Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          4PTgHjGpYISmZVYpJQjNjhQO8RD9ZZFYmLljkY8IK9Y=
Subject key identifier:   3F:F7:4E:BE:9E:86:57:8B:E5:0A:C8:3E:45:D8:2A:1C:7C:74:54:21
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       0196A54117259E2F0656DD405A8F5C478937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          025B
Signing time:             Tue 06 May 2025 11:00:28 +0000
Manifest this update:     Tue 06 May 2025 11:00:28 +0000
Manifest next update:     Wed 07 May 2025 11:00:28 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: ka4aAeDdOImPD9gqsWDgfTkabLLpdUO8FsGSYUN8WYY=)
                          2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:17:25:9e:2f:06:56:dd:40:5a:8f:5c:47:89:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: May  6 11:00:28 2025 GMT
            Not After : May  7 11:00:28 2025 GMT
        Subject: CN=3ff74ebe9e86578be50ac83e45d82a1c7c745421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:7c:3a:56:d7:7b:e6:f6:03:de:8f:1a:6a:
                    6d:a0:8f:14:ae:f8:30:a5:f9:1d:e2:d9:80:2c:e0:
                    73:fd:a4:a7:91:89:01:c0:e4:26:a0:20:43:65:ff:
                    6f:52:7d:b9:5b:68:11:65:0d:53:4d:4a:c5:50:8c:
                    87:31:fd:1d:81:88:6b:f4:11:4d:f1:0e:c4:0c:d1:
                    21:0c:90:78:71:b2:7f:4f:8d:f5:d0:f0:43:fb:3e:
                    b6:2d:48:0e:b5:25:c3:dd:0f:61:93:6b:92:a1:96:
                    7c:2a:c7:66:30:7a:25:3d:03:ef:92:84:17:70:47:
                    cf:66:47:ad:ce:93:cb:f5:fd:07:06:75:9e:a7:e6:
                    7a:77:11:5e:8b:54:09:16:92:85:b8:8c:97:a6:f2:
                    f3:4d:87:3d:f8:06:0c:35:0f:7d:34:98:ac:bd:66:
                    32:12:b3:60:d6:01:76:7e:7c:4b:8f:e2:e3:eb:fb:
                    c0:b7:a9:94:d3:32:5a:8f:05:ad:ec:e3:4c:48:9c:
                    8a:ac:23:f5:04:09:29:c3:f6:bd:d9:db:7f:10:f6:
                    2f:d6:b4:9d:14:19:26:f5:1d:19:f4:e7:2c:c1:7a:
                    83:fb:47:3f:59:1d:34:2f:20:01:e4:2d:bc:8f:07:
                    9d:9d:a6:12:5c:15:60:57:4f:69:9a:48:35:dd:64:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:4E:BE:9E:86:57:8B:E5:0A:C8:3E:45:D8:2A:1C:7C:74:54:21
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:74:7b:21:33:fb:2e:e9:5e:53:8b:66:1b:65:9b:e1:b9:b9:
         9a:88:af:ce:71:d7:a5:1e:fd:0b:a3:ab:3f:7f:51:d6:e0:56:
         34:33:e6:96:83:c4:f0:7c:03:45:a6:76:ac:88:c5:94:6b:79:
         eb:d8:01:80:e1:67:f4:0f:97:34:00:fa:12:7d:52:92:67:13:
         b2:60:29:bf:cf:06:e1:62:cc:48:60:56:94:53:71:78:17:8e:
         d1:dc:da:ec:64:d7:d6:11:bf:dd:13:51:7c:d7:d0:aa:f9:a7:
         a2:a2:55:8c:76:12:dc:a1:29:e6:54:dc:f2:34:90:d7:3c:30:
         a6:80:65:0d:76:4b:e9:6d:65:16:90:99:51:4e:6d:06:85:90:
         2d:62:28:74:d7:ef:92:a0:fc:ae:a1:ae:d2:55:19:7b:05:cd:
         12:c2:f0:54:6a:66:6d:88:56:fd:f2:fb:21:68:0c:ff:44:37:
         ac:bf:a4:57:b5:12:92:1d:69:a8:3e:1c:ad:2f:d6:ea:f8:a9:
         7f:84:7a:77:40:c1:59:8b:0f:49:45:a9:ff:40:aa:11:6f:71:
         6d:f6:ec:ae:60:cf:4f:01:a6:f9:f0:36:54:e1:ff:8f:e4:aa:
         99:3e:ca:7d:b4:08:b3:4d:43:43:cc:8b:1c:ed:1d:c0:a5:38:
         03:5c:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:40:19 2025 by rpki-client