Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File:                     O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier:          A+qImBNGiA4iCVtcyTk6e+l421z1E06C1C8nJTYLunk=
Subject key identifier:   CC:8A:FE:C3:B4:15:95:09:16:3D:4E:A7:52:9E:14:89:82:93:E2:0B
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer:       /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial:       0196556ECD27B084A89695E19523EF22E960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 23:00:46 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:46 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:46 +0000
Files and hashes:         1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
                          2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: AdKNALYzmhyQkiV9KoFJ/WWx55rQfxC25dpGR82zGlo=)
                          3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:cd:27:b0:84:a8:96:95:e1:95:23:ef:22:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
        Validity
            Not Before: Apr 20 23:00:46 2025 GMT
            Not After : Apr 21 23:00:46 2025 GMT
        Subject: CN=cc8afec3b4159509163d4ea7529e14898293e20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:c0:19:05:19:09:e5:f8:fb:9b:97:8a:69:
                    e7:72:b6:26:7b:0e:d5:41:42:d4:3a:6f:43:6b:c5:
                    7d:c2:26:f0:db:87:4b:85:00:26:6b:9c:91:5c:15:
                    ce:ad:97:e8:74:02:96:2e:78:45:da:03:40:4c:3b:
                    1e:79:3c:46:d2:a5:6e:c0:0a:02:cb:30:3e:f6:36:
                    16:65:07:fe:3e:6b:f9:00:4f:8f:11:0d:8b:28:9e:
                    15:ed:fb:aa:27:f1:0e:43:72:dc:5d:79:29:fb:79:
                    e9:1a:0f:72:f2:bd:03:cd:95:ce:1d:60:9d:50:fd:
                    51:7d:75:fc:bb:38:a9:79:55:30:5f:50:64:85:68:
                    6d:b4:71:90:3a:8f:ce:3e:08:3a:80:8c:e9:0f:af:
                    f4:aa:98:13:b4:37:60:e9:8e:bd:0a:0a:9e:84:4b:
                    fa:c7:07:01:0e:c3:dd:5a:f4:74:14:71:67:b0:99:
                    86:8f:19:da:7f:91:46:c3:13:da:bf:01:ec:e9:f4:
                    d7:96:85:84:16:e6:b5:f7:a6:a7:da:45:6d:9b:f2:
                    1e:1a:16:58:34:b4:6b:ab:5f:89:de:a5:1c:0e:a7:
                    87:af:7c:fc:e9:ad:c7:b0:c5:31:04:5b:40:69:dd:
                    42:d9:97:c0:3c:39:f1:87:af:e7:c5:53:97:87:96:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8A:FE:C3:B4:15:95:09:16:3D:4E:A7:52:9E:14:89:82:93:E2:0B
            X509v3 Authority Key Identifier:
                keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:d7:bc:cb:42:a7:1e:0d:23:4d:d6:a7:aa:7c:98:88:66:
         7a:7b:57:b7:67:32:a0:c2:42:90:8d:57:a9:4d:f2:6b:ee:9b:
         a6:48:40:92:b4:86:9f:c9:64:a2:8b:3a:23:5b:68:45:16:04:
         01:7c:da:af:67:a3:9c:16:e1:de:e8:57:b4:05:aa:54:6e:da:
         77:f2:2e:00:fb:f9:ca:b9:e5:1a:6a:9f:92:9c:0a:ad:1b:6c:
         6e:26:6a:23:cb:a8:d6:19:cf:89:8d:05:55:b4:a7:09:07:83:
         a9:03:d6:98:c4:4c:a6:1e:69:50:32:94:fa:98:d9:31:e2:1d:
         17:e1:35:ed:50:95:88:c6:32:f0:05:56:18:1f:02:2f:6d:be:
         86:cf:bf:c5:d1:de:1d:99:90:cb:4f:1f:5a:57:c4:2c:7f:71:
         94:50:26:5f:17:6b:ab:ff:61:e6:a8:3d:0c:47:33:8c:05:03:
         f7:99:ec:05:7f:3e:7f:4e:22:7e:b2:04:9a:fe:bd:e7:f0:e7:
         fb:ac:ae:2a:c5:1d:ef:21:9c:b8:ff:fb:4e:fc:15:ed:49:7b:
         4b:69:ea:49:f3:b2:90:b3:98:b2:53:d8:0e:91:e6:96:26:36:
         8b:5c:4d:e3:8e:95:3e:07:97:5f:79:19:30:37:bc:e5:31:b9:
         d2:72:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:04 2025 by rpki-client