Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          CLjpqoWuRzG/LoechEl5I2qS4nipNJmaRuyfHLCTzWM=
Subject key identifier:   8C:DC:0C:A9:1C:A1:C9:CB:39:88:55:1D:EC:C6:DE:FF:8C:33:8E:DE
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       0196B9358EE853DDC3DF379A749DF627ACBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 08:00:17 +0000
Manifest this update:     Sat 10 May 2025 08:00:17 +0000
Manifest next update:     Sun 11 May 2025 08:00:17 +0000
Files and hashes:         1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: Cmatc8oNyeEEBJtKD1jpMqeCpIrq4cf3Z/ZU251mmK0=)
                          3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:8e:e8:53:dd:c3:df:37:9a:74:9d:f6:27:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: May 10 08:00:17 2025 GMT
            Not After : May 11 08:00:17 2025 GMT
        Subject: CN=8cdc0ca91ca1c9cb3988551decc6deff8c338ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:e8:8c:43:31:80:d0:7e:e5:e1:13:0a:82:
                    9e:72:50:61:9d:4f:e2:10:53:2a:a9:e1:95:69:2c:
                    23:f5:45:cc:3d:5b:a0:f4:0c:ea:2c:55:05:5c:85:
                    3c:11:7f:ae:09:fb:d0:fe:87:77:c4:e2:77:d3:01:
                    fb:4f:9d:4d:4c:ff:41:9b:f4:53:25:14:78:19:89:
                    57:e3:ba:bc:db:c5:ba:bb:e7:2c:e8:38:a6:d5:5a:
                    ad:6a:10:df:47:a4:37:90:56:bd:dc:73:c2:32:fb:
                    ca:62:0f:41:40:17:f1:81:bb:a1:46:27:43:4e:0c:
                    db:a5:75:be:94:c0:2d:2e:18:a0:21:f9:ca:21:2f:
                    e1:c0:d3:8f:89:50:47:ed:03:42:33:78:8b:48:e3:
                    fa:94:30:7f:99:36:c0:d2:ca:a3:6f:af:bf:3b:65:
                    dc:f3:89:7e:84:62:52:2e:7b:17:61:b8:de:2f:d5:
                    4d:08:3a:96:9d:97:8e:81:fe:a5:af:18:5b:58:91:
                    7e:f1:df:27:03:8d:72:b9:bb:07:10:e1:9c:67:5a:
                    0d:5f:e8:77:c9:74:8f:0c:99:ab:8f:90:c1:a0:55:
                    26:b2:52:51:3b:c0:01:c2:59:19:f4:dd:a2:e9:56:
                    f2:ee:15:95:dd:f1:8a:cc:07:93:51:a3:2b:96:d0:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:0C:A9:1C:A1:C9:CB:39:88:55:1D:EC:C6:DE:FF:8C:33:8E:DE
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:26:77:38:47:84:b7:8c:2b:ca:de:09:8a:47:cf:f5:36:
         8d:07:05:ea:e1:c3:8c:5c:4d:41:98:56:09:7d:d6:63:b1:d9:
         0d:4e:9f:e0:3c:b8:b3:3e:fe:6c:09:bb:84:51:aa:9a:70:e3:
         78:13:9b:51:50:b2:6c:a0:82:07:ad:1c:e0:8f:91:52:73:9f:
         e5:77:da:4c:1c:6d:a7:7f:ab:25:18:0a:ba:e8:11:f0:e7:76:
         e2:3a:57:2a:97:ca:27:11:e2:52:41:72:7b:27:f7:ce:b7:fc:
         1e:e7:76:7f:4e:3a:a2:3d:12:36:1a:4b:4b:ca:d1:e6:9a:b1:
         a2:f5:eb:a9:c1:b1:29:03:64:60:9c:34:6b:96:5d:f3:00:bb:
         fb:6b:02:c4:8d:a8:30:26:ae:ef:b7:ac:cc:43:46:21:32:b7:
         4e:60:c6:87:a5:d0:03:1b:a7:12:df:9f:df:4b:4a:48:f7:f2:
         a2:aa:58:c5:a6:fd:6d:b2:b0:ff:1a:0d:fd:35:38:9a:71:9b:
         3d:e2:6f:b0:0b:fd:6b:fb:ad:44:19:3f:1f:92:7d:8a:c9:6a:
         0c:6a:95:a1:9e:aa:39:08:ce:e8:87:9e:ad:11:53:d5:58:fe:
         81:64:34:cb:2e:cb:77:ca:6b:d8:ef:1b:b3:48:10:02:5a:64:
         94:c3:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:11 2025 by rpki-client