Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          N+0ra2I1NqA+H6anCi9x/7Wo0J/ukEftC3aDj3wCDNg=
Subject key identifier:   02:F1:BD:F0:A6:D7:EA:27:BE:98:B4:E6:12:3A:87:8F:DC:84:39:5D
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       0196C34BD9A20F903C0A7B48F5DAF139B522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 07:00:50 +0000
Manifest this update:     Mon 12 May 2025 07:00:50 +0000
Manifest next update:     Tue 13 May 2025 07:00:50 +0000
Files and hashes:         1: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (hash: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: CQVBOnN5GYku0D+0cBZB+fC9SPXZd3/IS27WA9Mp5Zs=)
                          3: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (hash: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=)
                          4: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (hash: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:d9:a2:0f:90:3c:0a:7b:48:f5:da:f1:39:b5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: May 12 07:00:50 2025 GMT
            Not After : May 13 07:00:50 2025 GMT
        Subject: CN=02f1bdf0a6d7ea27be98b4e6123a878fdc84395d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:2e:9e:0e:f5:ca:7a:28:c7:12:94:64:29:
                    07:59:a3:25:9f:aa:64:f8:dc:21:70:3f:80:dd:49:
                    cf:83:8c:fb:e7:09:db:4f:01:d6:2e:ce:0c:dd:12:
                    a8:e1:f2:2d:90:a7:50:6b:89:c7:2b:85:23:21:b7:
                    19:5c:c7:af:e2:90:07:0d:ed:59:52:cd:6d:15:19:
                    2e:75:57:f2:c1:06:64:b9:8c:09:10:f2:83:87:0f:
                    34:80:02:94:74:9e:a5:44:be:e3:e3:37:0b:95:b7:
                    e1:eb:5a:5c:ea:af:b8:af:a2:44:0a:1a:98:ed:69:
                    7d:83:ec:e2:f5:ec:51:00:a5:a7:5d:35:70:61:9c:
                    da:ea:b9:ff:d9:d4:36:39:b5:ca:d2:a5:c5:5d:cf:
                    9a:d6:ce:61:14:f3:fa:8c:84:14:79:aa:1e:47:2e:
                    c1:7e:24:4f:ed:bc:86:22:5f:ae:08:8c:f9:32:36:
                    ec:57:86:43:e2:33:b1:90:9e:31:bb:23:20:b2:e2:
                    74:2b:15:64:1e:ea:fa:f0:15:c9:85:10:b6:ff:d4:
                    ee:e2:ae:14:59:33:4e:4c:d0:38:ec:b5:9a:a6:1a:
                    ed:93:1b:de:21:25:09:e0:2d:fe:e2:01:26:10:9c:
                    03:ca:65:b8:59:30:a6:8e:40:71:2b:aa:8d:4b:7f:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:BD:F0:A6:D7:EA:27:BE:98:B4:E6:12:3A:87:8F:DC:84:39:5D
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:b6:83:eb:94:68:33:0e:25:ae:27:df:54:51:b5:ff:03:
         fd:3a:13:82:ea:c1:f8:73:02:8d:89:6e:1e:7d:63:c3:ee:1b:
         d5:b2:0f:12:3e:15:1a:4f:01:ba:77:c2:34:9d:be:8e:34:94:
         87:17:3e:d9:65:d0:ed:2e:35:f7:11:49:61:b6:c2:1f:ec:bc:
         8b:9e:c2:c6:7c:40:69:06:c0:46:d1:bb:29:3f:c5:90:65:54:
         db:41:78:0c:25:b7:33:d0:21:f8:64:e5:24:92:2b:ae:6b:ad:
         c9:3d:ad:85:5b:86:61:0b:04:07:13:c8:f9:0a:e1:dc:2d:0d:
         e8:6c:21:27:72:65:38:46:51:2b:3d:0d:03:3c:e1:a0:fa:19:
         bf:a4:57:d8:9e:d2:84:6a:30:67:2b:6d:95:41:cb:77:b1:a0:
         2c:d2:e7:94:e0:a1:f0:97:d2:8a:f2:b2:f2:a2:ba:65:95:4a:
         ec:03:88:22:96:80:31:48:76:98:ce:ac:a1:99:2b:cd:a4:b1:
         48:ec:ca:59:35:11:88:06:94:8e:14:47:a4:16:60:63:e3:86:
         c1:01:25:1e:a2:0b:dd:49:f6:4a:ac:91:fb:45:bf:b3:c6:3d:
         30:64:6e:c4:ef:7c:90:5c:61:af:58:ab:cf:52:d5:14:a1:26:
         59:b5:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:54 2025 by rpki-client