Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File:                     o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier:          pF5vSPvxt1Pb3Fo9ArGlRl/gIrCsOQUtQAmtb5Ie7Cs=
Subject key identifier:   19:92:ED:DD:C1:96:5F:DD:DD:2D:6F:11:F6:33:79:34:50:79:F2:34
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer:       /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial:       01964CA253BA1E16522885BE8995FAA93CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number:          0B19
Signing time:             Sat 19 Apr 2025 06:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:28 +0000
Files and hashes:         1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
                          2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
                          3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
                          4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: HWba/P9LdrvUAMc7dPHGvEvAYJJ2yCSYtbxyepRUkyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:53:ba:1e:16:52:28:85:be:89:95:fa:a9:3c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
        Validity
            Not Before: Apr 19 06:00:28 2025 GMT
            Not After : Apr 20 06:00:28 2025 GMT
        Subject: CN=1992edddc1965fdddd2d6f11f63379345079f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:b1:8a:ce:32:8a:ae:ca:9d:3d:7f:a2:6f:
                    e5:ac:f5:fc:7f:60:a8:b8:2d:4e:4b:a6:74:6d:5c:
                    38:00:23:94:9a:e4:ed:a7:e5:cf:ce:14:69:e4:78:
                    1c:14:ac:ed:e8:20:92:48:cb:66:2a:b4:a5:38:ae:
                    5a:1d:f2:e6:79:e5:27:7f:c8:b6:b5:cf:21:5a:98:
                    00:da:e8:20:9e:57:8c:f4:19:59:66:cc:30:97:72:
                    00:18:b4:ec:e6:b5:b6:36:a3:c0:69:24:c9:71:55:
                    04:bf:56:da:8d:6a:ff:f4:f5:16:80:9f:46:e2:90:
                    44:19:bb:cd:9c:41:8d:92:88:44:72:6e:09:9c:5b:
                    3b:a2:3b:42:5f:45:8d:88:fd:17:78:95:ca:84:28:
                    ab:44:11:aa:cd:69:7b:53:6c:b1:ed:bd:50:93:ee:
                    5e:dc:8d:b5:ec:05:cf:bb:b7:30:38:e4:f8:2e:20:
                    77:45:d0:21:ea:95:a3:ef:ba:7c:98:3e:d7:a4:cf:
                    2b:65:1c:b9:03:a1:fa:37:c0:b1:c0:99:8b:5c:06:
                    2a:8b:2b:8c:43:51:af:57:01:e5:20:33:10:3e:6f:
                    15:9b:24:42:0b:68:ad:ac:de:4a:2a:30:d5:1f:ba:
                    3a:7e:a6:eb:27:9c:ae:7d:a1:07:4c:00:40:f3:c9:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:92:ED:DD:C1:96:5F:DD:DD:2D:6F:11:F6:33:79:34:50:79:F2:34
            X509v3 Authority Key Identifier:
                keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:7c:b2:10:4d:16:5f:1c:77:07:86:90:14:07:1d:ed:ef:
         31:a9:d6:1a:74:91:9f:5e:31:46:97:40:b9:14:b2:6f:f1:80:
         c4:14:f6:bf:a5:87:bd:bf:49:b6:9c:d8:42:c0:f3:52:be:a6:
         d9:55:50:43:03:48:da:63:73:69:06:a4:1b:c9:c4:5f:7a:d4:
         66:f1:94:67:c5:3e:a9:26:2e:32:a6:bd:71:47:63:8e:87:fd:
         6d:5a:a5:d0:e7:03:a1:a6:fd:85:81:d0:8f:f1:63:5b:7e:e7:
         a8:04:01:81:c0:5c:25:86:b7:8e:7e:28:f9:d5:40:dc:a4:7a:
         77:dd:f1:c1:67:6c:38:9e:4d:7d:dd:fc:c7:4a:b9:89:1d:b6:
         97:37:90:0e:77:2b:88:72:5e:5d:4e:86:b5:03:40:c4:3d:23:
         6f:1e:d2:4f:fe:a2:69:39:dd:4b:a9:21:2b:98:f7:f6:50:56:
         f2:a2:99:0e:a6:bd:b9:5c:d9:c8:db:fa:87:34:5f:7f:c0:b0:
         23:de:85:60:99:1f:44:70:2f:f8:41:93:49:5a:f7:ea:4e:e5:
         f1:bd:be:e0:af:49:13:65:54:aa:64:49:1d:ee:41:ed:08:75:
         99:d0:b3:64:8d:64:9e:bb:09:8d:8d:97:53:e7:0f:2a:d0:a2:
         4a:b3:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:14 2025 by rpki-client