Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          lYToxppSmbv8uXn8o9Ajp7No6wzzi1zGfcDvGCa48aI=
Subject key identifier:   B6:EC:B3:AE:F7:26:38:25:6E:39:59:FE:7B:10:2D:0F:02:A4:D0:B4
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       0196C6F1513C5E8F7C83E5550FB7522706A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          0848
Signing time:             Tue 13 May 2025 00:00:25 +0000
Manifest this update:     Tue 13 May 2025 00:00:25 +0000
Manifest next update:     Wed 14 May 2025 00:00:25 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: HIUOh8oMLds85ECEgOHJQSpmxIV577Vzj42nfI79rXk=)
                          2: YHsr6f8s8uWfm3H2AkqO-6gTKlA.roa (hash: PDEXeDLtvF2svWu3SCyyV71qYzP5SqM0o8kxhwdjSR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:f1:51:3c:5e:8f:7c:83:e5:55:0f:b7:52:27:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: May 13 00:00:25 2025 GMT
            Not After : May 14 00:00:25 2025 GMT
        Subject: CN=b6ecb3aef72638256e3959fe7b102d0f02a4d0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:09:05:a0:be:a7:ec:aa:cd:6d:47:6c:10:
                    3d:3c:f4:cc:2f:2e:b0:15:ae:57:ca:eb:0b:de:0d:
                    e3:80:2e:10:32:f3:9e:31:03:c9:45:b4:fe:fe:76:
                    80:57:79:52:83:87:00:c8:6f:83:90:6c:be:f8:80:
                    5c:8d:2f:69:bb:80:95:95:ac:2e:69:ab:48:93:be:
                    59:f4:95:e8:7b:cd:d1:a7:ad:b7:30:d8:4a:47:16:
                    74:90:64:c1:79:ad:2b:41:70:c0:84:7f:a2:39:45:
                    7c:fd:84:de:95:1e:54:37:dc:41:57:e5:9f:92:1f:
                    ae:e3:59:ba:85:d0:57:ae:e3:9e:b2:04:e1:c4:64:
                    be:4d:51:c3:b6:e8:1c:9b:38:87:99:f1:f3:50:9a:
                    45:a1:73:a4:e5:0c:fc:e0:6b:52:aa:72:39:7e:48:
                    9c:25:1a:d4:ad:d4:91:6a:6e:43:9e:7c:6e:5b:2a:
                    10:75:ba:2a:d4:73:f0:68:08:5c:cc:b4:e0:e9:e2:
                    86:e5:d2:7e:d3:58:88:77:fd:88:7f:4e:a8:9a:b8:
                    7a:2d:47:dc:37:c0:3c:47:d5:10:3f:a9:b5:03:04:
                    96:97:85:ed:23:a1:a4:25:39:e3:b5:54:60:e2:c4:
                    99:8c:93:33:7e:9e:80:ac:76:68:ea:3d:62:5a:5a:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:B3:AE:F7:26:38:25:6E:39:59:FE:7B:10:2D:0F:02:A4:D0:B4
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:1e:96:90:a1:e2:6d:96:18:aa:32:12:68:da:d1:6f:44:
         42:bc:5d:74:b6:74:71:54:c5:16:a9:53:7d:fe:db:1f:71:22:
         c8:fc:f6:3a:1a:06:74:0f:9b:2a:9b:4d:b2:19:7f:6b:21:0f:
         f0:4b:51:2d:43:3f:f5:d9:48:e3:11:a6:33:16:3a:b3:22:24:
         37:f7:5d:d5:24:fc:fb:10:6c:1b:2b:cd:fc:30:f7:ed:ce:72:
         13:9a:71:fa:07:55:4b:76:e0:6a:ba:bd:fa:8e:90:a0:c3:b8:
         4f:f8:f5:4e:e3:b8:f4:4c:8c:f6:21:47:8c:2b:10:de:f3:12:
         55:fc:fd:16:22:6d:05:14:71:73:1e:a6:c7:2e:38:a2:96:87:
         95:3e:45:ab:71:1c:76:9b:23:ea:96:e0:34:8a:84:94:f0:bb:
         b8:60:bd:e4:b8:a9:ec:36:7d:c7:bf:61:55:f1:61:38:d8:a5:
         ce:76:78:79:76:69:e7:5a:68:b9:53:a6:e8:a3:dc:12:d5:0e:
         cd:52:fd:c8:54:e1:21:34:13:a1:81:6d:47:1c:fc:f2:ec:23:
         cb:92:17:9d:43:da:a3:94:dc:f9:28:26:ed:00:80:3e:f0:29:
         ab:fe:fe:ea:5a:2a:75:d9:6e:36:ef:bb:b0:88:99:55:9d:ec:
         46:63:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:41:44 2025 by rpki-client