Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          PwASRdiMOITrugNfEgOAD5qR9G5vGUBt7o4BZJzu+DY=
Subject key identifier:   61:0B:E0:12:8B:FB:C4:1E:F5:A3:82:D4:DC:E2:57:94:E0:07:A7:EC
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       01969E2C2450A04DDBFA7560041A2FA6D744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          1530
Signing time:             Mon 05 May 2025 02:00:15 +0000
Manifest this update:     Mon 05 May 2025 02:00:15 +0000
Manifest next update:     Tue 06 May 2025 02:00:15 +0000
Files and hashes:         1: 2IV1bBm-jP-2jVh24cTBD-F_aCY.roa (hash: LoxyFwAORqX/gMob6dkhVaBmKh5ZSU1hWQKi2nkbQgw=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: i0hcvXgCZ6Gr0CnzuTSXoj74dcZhKNUj9vhm2kDK2lY=)
                          3: _kjDn_DDtqJjlLfr15JCrlUsBs4.roa (hash: jybSc3mz+ll60aex4A0Ja+eXAtAJqeCFAGm8sC/emcE=)
                          4: hJ65MMDojFDsHhCTcDOo1v7Rf3A.roa (hash: dQwJBW4cKzk1hx9pc72XUta4ephdfERO34h+ezvshhM=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:24:50:a0:4d:db:fa:75:60:04:1a:2f:a6:d7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: May  5 02:00:15 2025 GMT
            Not After : May  6 02:00:15 2025 GMT
        Subject: CN=610be0128bfbc41ef5a382d4dce25794e007a7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:fb:5e:25:55:89:19:50:b7:6d:e9:0c:b1:
                    64:17:a9:a1:8e:41:6e:10:4c:6b:5d:04:68:59:b8:
                    ea:93:f0:f5:d9:78:27:52:40:a6:b4:a2:3b:0d:3e:
                    06:ba:8e:18:60:6b:6e:2b:c4:88:93:36:ca:72:91:
                    ef:8e:0a:a1:05:8f:16:02:af:e8:21:31:9b:9b:5c:
                    a1:86:5e:94:fa:ce:04:c8:3a:85:34:27:92:2a:ed:
                    bd:7e:d7:c1:c2:26:0a:dc:5f:3f:42:a0:cc:88:08:
                    65:e4:2f:b5:ec:2a:2d:9d:5c:96:30:71:9a:09:50:
                    89:24:c2:e0:d6:a2:17:7a:5d:64:bb:5a:a6:07:02:
                    18:69:c1:bb:a7:e2:e8:b9:08:eb:64:e1:68:76:c5:
                    bb:bf:ba:86:81:0d:4d:51:a8:22:d6:60:2b:a9:cb:
                    af:3f:3f:81:59:0a:2e:dc:6e:95:57:8b:f7:f4:f1:
                    84:8c:9c:cc:82:f3:aa:b8:c5:9b:74:19:ea:e6:19:
                    a2:8b:1c:31:75:6a:e8:87:d4:2e:50:48:83:46:aa:
                    70:88:ec:a4:14:e4:d7:39:59:26:0e:db:59:2a:9f:
                    30:ef:03:92:94:2a:9d:93:29:7f:18:9e:c3:4a:ca:
                    c8:77:56:22:4b:fe:93:52:bb:3e:77:8d:bd:22:1c:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:E0:12:8B:FB:C4:1E:F5:A3:82:D4:DC:E2:57:94:E0:07:A7:EC
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:f6:b5:c4:e9:39:ba:69:0f:4a:df:67:8c:13:ab:a3:cb:
         5f:6e:8d:55:17:07:34:ce:4c:ae:d1:c7:ed:92:cc:a4:30:91:
         70:8f:a4:9c:1f:b2:78:96:20:e7:af:c6:a4:12:d1:13:4d:90:
         24:cd:27:e2:d5:b3:8c:0e:57:96:46:d0:c2:e9:7f:05:3e:6c:
         7b:c1:ad:0a:f4:f1:0b:cd:8f:68:d9:25:80:fb:6c:12:0d:a7:
         09:91:eb:f1:a7:4a:d6:e7:04:24:64:58:0f:b9:d4:2d:5a:2b:
         5c:2b:12:92:76:61:c0:be:d4:4c:55:e6:e7:50:3c:23:9a:29:
         5d:40:4d:cf:de:a2:85:4b:7c:5f:8f:80:a0:39:fb:41:44:db:
         8f:6b:43:9b:cb:79:65:70:f8:b0:9c:6e:f1:00:51:a3:2f:31:
         3f:f6:74:fe:52:f0:89:2e:5e:dd:c3:15:52:5b:ff:3c:fc:45:
         64:69:bd:75:37:fb:bc:c2:e8:02:fc:6a:0a:8c:52:3f:77:72:
         83:c2:de:f3:c7:2c:9c:f0:42:60:d6:54:98:8e:e9:d0:65:b8:
         99:c2:55:e1:46:7a:a9:0e:ab:95:b6:4f:cd:ab:14:d4:f6:c1:
         6f:37:8c:4e:71:ed:fc:37:4c:f5:e2:fe:9e:85:a7:79:ce:d8:
         f1:6b:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:29 2025 by rpki-client