Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          n1pSvXmQGQzdurXEIQ+S6ZUiyABpIg78d1Jp9LKzwH0=
Subject key identifier:   E6:E1:80:E4:97:F2:03:A1:DA:2D:EF:AD:5C:6C:47:C5:89:2D:2E:F6
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       01965FBC04695C9A6949B7D619A4E2348BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          080D
Signing time:             Tue 22 Apr 2025 23:01:19 +0000
Manifest this update:     Tue 22 Apr 2025 23:01:19 +0000
Manifest next update:     Wed 23 Apr 2025 23:01:19 +0000
Files and hashes:         1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: 3de9+WsFRKWA23G8rG2fN5o8aMBU95evxE405ACtsVk=)
                          2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:bc:04:69:5c:9a:69:49:b7:d6:19:a4:e2:34:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Apr 22 23:01:19 2025 GMT
            Not After : Apr 23 23:01:19 2025 GMT
        Subject: CN=e6e180e497f203a1da2defad5c6c47c5892d2ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:7e:3b:e6:80:83:3a:35:9e:f7:ee:96:d8:
                    62:f8:92:bf:a1:90:22:1a:82:c9:47:a1:c9:f5:6d:
                    91:c5:16:91:ab:22:0c:25:24:5d:32:d9:ba:5d:48:
                    a9:dc:83:b6:f3:a1:dc:0d:86:af:33:cf:59:43:5b:
                    dc:ec:d1:ea:65:26:d1:7f:a7:93:f4:4f:27:27:ed:
                    0b:3d:16:34:e5:6e:6e:7a:fb:bb:47:dc:ee:bd:3d:
                    d8:3e:35:90:0f:73:fe:8c:33:17:00:44:2b:36:e2:
                    92:ef:d4:df:fb:d7:cb:b8:25:30:be:14:84:42:54:
                    ce:f8:11:ac:2c:71:11:77:88:b0:46:76:7c:30:84:
                    21:82:e2:fe:42:ee:44:d6:06:75:27:ca:ae:7b:55:
                    8b:5a:f4:45:9b:ed:7c:f2:da:44:e7:a4:3a:ee:a6:
                    f8:fb:ac:7a:7f:8b:cd:2e:11:20:93:a0:af:ff:d7:
                    70:42:7e:32:d2:0b:9e:21:14:dc:9e:95:ba:64:8f:
                    54:da:37:86:7b:c4:70:c3:9c:78:c6:6b:46:e4:8c:
                    8f:06:73:28:18:48:75:8c:05:34:84:5b:03:2a:d4:
                    e4:1d:4b:75:c2:67:42:24:02:ca:37:5e:c3:92:2e:
                    7e:e6:5a:58:a9:86:7c:72:80:58:bd:54:fd:0b:e3:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E1:80:E4:97:F2:03:A1:DA:2D:EF:AD:5C:6C:47:C5:89:2D:2E:F6
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:94:8a:c7:77:26:2a:9f:ae:15:87:01:63:0b:ea:6f:92:
         28:72:8a:3c:3a:b1:23:83:df:5e:ca:32:6a:8b:8f:df:cb:9d:
         b7:62:ec:54:16:4c:b8:c9:64:1a:6e:fe:e7:02:28:43:b1:31:
         c2:79:fb:b7:d0:57:83:e0:28:3e:c3:e9:0b:e1:19:c6:79:65:
         cc:eb:a5:cc:4d:0b:c0:db:6a:97:91:e1:25:26:47:7c:18:93:
         50:af:3e:7d:81:c6:52:4f:66:33:a0:76:d7:02:5b:15:86:d5:
         31:9c:cc:7c:ca:ff:9f:57:df:50:20:d5:6d:2f:4d:b4:d3:da:
         63:b8:43:95:36:27:3f:2e:b2:37:06:68:34:fc:62:2b:71:07:
         30:bc:85:f0:51:96:fe:85:2c:b2:4d:79:ff:fc:ad:f5:b2:3d:
         4f:e8:27:19:e7:74:fc:2a:bd:1e:24:b3:87:9c:d0:5a:0a:e6:
         4d:ed:4d:21:a8:8f:06:a0:e7:28:e9:20:8d:24:3f:22:b6:3b:
         a7:fa:cc:45:35:d0:6d:fc:92:31:5f:8d:45:09:d4:45:e2:9d:
         90:ec:f4:7b:9b:01:97:d5:b1:0f:5b:d8:f3:48:eb:9c:8a:b4:
         55:0e:cf:30:c4:af:78:b2:fb:8f:ff:63:0e:0f:62:f2:31:1d:
         eb:ff:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:29:25 2025 by rpki-client