Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File:                     OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier:          +vHzb6k5Uy9iXWtCENzM7JhTvgVPf9YM19MtuguHdCY=
Subject key identifier:   B3:99:0B:40:F5:6B:97:80:E0:84:A0:D4:B7:31:53:6B:0D:13:D7:83
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer:       /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial:       01965CBA87A92B8591F9F83D7D97572FF754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number:          1514
Signing time:             Tue 22 Apr 2025 09:00:50 +0000
Manifest this update:     Tue 22 Apr 2025 09:00:50 +0000
Manifest next update:     Wed 23 Apr 2025 09:00:50 +0000
Files and hashes:         1: 41o_KDQT0UQR0-pEGq6ZFFoyGEY.roa (hash: mkyU9FNe+9kldpNCWIBTUaB1xImUCSbnmtoOt1trV1c=)
                          2: EfAbE-x7JWikVYwPPlQe_vVwMQg.roa (hash: 7jN/LfmMAw7O2spCMvO+jNeJ92v1x2ZZaE7vPy60zYA=)
                          3: JKilfZrkJhllQ19r3NByhgoqTDg.roa (hash: TyGhUzaYqQpVckTL9iipsY4ZDEots8Yo4CEp0B079m4=)
                          4: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: VjgkavHYGOV6nYcA3mXJG2Dbg9dC7JZzY1ctldIpcis=)
                          5: SHIdIo5QDACoW0nIIu5f5RtYZ_Y.roa (hash: Wl9sZv7NXkEqjqOeUmOOqdDlFgYyfsqwHN90exWSc1U=)
                          6: UxDrDzP2TNEJomhvUm5pptefxgA.roa (hash: /MVrUvLgefyKi9OhWDKlnZN9gJaxVmd7pmpH+GNvKAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:ba:87:a9:2b:85:91:f9:f8:3d:7d:97:57:2f:f7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
        Validity
            Not Before: Apr 22 09:00:50 2025 GMT
            Not After : Apr 23 09:00:50 2025 GMT
        Subject: CN=b3990b40f56b9780e084a0d4b731536b0d13d783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:00:ad:f4:1a:2d:80:2e:1d:b5:73:58:a2:
                    08:59:9d:eb:62:0c:b2:f9:88:85:12:94:aa:f7:26:
                    d4:0c:75:62:06:55:85:cd:a9:0c:94:6f:59:d9:29:
                    d0:08:db:e4:65:a6:90:6f:22:9c:27:08:8a:28:89:
                    80:3c:23:ad:72:17:30:09:d7:3d:98:3b:70:27:e9:
                    72:87:da:e3:ef:d7:db:c6:07:50:63:7c:01:32:dd:
                    1f:6a:a4:c6:25:f1:7c:1c:43:29:fa:0f:bc:e3:39:
                    e4:4f:1a:07:66:99:fc:d7:b9:c0:36:c7:60:81:5e:
                    57:53:44:05:ff:4f:f5:0d:9b:d5:93:69:e8:83:a4:
                    84:11:32:02:54:32:ae:71:cd:50:a3:b2:82:3b:4a:
                    96:85:87:d2:10:3d:dc:c7:81:c9:ca:6f:db:38:86:
                    6b:ef:18:e7:cd:50:2f:b9:a1:d4:ef:47:c8:f6:b1:
                    ff:9c:c6:b5:76:1a:74:39:d7:47:84:d6:76:40:5c:
                    c9:3f:71:81:53:f9:72:3d:4c:f7:84:19:53:c4:70:
                    f3:7f:32:28:8d:05:38:eb:47:4a:7a:46:45:00:83:
                    e2:eb:93:d7:bd:56:fc:d0:93:3e:49:d7:37:59:47:
                    37:70:b0:fe:c2:f7:8b:6b:fd:67:7a:21:8a:c1:a7:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:0B:40:F5:6B:97:80:E0:84:A0:D4:B7:31:53:6B:0D:13:D7:83
            X509v3 Authority Key Identifier:
                keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:46:55:2a:f8:76:95:08:56:64:b2:ea:43:9e:4e:4a:ad:
         5a:aa:bd:79:46:96:41:d0:fd:da:a7:46:1d:aa:ef:94:68:3a:
         0e:d1:89:f6:95:d8:be:2b:6c:c1:06:fa:1c:35:ae:92:4d:9f:
         e7:d6:bc:df:6d:ed:d9:c6:df:6b:2a:6c:96:55:a1:ac:fd:c4:
         c1:41:b1:7b:0a:a8:2b:e0:b1:2a:d7:43:ab:46:11:00:3f:47:
         8b:08:a2:65:fe:07:0d:97:83:53:bf:c1:54:10:dc:2b:86:d1:
         7c:a5:10:3f:9e:2d:95:01:fb:9c:e5:83:a7:50:22:39:4f:ca:
         b8:d1:a7:8b:4d:48:53:f8:31:93:3d:f2:91:76:3b:06:ab:9d:
         75:82:bb:54:79:02:3a:33:f9:77:43:9d:82:55:f6:60:5e:ae:
         e5:15:c6:1d:e8:c2:70:dc:43:46:f4:9f:ed:15:2c:9a:f1:e6:
         fe:07:af:3b:c6:23:59:c1:05:c8:c1:2e:80:04:86:9c:e5:e8:
         95:4e:37:50:32:f6:89:f4:57:52:f4:db:7c:a1:e2:32:89:fd:
         12:3e:90:2c:fd:4c:86:b5:da:43:9d:3c:8a:62:e1:58:64:b2:
         f7:2d:e4:7d:0e:e1:eb:a2:fa:83:db:d0:7e:0c:00:dc:08:2b:
         cf:78:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:53 2025 by rpki-client