Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File:                     OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier:          wRiliuxnIzBe/CnhDK8VN6eTNuqFQ0cWKc0fp/A8FhE=
Subject key identifier:   46:5D:C6:22:40:9E:66:D0:1F:63:93:58:75:21:E4:F2:EF:76:14:F3
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer:       /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial:       0196387731E60C9F8C306E769F32BC1E588A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number:          14F1
Signing time:             Tue 15 Apr 2025 08:00:57 +0000
Manifest this update:     Tue 15 Apr 2025 08:00:57 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:57 +0000
Files and hashes:         1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
                          2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: h5TQEG28M8pieTwGPLPD3Iec1+fcY/S8arpZLZiGfVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:77:31:e6:0c:9f:8c:30:6e:76:9f:32:bc:1e:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
        Validity
            Not Before: Apr 15 08:00:57 2025 GMT
            Not After : Apr 16 08:00:57 2025 GMT
        Subject: CN=465dc622409e66d01f6393587521e4f2ef7614f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:1b:30:3b:62:fe:1a:8b:ea:e2:3f:ae:63:
                    04:1e:07:e7:b5:bd:5f:ab:68:01:7d:a0:be:68:5d:
                    39:86:2b:31:37:7b:93:ad:c3:fb:ad:09:6e:a8:16:
                    b8:51:f4:66:84:f1:b1:51:5d:37:49:bf:c1:6d:8e:
                    f2:66:0b:e0:e7:a1:ea:6b:6e:0f:5c:05:1e:41:ec:
                    fd:89:7a:d1:99:7e:93:12:ee:77:1c:42:a2:9f:b6:
                    10:91:0a:4b:59:3e:9d:2a:d8:0c:d3:8e:f4:45:8c:
                    49:b4:13:fb:1c:f2:08:28:e7:21:9f:58:11:37:e4:
                    b0:65:02:2a:51:4e:2d:30:9a:ce:6e:58:9a:23:14:
                    b8:3c:cd:89:6c:6c:0c:5d:5d:09:f8:76:6c:12:69:
                    b8:4b:b8:aa:53:3b:4d:a9:c2:5e:1a:24:7b:f4:d4:
                    27:13:28:b9:87:c3:93:96:de:07:1d:69:39:07:8d:
                    3f:39:86:2e:20:f0:6a:82:77:11:b1:0a:e7:83:35:
                    63:3d:d0:42:29:ac:81:7d:29:07:2f:2f:af:f0:91:
                    0b:f6:85:d7:1e:89:62:da:4c:07:d4:47:f7:65:63:
                    7b:15:5a:3d:d7:47:7f:ab:b9:a0:84:ab:f3:87:e4:
                    27:99:21:fc:fb:50:0a:ac:08:22:c3:1c:1d:a6:68:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5D:C6:22:40:9E:66:D0:1F:63:93:58:75:21:E4:F2:EF:76:14:F3
            X509v3 Authority Key Identifier:
                keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:30:c8:08:9e:b2:86:22:c9:a8:46:22:98:65:81:2d:99:
         25:05:60:ff:da:8d:7d:18:56:a3:70:61:18:da:4f:ff:38:2b:
         d2:53:7d:42:f7:d4:16:ad:d2:a6:c9:3c:08:38:a1:0a:a7:ac:
         ed:1c:b7:03:d9:0e:f5:a4:60:f3:43:0d:79:bd:81:ad:49:8a:
         f4:e6:45:63:33:4a:0c:65:32:2d:03:7e:95:0b:69:a1:0d:1b:
         75:f4:a6:ef:e8:e0:c0:88:cb:8e:ac:d0:d5:44:cd:88:7f:ae:
         20:17:54:a8:e7:d7:92:0a:81:ee:d2:ac:10:f3:ab:24:ed:c2:
         08:dd:04:9a:40:0b:f2:cf:40:5f:71:4f:6b:99:b6:50:da:4f:
         7d:bc:f8:9a:95:c5:6b:99:93:9c:9b:b5:f8:45:8b:b8:b1:7b:
         0a:6d:c5:0c:32:05:7d:73:1c:32:42:35:3a:48:f4:60:b8:08:
         c8:6e:e2:ba:76:40:2b:7a:72:c1:18:9e:39:4d:1c:a0:6e:48:
         b3:bf:81:cc:f2:fa:dc:b2:78:74:a9:86:45:93:af:3e:fe:b3:
         3b:19:8d:57:02:cd:f6:ac:9b:e8:d1:3a:d5:d3:4e:8a:52:b9:
         db:ff:5b:45:eb:ba:59:44:49:1f:f3:c0:29:53:37:f3:eb:e4:
         02:e5:08:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4dzHmDJ+MMG52nzK8HliKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk
NTBmZDMwHhcNMjUwNDE1MDgwMDU3WhcNMjUwNDE2MDgwMDU3WjAzMTEwLwYDVQQD
Eyg0NjVkYzYyMjQwOWU2NmQwMWY2MzkzNTg3NTIxZTRmMmVmNzYxNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSobMDti/hqL6uI/rmMEHgfntb1f
q2gBfaC+aF05hisxN3uTrcP7rQluqBa4UfRmhPGxUV03Sb/BbY7yZgvg56Hqa24P
XAUeQez9iXrRmX6TEu53HEKin7YQkQpLWT6dKtgM0470RYxJtBP7HPIIKOchn1gR
N+SwZQIqUU4tMJrObliaIxS4PM2JbGwMXV0J+HZsEmm4S7iqUztNqcJeGiR79NQn
Eyi5h8OTlt4HHWk5B40/OYYuIPBqgncRsQrngzVjPdBCKayBfSkHLy+v8JEL9oXX
Holi2kwH1Ef3ZWN7FVo910d/q7mghKvzh+QnmSH8+1AKrAgiwxwdpmgNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZdxiJAnmbQH2OTWHUh5PLvdhTzMB8GA1UdIwQY
MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt
NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl
LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw8wyAie
soYiyahGIphlgS2ZJQVg/9qNfRhWo3BhGNpP/zgr0lN9QvfUFq3Spsk8CDihCqes
7Ry3A9kO9aRg80MNeb2BrUmK9OZFYzNKDGUyLQN+lQtpoQ0bdfSm7+jgwIjLjqzQ
1UTNiH+uIBdUqOfXkgqB7tKsEPOrJO3CCN0EmkAL8s9AX3FPa5m2UNpPfbz4mpXF
a5mTnJu1+EWLuLF7Cm3FDDIFfXMcMkI1Okj0YLgIyG7iunZAK3pywRieOU0coG5I
s7+BzPL63LJ4dKmGRZOvPv6zOxmNVwLN9qyb6NE61dNOilK52/9bReu6WURJH/PA
KVM38+vkAuUIDg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:25:09 2025 by rpki-client