Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          q+xgZ6W/q0pn45hExi9nXadI717B3oYDMQlI50v1Sfg=
Subject key identifier:   1A:C0:70:85:D0:B0:3C:EC:0F:AF:4B:71:9B:22:12:81:97:40:5D:7E
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       0196C8041D7F31CB05E153B6FFFD2ABB550F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          1538
Signing time:             Tue 13 May 2025 05:00:35 +0000
Manifest this update:     Tue 13 May 2025 05:00:35 +0000
Manifest next update:     Wed 14 May 2025 05:00:35 +0000
Files and hashes:         1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: cCnPXLYbPwvdt4SI6VifOhqVC5JefC6ymG5hGwUNq6s=)
                          2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:04:1d:7f:31:cb:05:e1:53:b6:ff:fd:2a:bb:55:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: May 13 05:00:35 2025 GMT
            Not After : May 14 05:00:35 2025 GMT
        Subject: CN=1ac07085d0b03cec0faf4b719b22128197405d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:08:27:cc:04:35:24:98:04:2b:20:03:c7:
                    81:b0:b3:0a:5f:f1:d9:82:c0:3c:33:c6:6a:45:5c:
                    f3:fb:73:91:80:86:07:c8:5e:85:5c:08:c8:12:7e:
                    76:cf:80:88:ad:ea:7c:47:0e:f4:41:41:01:72:43:
                    61:84:fc:05:34:0e:37:da:44:7e:ef:27:ae:21:c3:
                    a3:80:1a:ca:f8:74:b3:6f:be:d3:f5:fb:5a:89:e9:
                    b5:06:02:5d:0a:1a:48:9f:db:f7:ea:1d:1f:38:b5:
                    4c:3b:a8:61:ec:44:15:60:03:4f:80:c9:14:74:28:
                    e7:19:2e:df:f3:81:4a:f3:a9:0e:84:f2:5e:26:b9:
                    86:21:bc:aa:e3:9f:0e:8e:73:ae:bd:50:b2:ea:a5:
                    57:1d:ec:d7:a6:6d:9f:6e:f3:8b:4a:92:6c:2a:ef:
                    f3:9f:ec:a0:fb:62:25:51:00:f8:22:06:62:fa:74:
                    23:fe:63:c5:5d:37:45:b6:b2:e4:91:08:ca:07:6b:
                    aa:fc:56:bf:44:04:f9:6b:63:f1:08:0b:53:48:95:
                    96:79:7f:e1:03:6e:58:08:36:ee:b4:9f:de:f4:14:
                    04:cf:ce:37:89:a8:fc:02:bd:43:29:7e:ab:0a:3b:
                    1e:50:b9:f2:de:d7:da:cd:77:ee:60:3e:f2:b7:1f:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C0:70:85:D0:B0:3C:EC:0F:AF:4B:71:9B:22:12:81:97:40:5D:7E
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:16:4a:c3:90:cb:1d:e2:26:1d:11:68:8b:59:84:65:eb:18:
         fb:74:c6:a3:da:3d:c7:de:52:39:c7:63:33:ec:a9:07:56:99:
         ab:54:63:7a:60:69:3e:35:a5:18:04:bb:b7:ef:82:42:6b:9b:
         54:1d:b8:b2:30:77:e4:a2:81:d0:66:f5:65:42:17:b4:be:ea:
         81:03:88:85:11:ab:6b:bc:1a:a9:8a:01:0a:42:5e:de:57:82:
         e1:7c:24:f0:b4:f6:23:08:98:e0:2f:1a:40:89:70:58:49:5d:
         b3:1d:2a:3b:25:e9:5b:8b:85:5a:ea:95:4a:10:46:26:72:d9:
         d6:ff:32:e2:73:3b:a0:cc:4b:4d:b6:9d:88:84:a2:51:93:99:
         26:f3:f0:0d:7e:70:58:02:b6:12:a3:67:99:75:b3:d8:a2:fd:
         04:cf:49:72:e5:5b:49:84:74:7e:05:24:9c:cc:d1:b8:c0:69:
         b4:0b:1e:ed:38:c1:43:f4:9c:0b:46:e8:45:1a:1a:59:d0:c5:
         9e:2d:31:2f:2a:81:8e:e0:fe:05:97:9a:b6:81:43:0b:3b:6e:
         2d:af:56:56:63:b9:a9:57:e7:75:5d:39:e0:02:24:96:ab:02:
         8c:91:21:01:d6:2d:02:b2:4c:4e:02:85:32:4c:b5:03:92:56:
         9c:12:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:39:33 2025 by rpki-client