Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File:                     dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier:          9AvPFUOA1p1sUDpQiW2SOXnt0qeYAMTQzWnacgeMYFk=
Subject key identifier:   D2:A3:C8:EA:18:2B:06:3D:9D:65:BD:D5:7C:01:A5:D8:DB:D7:98:54
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       0196D363C6D832B0E8D497085459E8B155BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number:          1541
Signing time:             Thu 15 May 2025 10:00:53 +0000
Manifest this update:     Thu 15 May 2025 10:00:53 +0000
Manifest next update:     Fri 16 May 2025 10:00:53 +0000
Files and hashes:         1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
                          2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: J0n4TZAC77M48hG6QkywA/UQqjNvzeK2FGZ4278ICyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:63:c6:d8:32:b0:e8:d4:97:08:54:59:e8:b1:55:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: May 15 10:00:53 2025 GMT
            Not After : May 16 10:00:53 2025 GMT
        Subject: CN=d2a3c8ea182b063d9d65bdd57c01a5d8dbd79854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:ab:8a:3b:fd:52:cf:87:a2:59:66:ea:f5:
                    bc:54:c3:97:1b:ff:5d:2d:17:23:79:56:e3:55:95:
                    a1:96:92:97:0a:94:2d:ef:c5:0f:16:ff:39:dd:54:
                    77:9c:5c:7b:25:49:54:9a:4f:b8:a1:12:e3:56:e6:
                    20:fb:5b:74:66:99:85:e5:92:90:1c:bd:00:7e:cc:
                    10:f9:d4:78:4a:f7:9b:9c:28:d6:0e:5e:92:94:a4:
                    a0:ae:bc:24:a0:08:58:0a:71:07:62:ab:9f:b9:29:
                    80:0d:d2:b1:35:90:3a:28:d9:75:9b:7f:10:da:59:
                    6d:f8:a2:ad:c5:c6:07:f8:97:5e:5b:8d:33:5e:18:
                    3e:18:9d:10:37:b6:62:d5:38:39:53:ef:6e:c5:4f:
                    b2:d1:3c:bf:a8:08:39:fa:9a:30:94:9d:ad:bb:92:
                    8e:5f:cd:30:5c:32:0d:ac:5f:00:cc:3e:40:c2:26:
                    76:fa:d6:a3:2e:f3:04:90:a5:c6:4c:07:ee:0c:68:
                    0e:59:80:ca:ab:4a:98:17:c3:49:3f:4d:56:b1:dc:
                    32:40:ca:77:b0:3c:4e:fd:87:3b:d6:9a:e9:30:51:
                    ec:cd:2a:38:e6:a2:ab:14:ae:e2:81:3c:e0:de:72:
                    e1:db:ed:c3:c2:5e:0f:77:be:65:9c:13:f7:cf:e2:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A3:C8:EA:18:2B:06:3D:9D:65:BD:D5:7C:01:A5:D8:DB:D7:98:54
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:08:be:49:36:d3:e9:da:d0:5a:b0:cf:46:60:b8:69:9b:82:
         fc:bc:50:9d:38:f7:65:d2:3c:8b:da:1c:af:22:e2:a7:27:5d:
         9a:7a:8c:9a:e8:6e:48:38:48:ce:52:bc:fb:54:de:fa:ac:dd:
         1b:38:28:e9:93:c3:e3:60:b7:c0:8d:01:71:50:3e:a9:83:73:
         a7:22:09:9a:2a:c8:5d:9d:8b:66:f2:52:54:03:3d:20:67:e6:
         57:fd:f2:63:1b:94:76:4e:89:ab:75:ac:e8:99:f6:57:08:87:
         d8:2c:3d:ac:e8:1a:83:e9:9d:da:3f:f1:ae:c8:8f:f7:2c:a8:
         5e:34:86:f7:f6:fb:19:39:6f:ac:17:47:72:1c:fa:b2:ca:5e:
         53:d9:a8:b2:61:62:1d:33:56:12:a5:5a:be:94:eb:f2:0a:7d:
         9e:cc:99:34:c0:c7:a4:1e:21:a9:92:89:85:ec:61:20:d8:19:
         d3:9e:18:39:30:8a:ef:42:46:9c:a2:8d:58:6e:82:d7:97:c4:
         5a:10:c8:d4:dd:9e:45:04:ac:9a:08:30:42:d6:c2:7f:bd:17:
         28:37:59:31:a6:04:b0:a6:ae:86:cf:08:45:00:a9:07:a9:b3:
         34:62:c1:d7:b1:10:94:16:cd:ed:b2:3e:42:63:bd:94:1b:d7:
         62:3c:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:11:21 2025 by rpki-client