Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          O498X7fjuNsvaPb9BkgSd8Gu9UaMHjDLUvs24wosK70=
Subject key identifier:   C1:36:B7:53:09:E0:CF:13:92:98:A4:74:0A:BD:AA:9E:B1:10:A7:B7
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       0196A42E5AC0DB85E65D98DFBB591FEE3CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 06:00:23 +0000
Manifest this update:     Tue 06 May 2025 06:00:23 +0000
Manifest next update:     Wed 07 May 2025 06:00:23 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: PFTfNlaIn168CvaefR0eoiZ8BM0wmacPhB/WYCyeAps=)
                          2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
                          3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
                          4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
                          5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:2e:5a:c0:db:85:e6:5d:98:df:bb:59:1f:ee:3c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: May  6 06:00:23 2025 GMT
            Not After : May  7 06:00:23 2025 GMT
        Subject: CN=c136b75309e0cf139298a4740abdaa9eb110a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:d8:0f:04:37:1a:b2:6b:7e:3d:c4:aa:8a:
                    f0:aa:d8:1c:2c:8e:74:ff:6f:87:76:44:ed:59:32:
                    a0:66:64:10:93:bc:02:2c:8b:2a:69:9f:ed:79:e6:
                    4c:9d:b4:85:2d:0a:d9:64:1d:ad:a2:7b:ee:55:53:
                    fa:b5:d5:61:4d:b6:22:2a:7d:95:7d:93:88:b4:f0:
                    24:40:2a:29:5b:3c:3d:3b:4a:3c:8f:3b:74:71:cc:
                    6d:7e:9e:b7:5c:f4:2d:8c:53:13:7c:20:6f:da:45:
                    f7:ea:1b:82:e2:ff:5e:45:a4:ee:12:01:88:fb:42:
                    84:de:cb:9d:0c:b2:80:1a:dd:91:75:93:b3:42:ab:
                    9b:66:97:51:97:02:b4:1f:cc:ed:38:14:bb:fc:b0:
                    ee:f1:d4:a9:05:7f:96:d4:e8:09:f9:2b:0f:d4:19:
                    fe:3d:d1:96:b9:f4:4a:e2:37:9c:93:c9:0c:da:0d:
                    b5:01:3d:54:6a:b3:9a:2e:41:04:f4:ff:3a:76:49:
                    f0:23:b6:e7:40:28:61:10:31:1d:a3:f5:8e:c6:2b:
                    74:6d:64:03:b7:06:94:f4:1d:ac:66:9c:b6:3a:9c:
                    b3:04:86:4a:c4:c6:bf:c5:de:23:d5:36:da:97:41:
                    89:a8:91:03:b6:12:90:f1:52:44:79:5b:6f:bf:7f:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:B7:53:09:E0:CF:13:92:98:A4:74:0A:BD:AA:9E:B1:10:A7:B7
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:e8:3d:95:63:a2:c1:7f:54:24:4c:62:a8:7f:8e:37:5b:
         50:99:88:d4:c5:c9:9c:2a:8b:29:b1:f0:32:5a:ae:0c:b8:b3:
         58:93:e0:25:f9:c2:9e:d1:a2:a2:9f:13:6e:2b:d5:76:b1:45:
         9b:74:f1:cb:ef:ff:11:fa:fe:ee:93:ac:5d:7c:48:9c:0e:bf:
         80:0a:ad:32:9e:b9:5e:5d:a1:f7:b8:ed:aa:13:a7:8c:ec:4a:
         34:d7:c7:33:d4:03:02:d8:79:4f:d5:88:d5:6f:d9:75:87:a2:
         c5:4e:6a:49:3b:dd:03:b6:02:a2:10:37:29:d9:3e:65:7f:36:
         65:85:81:d0:41:03:bf:7f:40:a9:55:b2:7a:28:0d:09:90:ef:
         cb:4e:31:fd:51:ce:cc:11:89:2f:49:64:c1:cb:58:3b:e3:5e:
         58:94:1c:cf:73:66:d5:1c:94:eb:bf:dc:b5:91:5f:4a:07:95:
         c1:1d:fb:7b:a5:75:63:9d:13:de:50:88:8d:d8:19:18:b9:ab:
         50:0b:98:f9:17:69:42:8d:49:81:65:0b:3d:2c:a0:25:51:ce:
         5b:d7:70:db:69:75:b6:87:01:1a:c4:83:9a:cc:7c:3d:24:bb:
         d3:63:05:c8:f7:5d:4c:57:37:5d:37:52:a9:48:dd:86:88:a8:
         b9:ee:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:03:23 2025 by rpki-client