Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          J/k4r6cLBrbUsGgeZ+8jagY4faD33AEArWs4exXx2m4=
Subject key identifier:   20:6F:E5:96:C4:3B:F8:8A:D7:0F:DE:DF:F9:6C:28:FB:CB:10:1E:0B
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       0196A08938F48507CF5E38F6611AF63FF336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 13:01:09 +0000
Manifest this update:     Mon 05 May 2025 13:01:09 +0000
Manifest next update:     Tue 06 May 2025 13:01:09 +0000
Files and hashes:         1: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: n1sF1I961cOxtggpnF0w/lclBZ3VYkOt1JI8gJiaDrs=)
                          2: zAtYgiSv3lzLdQ7BBPQ53TQsCu4.roa (hash: oWvGPGIfuR7zXnkTrpVSOOMAOW1y+zKMrxGu/T9zook=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:89:38:f4:85:07:cf:5e:38:f6:61:1a:f6:3f:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: May  5 13:01:09 2025 GMT
            Not After : May  6 13:01:09 2025 GMT
        Subject: CN=206fe596c43bf88ad70fdedff96c28fbcb101e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:b4:f5:2a:aa:c2:bd:f1:c3:77:cb:4e:86:
                    07:8f:cb:fc:67:b4:f9:f1:33:d0:fd:b3:79:84:4f:
                    7b:48:0b:c4:91:b4:db:0d:82:39:1e:ee:4f:e9:17:
                    23:0a:45:1c:d8:f9:cb:bc:79:8b:61:e3:42:af:e6:
                    cc:58:e2:a9:3e:0b:ee:6e:ee:12:4d:45:6f:cf:27:
                    d6:4d:33:bb:b1:f1:10:af:f8:68:f6:9c:30:75:65:
                    99:83:6b:42:91:9d:5c:e8:95:53:af:cd:0f:c2:fa:
                    7d:9e:c7:dc:24:74:96:79:c1:56:05:fd:f7:a4:74:
                    ac:52:e8:c9:04:42:23:0f:b5:f8:f4:9f:5d:c6:9b:
                    1e:12:e7:7b:0f:33:05:27:c6:ca:a5:2e:ba:47:67:
                    a6:ac:42:e0:00:d9:ef:92:92:7b:cd:8d:84:1a:38:
                    de:16:ad:fa:d2:29:32:62:73:7e:d2:66:8b:a7:85:
                    e0:c3:a0:21:a2:7a:5e:9b:b1:d1:ff:47:05:be:b7:
                    e7:b7:6a:af:a8:5e:ea:43:04:e0:33:e5:b6:59:68:
                    d1:fe:84:5d:76:74:58:10:88:73:58:53:1d:b1:81:
                    47:e9:5f:72:6e:95:b6:13:d9:40:17:55:74:1b:82:
                    27:29:a9:e7:4a:2f:b8:8c:0e:db:dd:a2:4b:d0:d6:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:E5:96:C4:3B:F8:8A:D7:0F:DE:DF:F9:6C:28:FB:CB:10:1E:0B
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:77:4e:2b:7c:93:66:d0:1a:02:f7:fe:ae:34:74:2f:31:
         6c:64:65:34:f9:e4:c9:53:61:3b:d1:c4:3c:e4:78:b6:aa:6c:
         d6:15:14:8a:4f:f2:a5:83:e3:64:71:fd:f0:4a:92:97:19:dd:
         4b:a3:ee:60:06:59:f6:43:55:a4:db:06:d8:f3:77:ab:60:98:
         ac:b5:36:7d:ed:7a:41:59:07:0a:ae:41:f5:14:89:09:f6:d7:
         e3:d5:5c:55:12:67:a4:37:f7:13:48:1a:7c:22:6c:e4:64:d4:
         ec:63:dc:bf:39:e0:ae:39:54:84:1b:32:41:83:24:ca:5a:2f:
         ed:de:f6:49:b2:0e:3a:3a:e5:ea:bf:63:c4:46:75:17:0d:1f:
         0e:9e:5a:e0:21:35:52:ff:c9:07:a9:c7:a5:5a:aa:7c:1b:a4:
         5f:35:0d:04:b5:1b:60:c5:b2:79:4e:69:4e:4e:28:43:80:02:
         88:71:d7:d4:13:c7:30:95:ac:b1:58:f3:74:09:fc:5f:a5:b8:
         c4:36:07:6c:31:db:06:14:b8:4a:ee:01:ff:f9:a4:ed:a4:6f:
         d8:e7:07:11:93:00:5e:53:08:9b:33:09:1c:62:d4:bc:85:01:
         d7:8b:51:5f:f4:15:ec:68:69:b4:8c:6d:78:df:63:74:a2:fc:
         44:69:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:20 2025 by rpki-client