Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          RyuoWAA5+/CmJHapFIAiZDu9EmxoXJWtNFL43+1SoUg=
Subject key identifier:   12:1B:1F:21:D7:D2:4D:7B:2F:46:9E:FD:04:38:FA:AF:17:A1:D5:6F
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       0196CBE1629B9E714A33D873DFD7EFD47815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          0F37
Signing time:             Tue 13 May 2025 23:01:07 +0000
Manifest this update:     Tue 13 May 2025 23:01:07 +0000
Manifest next update:     Wed 14 May 2025 23:01:07 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: 4zdIefN3CqpSAArg6HKf+2LcnfhGJ4C68GGIqOgSk0Y=)
                          2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:e1:62:9b:9e:71:4a:33:d8:73:df:d7:ef:d4:78:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: May 13 23:01:07 2025 GMT
            Not After : May 14 23:01:07 2025 GMT
        Subject: CN=121b1f21d7d24d7b2f469efd0438faaf17a1d56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:e3:7e:46:a5:da:2b:67:fe:2b:ff:f2:c9:
                    0d:0d:ca:2c:66:1f:fa:81:b7:fa:8b:a7:5b:ce:46:
                    e5:56:4a:07:c6:2f:56:3a:61:7e:e6:c7:02:8a:e5:
                    29:63:7b:e8:94:db:50:74:13:90:ec:0d:a9:7e:d3:
                    02:fe:00:fa:38:f9:46:4c:2a:d2:d8:70:92:f1:4a:
                    20:92:40:90:54:2f:f4:30:0a:c8:fc:73:64:fd:4f:
                    da:4d:a0:41:96:49:97:97:65:8b:5f:36:66:05:58:
                    d9:7b:ef:b3:46:76:5e:41:8a:fd:4a:63:d9:75:6c:
                    bb:80:70:b6:31:bb:ce:c1:13:6b:65:b3:91:99:f0:
                    3c:f6:97:c8:2b:5d:91:47:dc:2f:97:ca:9f:23:de:
                    13:73:9d:d7:66:7c:c4:44:48:e9:35:0c:35:94:f0:
                    fc:67:29:a7:4c:7b:d8:51:f6:e6:37:b4:fc:be:a8:
                    c5:33:ea:17:33:0f:f2:ae:d8:05:f7:0d:63:43:d2:
                    22:90:30:47:f3:fc:9f:80:87:ad:45:ab:db:af:ac:
                    45:25:2e:e6:64:82:02:8d:bd:ca:b8:87:25:0a:2d:
                    f4:bc:5b:2f:01:6e:15:9f:16:66:16:e9:e0:d4:57:
                    37:e5:ad:73:2c:39:77:dc:bf:d0:35:a5:cb:b5:19:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:1F:21:D7:D2:4D:7B:2F:46:9E:FD:04:38:FA:AF:17:A1:D5:6F
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:4b:6f:b6:34:5a:fd:72:aa:e9:cb:ed:2d:c7:2b:88:b9:
         3b:51:0d:af:89:ea:bb:6c:19:71:9b:3b:a3:6e:3b:fe:b5:79:
         23:98:27:0f:af:6e:40:f8:6d:09:a6:d6:ff:1c:d7:3e:a9:8d:
         32:c2:f3:dc:a0:5f:c3:2c:41:d8:6e:34:1f:7e:cb:a4:ff:9d:
         ee:ff:03:ec:17:3b:c3:a7:e5:6a:2e:5a:07:29:72:e4:69:ca:
         3c:c5:90:83:df:64:04:07:eb:f6:15:f3:e3:b4:29:13:e3:bf:
         08:eb:9e:ab:34:e7:e7:32:7a:aa:d7:e3:7a:4c:29:d6:b3:6e:
         70:15:a4:90:e6:bf:ff:61:19:48:64:8a:2f:7a:a7:e2:4a:7b:
         24:05:f8:26:c4:56:81:eb:a5:40:b9:a9:3d:0c:2f:8e:92:3d:
         19:23:7e:c0:77:78:9c:d2:b6:41:73:72:f0:4f:2b:1a:bf:10:
         ee:f0:09:e3:b0:39:1f:45:07:af:c9:fb:c3:73:1e:0f:56:3f:
         40:dd:92:cf:e7:8b:e7:ba:12:5a:84:d8:15:79:9c:85:ef:eb:
         cd:56:f9:6a:60:31:0d:c9:da:95:41:c4:a5:36:20:55:4b:99:
         09:2f:24:a3:fb:8d:41:d3:95:44:d7:eb:16:34:50:07:ad:65:
         33:93:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:29:11 2025 by rpki-client