:f0:58:73:c8:
                    cb:27:7d:6d:96:79:5e:04:8c:0b:d8:64:f5:60:32:
                    9c:a8:e4:03:da:fa:c0:d6:f1:1e:99:b3:86:4c:50:
                    25:d9:6b:2a:8a:ba:2d:12:6e:e4:1c:9e:3c:e8:79:
                    82:55:a5:d1:90:5b:38:24:fe:36:80:51:80:10:18:
                    d4:3a:01:21:1a:47:35:c1:3f:89:58:32:7b:b4:3e:
                    22:1c:d0:c5:c5:2a:86:c0:85:30:b1:f2:61:8d:1c:
                    6f:35:c6:bc:a0:8b:96:00:e3:4f:f2:15:ef:fe:ef:
                    f1:2e:3d:75:f5:a9:bb:df:ea:b2:3f:c6:e0:39:3c:
                    82:f7:e1:b1:a3:84:4e:16:1d:2b:a4:00:73:a8:58:
                    eb:cf:20:f9:84:e3:19:e3:4f:f5:41:97:5e:d4:7f:
                    69:51:31:93:dc:02:b0:b7:9a:31:59:4d:87:2e:d1:
                    65:40:9e:1a:17:ea:f2:99:b8:82:91:6e:62:30:40:
                    ce:79:f8:a4:2a:5a:06:16:76:3a:bc:08:2b:41:7f:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:61:2D:CC:A0:74:2A:3A:6D:90:E5:B8:7F:5C:FF:28:9C:02:59
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0c:85:3b:fd:07:d6:29:da:da:54:fa:19:1d:58:af:7c:f3:
         68:e8:72:05:14:f0:c6:c7:5a:f7:df:a7:61:1c:a5:83:00:df:
         bd:66:49:ec:c0:d9:f4:1d:1b:f9:1c:b9:dd:f2:c6:dd:dd:21:
         26:18:06:60:9a:69:d1:68:d1:78:c3:1e:66:00:b9:10:db:38:
         51:e8:9d:25:dd:88:4a:29:9d:58:39:a6:1d:06:69:9a:21:31:
         29:20:73:6d:13:c4:c6:c7:3b:1d:10:cc:28:2f:7c:3d:ee:33:
         f3:17:dd:61:a2:45:c1:37:f1:dc:7f:d5:66:2b:6f:83:c5:fa:
         4d:36:65:ed:f6:9e:61:74:5e:93:10:fe:16:2f:4e:58:94:fd:
         18:a1:76:b8:14:e3:2d:a7:84:b4:c3:ac:f0:d7:8d:ba:44:55:
         eb:9f:dc:9f:08:61:9d:17:fc:e6:90:f3:c8:a0:02:54:44:16:
         e7:3c:cb:dd:c1:15:3f:b2:0c:ec:99:c7:1c:4f:a8:68:c7:20:
         16:92:12:1f:49:ea:bc:1f:69:15:92:a3:72:8e:ad:1a:82:fc:
         43:56:2e:ab:59:8e:17:d2:8f:ed:cd:00:2f:c3:b2:1f:64:cc:
         65:1e:11:ee:23:77:ae:52:a7:54:0c:42:a0:70:84:13:1d:92:
         26:68:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:30 2025 by rpki-client