Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          1Kmxni0a0J6rQyAj0aBKKJHBA48A5jBBTA3kfHA66PM=
Subject key identifier:   DA:35:1B:B3:ED:EA:AF:77:61:44:50:ED:5C:F9:FD:AB:E1:DB:51:04
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       0196BB92C3A81BD25D65E47E6AB3824A482D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1545
Signing time:             Sat 10 May 2025 19:01:19 +0000
Manifest this update:     Sat 10 May 2025 19:01:19 +0000
Manifest next update:     Sun 11 May 2025 19:01:19 +0000
Files and hashes:         1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
                          2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
                          3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
                          4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
                          5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: lcJZA552qsMZsq/IuJ7aB1A2lRttORBsPwBdSF+gHTM=)
                          7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:c3:a8:1b:d2:5d:65:e4:7e:6a:b3:82:4a:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: May 10 19:01:19 2025 GMT
            Not After : May 11 19:01:19 2025 GMT
        Subject: CN=da351bb3edeaaf77614450ed5cf9fdabe1db5104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:a3:09:2e:fe:56:d8:4f:17:50:f9:d4:d2:
                    1e:4b:58:56:5b:c1:0d:00:a0:f5:a0:a1:ed:72:b2:
                    ed:17:21:66:01:ca:1e:03:20:1f:92:c0:54:39:20:
                    45:17:40:24:81:d6:69:0c:d0:27:ac:9d:52:94:b2:
                    49:6b:3f:02:e3:6b:4b:52:2c:28:51:6a:10:6a:2e:
                    64:fb:e7:2b:5b:ea:11:0b:0a:e6:4b:ce:dc:64:c6:
                    08:b6:23:61:0b:bd:5e:96:96:7b:10:fc:06:a2:06:
                    e7:09:ec:76:5e:a1:d3:90:0a:c4:42:ca:6a:02:6c:
                    ee:86:94:99:43:19:97:b6:3b:3f:92:38:20:ba:5d:
                    cc:2e:95:ef:a0:d2:f1:59:87:ca:16:0d:5c:f4:91:
                    33:9e:bd:96:0f:c2:e3:dc:ba:52:f4:57:0b:46:0e:
                    6b:df:1b:54:fa:cb:9c:7d:92:fa:4b:cb:45:2e:57:
                    17:ee:62:5b:78:e7:2c:04:49:0f:c0:dc:8a:87:bc:
                    cd:ee:ff:23:f5:e4:7f:c6:f1:24:09:60:95:5f:28:
                    2d:d2:0a:c4:2b:ac:cd:51:84:c5:f1:08:c2:93:20:
                    da:b4:85:f1:63:a8:2b:9c:82:84:4f:cb:a6:d9:93:
                    aa:ba:13:64:ce:60:b3:e5:54:cd:54:df:64:3e:2d:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:1B:B3:ED:EA:AF:77:61:44:50:ED:5C:F9:FD:AB:E1:DB:51:04
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:01:ce:29:33:3a:c6:7b:c2:18:53:3e:48:c8:3e:35:d6:d8:
         93:ca:09:ec:7c:5c:4d:b0:ff:75:85:d7:62:c3:d8:0c:cc:52:
         49:9c:48:0c:81:52:7c:80:89:ce:5a:22:a6:4c:39:d1:c5:d9:
         98:6b:ab:c1:ff:67:59:3b:47:01:55:4a:5d:95:82:ee:40:bc:
         63:75:72:8c:cf:ab:2b:5a:94:cb:de:67:0f:ca:34:82:c7:74:
         74:54:12:6a:02:f1:77:4a:6b:e0:bf:18:05:44:7e:de:be:06:
         3c:e3:82:ec:91:5f:8e:a1:d7:f7:62:76:d3:d2:38:d0:0a:84:
         a5:5d:d1:5f:c2:ea:d9:5f:93:68:ee:e2:02:55:b0:32:24:01:
         22:ca:6e:c2:be:3e:4d:3e:d7:e5:c8:89:7b:6f:61:8c:cd:a9:
         9e:84:c3:1a:7d:86:dd:52:0f:b5:19:ee:0d:d8:f2:59:6a:a6:
         ae:d6:32:2a:9f:5f:41:66:e6:3a:01:89:47:f7:5a:8b:2a:39:
         82:b9:78:82:f4:47:8b:41:07:b7:bc:cf:05:a8:d3:d4:2b:d1:
         1b:f9:ef:e9:ef:05:54:df:d2:87:b3:60:fb:b7:4f:24:2f:73:
         77:9e:c6:9f:1a:96:c7:1c:fe:96:26:8e:ac:6e:b7:2e:4a:78:
         12:41:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:36:46 2025 by rpki-client