Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File:                     dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier:          BvH2p9Y/OgwlV73P4/P/rR+gT6J2/LLzAV4JkS41ir4=
Subject key identifier:   E9:E8:C0:0F:F2:62:78:59:AF:49:D2:12:04:C9:96:9E:AC:C6:D8:88
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer:       /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial:       0196C571290828026C4761E08C96A86E99D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number:          0E09
Signing time:             Mon 12 May 2025 17:00:49 +0000
Manifest this update:     Mon 12 May 2025 17:00:49 +0000
Manifest next update:     Tue 13 May 2025 17:00:49 +0000
Files and hashes:         1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: UvS2MgQtPQOIOF7CZV0H4wvjLeqIK90f6xZkTen8kYE=)
                          2: j_zwA3lMJMAwX3hbOGDvv36TWxI.roa (hash: jFs+ea1KgMM5z88rmof87A9yhp5WnGLZNGkzRM11ISg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:71:29:08:28:02:6c:47:61:e0:8c:96:a8:6e:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
        Validity
            Not Before: May 12 17:00:49 2025 GMT
            Not After : May 13 17:00:49 2025 GMT
        Subject: CN=e9e8c00ff2627859af49d21204c9969eacc6d888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:35:fd:07:1a:7d:03:25:0f:aa:72:66:24:
                    1b:49:18:8b:47:53:7e:4c:9b:05:72:8e:75:8f:50:
                    15:ce:91:94:b0:aa:0c:cd:3d:9a:f2:68:e7:16:2e:
                    77:af:b4:10:8b:58:96:92:11:19:7f:ab:09:d5:9f:
                    ed:3d:74:f6:2b:dc:3d:a8:c5:3a:f6:1b:6c:df:8b:
                    a2:2a:46:03:6e:80:68:c5:82:3b:b6:24:09:2a:a7:
                    cf:7a:c1:a8:eb:18:7d:6b:21:9d:26:41:3c:7c:ca:
                    d7:4f:40:9f:ab:78:8e:2d:32:67:f8:f4:7f:6b:b1:
                    74:35:a5:33:04:3d:71:7f:cd:9d:45:c8:14:e4:2a:
                    6c:48:96:aa:c4:50:33:a8:50:57:c2:d9:6d:a1:63:
                    ae:9b:84:79:fb:76:09:6b:bf:12:7d:a7:40:33:c7:
                    6b:a0:be:cd:58:7e:4f:cc:34:c3:0d:59:69:44:71:
                    83:91:02:e7:77:6e:3b:08:5b:4d:1f:d5:57:ef:71:
                    59:35:ab:0e:6d:75:e9:8e:50:39:ef:6c:95:c8:32:
                    51:98:54:9c:35:50:3d:a8:40:8d:04:e0:5b:4b:32:
                    51:54:a9:ce:e4:58:13:a7:41:db:52:13:cc:15:fa:
                    a4:44:74:db:18:14:7b:90:75:a5:5d:9b:95:70:a7:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:C0:0F:F2:62:78:59:AF:49:D2:12:04:C9:96:9E:AC:C6:D8:88
            X509v3 Authority Key Identifier:
                keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:38:32:ca:39:cd:51:44:78:4a:19:dd:cb:5d:c5:f5:57:
         ca:76:95:1b:c8:8c:ea:06:90:8b:0f:27:8a:83:bb:82:f7:7b:
         79:17:4f:9c:7d:8f:9b:35:3c:8e:9b:43:08:94:fb:7d:9c:d3:
         cb:13:87:94:03:da:3f:cc:8d:8b:39:88:a0:85:73:1e:93:0f:
         1e:9b:ee:be:08:5e:fe:f1:5a:76:76:2f:18:a9:9c:69:54:2d:
         a9:47:70:19:32:a4:5a:c6:05:2d:bd:19:32:77:63:d0:ea:b3:
         b4:a1:04:04:6b:f4:b5:62:73:9e:1c:01:5a:98:69:68:46:d6:
         84:d6:a7:67:8a:60:47:b8:75:54:c9:21:ed:b8:f5:18:42:45:
         e0:27:4d:e3:a7:ca:9b:c3:4e:bb:db:9e:32:8e:89:5a:a3:91:
         ca:eb:ac:28:36:49:28:93:22:20:08:cc:37:a2:6d:c6:ea:7f:
         d8:65:a9:5f:65:95:fc:79:cf:57:dc:a9:b3:a8:7a:4f:3b:2a:
         6c:b3:a6:f8:eb:f7:0b:c5:53:23:71:ec:92:e6:ec:81:49:e0:
         f2:20:5b:73:4e:2f:8a:5b:86:08:40:40:17:03:35:3b:dd:72:
         5c:dc:fe:ed:42:e2:94:69:f3:58:05:47:dc:7d:e5:13:02:0c:
         bb:6f:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:15:18 2025 by rpki-client