Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File:                     dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier:          G5YItCARh5GnpFoMG3oEOK1SLLlCtuN3il3CkjoKCjg=
Subject key identifier:   08:4B:00:59:F5:B0:2A:AA:5F:CE:B0:AA:0A:76:AE:DF:D2:4E:4B:01
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer:       /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial:       0196DA0A4DE921A70A9A76C2CDCA9B266412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number:          1542
Signing time:             Fri 16 May 2025 17:00:30 +0000
Manifest this update:     Fri 16 May 2025 17:00:30 +0000
Manifest next update:     Sat 17 May 2025 17:00:30 +0000
Files and hashes:         1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
                          2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: PgJv16lYRO1kNpy3QcV1PjHBlos7ObnUvcil93fggi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:0a:4d:e9:21:a7:0a:9a:76:c2:cd:ca:9b:26:64:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
        Validity
            Not Before: May 16 17:00:30 2025 GMT
            Not After : May 17 17:00:30 2025 GMT
        Subject: CN=084b0059f5b02aaa5fceb0aa0a76aedfd24e4b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:dc:7d:30:e2:b2:8e:d8:00:63:27:de:d7:
                    15:5f:aa:cd:fc:00:76:cb:b0:23:1a:23:4e:a0:9a:
                    7c:00:ff:f9:b5:db:b7:8a:a6:f1:4b:20:cc:0e:71:
                    89:c7:c3:05:33:9a:a3:47:c0:36:49:0a:37:04:10:
                    74:d1:f6:35:ea:d8:98:38:e4:b6:0f:43:26:59:63:
                    68:02:53:6b:3c:30:f7:e8:fd:3b:4e:a7:05:0e:59:
                    af:5d:b0:c9:b0:93:e3:35:83:9b:fb:a3:f8:04:40:
                    6c:f7:38:8c:c1:f4:1c:a6:d1:19:06:f3:80:fe:c4:
                    07:e1:5f:ea:32:06:98:85:99:54:c7:70:8b:45:54:
                    bc:2a:da:77:0e:80:2f:26:0b:6b:f0:e6:a7:85:9f:
                    39:ec:69:6d:90:18:a4:59:3c:84:1c:2f:a9:e8:85:
                    60:31:d4:5c:54:88:02:1e:2e:68:61:13:da:e1:0a:
                    ed:e2:ed:49:63:3b:be:18:3e:dc:de:c9:c3:c6:97:
                    57:e3:26:ed:93:d4:e2:8b:0c:74:a4:e7:fc:06:3d:
                    a5:89:13:a7:f4:4a:16:fc:97:f8:e3:68:f7:da:b2:
                    4e:0f:37:6e:53:36:f0:f9:08:2e:9b:9d:eb:7d:ab:
                    70:0c:ea:e0:c8:08:bd:67:51:d3:22:e4:10:ad:fe:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4B:00:59:F5:B0:2A:AA:5F:CE:B0:AA:0A:76:AE:DF:D2:4E:4B:01
            X509v3 Authority Key Identifier:
                keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:11:95:e0:67:50:50:8b:c5:83:95:f3:58:61:c2:0f:cd:
         11:2d:18:cb:01:f2:2d:78:dc:0c:11:29:0e:d3:cf:4a:0a:bb:
         8a:38:c9:0f:67:c4:95:98:25:c2:fb:f6:b9:d6:19:39:8b:5a:
         32:07:7b:fc:9b:ee:5b:10:ed:12:70:df:66:0a:a9:78:08:a9:
         2f:22:88:fd:91:8d:4b:e9:6a:84:64:25:10:e1:8e:ad:5b:e8:
         89:c3:8b:47:ea:cb:c9:5b:b3:72:c1:f8:44:82:45:4a:78:64:
         b4:f5:f2:dd:03:23:ca:a6:ee:29:7f:ee:61:58:ef:08:b9:7d:
         d1:aa:b1:4a:2a:48:a9:80:b4:78:5d:67:8a:52:87:ae:ec:c5:
         aa:4d:db:1c:89:7b:c5:2f:9e:02:67:95:bb:88:48:9c:26:ee:
         1b:39:e1:9f:9a:c7:f5:46:97:8b:25:a2:2c:38:23:29:23:d8:
         88:c3:eb:33:05:19:70:d3:a1:2e:55:f0:ce:df:1b:fa:47:79:
         e7:c3:79:52:d1:b3:8a:af:85:75:ba:d4:e7:8a:13:23:43:16:
         8e:1f:e1:67:5a:f4:93:0f:08:9a:19:b2:33:43:bf:0f:d8:08:
         a4:9b:90:1a:a1:5c:bc:b0:80:54:5c:3c:da:a0:74:09:9f:0b:
         00:88:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:14:54 2025 by rpki-client