Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File:                     DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier:          VxhJPMnRiavyrM4C2T/H5Kjsa23CQ418oRSUrnPXBiw=
Subject key identifier:   15:16:9D:68:76:27:6E:6C:60:97:B9:AC:C1:61:4C:88:D7:DD:3F:2F
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer:       /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial:       0196C04B184EEE6C7EA2D95CB5ED2F606E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number:          0A39
Signing time:             Sun 11 May 2025 17:01:08 +0000
Manifest this update:     Sun 11 May 2025 17:01:08 +0000
Manifest next update:     Mon 12 May 2025 17:01:08 +0000
Files and hashes:         1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: 4Y2ok6Akww5nUkD92wrUBVc24BIQ1AjjUSgLW1w/JBU=)
                          2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:18:4e:ee:6c:7e:a2:d9:5c:b5:ed:2f:60:6e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
        Validity
            Not Before: May 11 17:01:08 2025 GMT
            Not After : May 12 17:01:08 2025 GMT
        Subject: CN=15169d6876276e6c6097b9acc1614c88d7dd3f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:fb:66:b9:1f:9e:eb:37:53:bc:5f:73:c5:
                    59:6d:52:29:ae:5b:c5:37:e8:29:58:eb:88:62:b4:
                    80:e9:03:ca:d0:c5:b9:45:b3:a9:cb:de:46:68:e6:
                    16:3d:06:9c:87:88:05:7b:42:9f:0f:3f:70:aa:c0:
                    40:67:ea:46:37:d4:eb:d8:9b:fe:03:44:2e:dc:26:
                    2c:1e:de:e3:44:28:0b:bf:51:f1:0b:f5:8c:1f:bd:
                    33:a0:4d:0d:3e:5e:ad:0d:1c:f0:76:54:47:d6:ee:
                    70:ee:f7:f9:9e:fc:f8:1c:35:99:3d:8f:89:2a:cc:
                    2c:c2:e5:86:2d:62:1c:ee:13:61:81:92:1f:f9:da:
                    dc:f1:33:6d:75:4b:da:fb:6a:cd:66:cc:3f:7e:de:
                    71:54:16:ba:a6:53:f5:d3:83:68:59:a3:69:4f:66:
                    6c:64:90:c2:72:48:d3:26:c2:f0:43:7c:79:f2:77:
                    96:dd:31:1e:48:3d:b2:d7:fd:f6:a5:cf:77:2a:e1:
                    35:8f:aa:2d:a4:8e:9f:ef:d6:47:1a:58:96:86:1d:
                    c4:87:72:01:4d:d7:e9:ac:2b:ac:c6:8e:27:33:d3:
                    3e:f3:a7:1e:ec:bf:50:07:37:3d:35:a8:61:79:32:
                    b6:bf:eb:2c:68:22:3f:58:bf:f1:57:f1:30:13:a4:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:9D:68:76:27:6E:6C:60:97:B9:AC:C1:61:4C:88:D7:DD:3F:2F
            X509v3 Authority Key Identifier:
                keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:b1:3d:34:75:a6:78:06:6d:07:65:8a:03:46:c7:1a:23:
         0b:93:1f:d6:eb:f0:3a:86:4d:04:23:87:5e:23:7d:98:65:b3:
         18:06:99:02:92:e6:b9:cf:5e:62:32:0c:d7:cc:a0:78:1e:d0:
         23:6b:a4:cc:4d:70:fc:0f:50:fa:ce:81:1f:da:68:cf:45:d2:
         c3:be:65:b7:a4:e1:a4:02:33:1f:55:f5:bf:63:cd:df:c1:19:
         c8:ea:34:15:70:3f:30:b1:01:fe:72:12:1f:9a:4c:d5:e9:8a:
         83:54:12:b8:30:21:c0:45:6d:29:e5:6a:75:d8:7d:f3:fe:2f:
         2e:23:e7:54:49:8c:4d:bb:c1:1c:d3:40:e1:26:f3:a6:5d:88:
         bf:4d:dd:17:61:cc:d6:6e:02:e8:24:88:70:c0:b7:84:f8:61:
         4c:d7:89:20:e2:a2:1d:8d:e3:38:e7:07:b9:16:1c:7c:20:2f:
         4f:fa:58:6f:33:bb:59:a8:13:3a:47:b7:90:97:01:8d:70:5f:
         b3:d4:30:ff:62:5d:4e:e0:3a:5a:bc:0e:46:7f:0a:20:36:bc:
         e3:0a:eb:56:ff:6e:9c:bf:01:5e:f8:43:4c:11:76:65:3c:3f:
         16:4d:60:90:5a:2b:14:58:01:1b:45:c8:1f:25:b3:4e:18:1e:
         b2:1e:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:02:38 2025 by rpki-client