Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          xsz9F7Xce6/sFHG370+h8T8I2hy7jJxqXDBZEnUaMEs=
Subject key identifier:   B6:FF:4A:E2:CB:08:D8:68:6B:63:38:49:7B:5F:69:F0:59:41:97:F6
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       01974E8E0198CCD9B76091A0BDD53658153D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          0186
Signing time:             Sun 08 Jun 2025 08:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:18 +0000
Files and hashes:         1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
                          2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
                          3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: gyWdZRZ9uI54v92vW0s9dFtVHZYfWrC0nMKU/qeL4XE=)
                          5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:01:98:cc:d9:b7:60:91:a0:bd:d5:36:58:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jun  8 08:00:18 2025 GMT
            Not After : Jun  9 08:00:18 2025 GMT
        Subject: CN=b6ff4ae2cb08d8686b6338497b5f69f0594197f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:0d:44:91:c6:71:77:05:72:65:62:cc:4d:
                    b3:37:4c:aa:d2:d8:6d:2a:18:29:fc:25:c5:ea:0f:
                    42:65:b9:5e:f2:2d:3f:84:15:16:f4:08:a6:0b:87:
                    f0:99:9f:29:8f:ff:b4:82:21:e2:a8:0c:dc:a8:44:
                    ba:69:5f:88:0c:21:7c:6b:17:3c:b3:15:aa:8f:69:
                    ed:83:59:00:81:84:74:8e:af:18:c5:51:c5:84:bf:
                    8e:6e:61:95:25:75:c4:ee:41:f9:a3:42:4d:b1:19:
                    7e:02:43:06:8b:d0:9e:45:91:8e:f9:f4:45:b7:12:
                    7b:9b:df:7c:0c:35:38:9e:92:e2:f5:aa:63:c3:a9:
                    38:60:e9:3a:3e:7b:f9:70:8b:48:39:ad:79:0a:a2:
                    01:59:b3:74:74:99:97:7b:ee:c4:94:3a:90:e9:fe:
                    71:90:26:bf:93:29:b7:7f:af:94:10:67:11:b2:65:
                    fb:5b:49:2a:e9:7c:83:70:8d:37:1d:1d:46:8e:d1:
                    f8:a8:39:7c:bd:35:1b:2d:6d:63:ed:30:df:77:b7:
                    99:4b:6d:66:9b:b2:9b:e3:f0:f7:1b:7d:e8:c6:b8:
                    55:6a:e8:67:03:85:27:07:2c:8a:e0:11:ac:b4:40:
                    4e:3e:01:ce:8f:80:2d:45:bc:c6:95:b2:37:af:a9:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:4A:E2:CB:08:D8:68:6B:63:38:49:7B:5F:69:F0:59:41:97:F6
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:21:88:9d:87:06:ba:54:37:f3:10:94:0e:70:11:cc:f3:
         48:de:9d:b8:54:a7:d1:19:91:52:37:a4:33:07:2a:f6:22:da:
         0b:be:fa:66:56:5d:50:cb:3b:42:96:3f:ab:40:b0:dd:52:17:
         ce:5b:24:93:a1:5c:ed:2b:0a:1f:90:73:0b:6e:8b:0b:bb:f8:
         7f:29:2e:77:21:ae:75:f6:d4:ac:4a:34:59:98:c8:a7:2c:6f:
         c7:18:b7:24:35:d5:4a:10:2c:3a:b4:32:20:51:20:92:37:df:
         7f:54:11:5b:d0:33:06:ef:b6:d0:50:4c:a2:2c:ec:4e:4f:f7:
         45:8c:77:56:f9:51:58:7f:8a:c7:d1:27:59:b1:63:55:d1:c0:
         6a:4b:2a:21:41:e3:65:da:46:cc:19:96:a0:6c:df:c3:8b:2a:
         63:ad:ed:a0:20:e5:9c:22:9d:45:7e:36:f7:3c:a8:07:e9:7d:
         91:7c:ec:a1:2d:f8:0a:5b:8e:20:e5:f2:ba:06:4c:ae:41:ed:
         cb:d6:b7:b9:d0:2d:a3:b9:8b:6d:c5:52:d5:37:ed:36:69:bc:
         5d:21:c7:b4:ca:ec:01:14:8c:e6:6e:b7:3e:8c:4a:4c:3e:3d:
         61:fc:bf:b6:62:8c:5d:72:f5:4e:27:3e:6c:12:66:e0:e1:ff:
         cc:58:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:38:31 2025 by rpki-client