Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File:                     OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier:          jZWhVBR1w3UweQEKZWG61muFgqWupmEp9g+pQDhnn2E=
Subject key identifier:   55:76:2C:A9:FF:96:0A:D3:27:D2:C4:C7:2F:A9:8F:87:B8:66:9B:A2
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer:       /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial:       0197530FE51B2F837BE7242BDEA7AA2C73FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number:          0CDE
Signing time:             Mon 09 Jun 2025 05:00:39 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:39 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:39 +0000
Files and hashes:         1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: adCcDsHKcxHeZ33OqEDll8z/PLAau6Yv071JdA0NnYI=)
                          2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:0f:e5:1b:2f:83:7b:e7:24:2b:de:a7:aa:2c:73:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
        Validity
            Not Before: Jun  9 05:00:39 2025 GMT
            Not After : Jun 10 05:00:39 2025 GMT
        Subject: CN=55762ca9ff960ad327d2c4c72fa98f87b8669ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:9f:8d:f7:4b:c3:5e:61:c0:a4:8d:85:2f:
                    cf:e7:31:6d:59:7f:93:46:f0:2c:7a:a3:43:9f:b7:
                    55:dc:6f:0c:08:7c:bc:46:eb:ab:8d:ab:7b:f2:4f:
                    2d:8e:b0:07:b1:f4:eb:bb:26:16:4c:71:13:f1:43:
                    cc:a5:4b:be:b7:91:1d:58:5c:82:3d:09:80:c0:f2:
                    25:e8:db:c5:e8:1a:d4:93:ce:02:85:8e:a5:56:d2:
                    7f:e6:ac:8c:45:37:30:72:0e:fb:ab:ad:4c:24:9c:
                    3b:a5:b4:e6:87:77:2e:0b:92:1d:4a:78:9a:7a:05:
                    a7:5c:4a:fb:05:50:ec:5e:82:a6:c8:b1:c4:2e:39:
                    da:cb:cd:ec:90:6e:b5:cd:ed:c7:18:52:6d:3d:a7:
                    e1:bf:6e:52:72:e6:56:57:23:06:ef:53:40:56:cb:
                    95:5e:70:a2:5f:eb:9e:10:c0:95:52:57:94:49:7d:
                    30:c5:b4:10:a5:16:de:90:14:a2:40:d2:cb:90:fc:
                    4c:e2:85:e2:0b:f3:1b:71:e4:78:14:16:20:d1:ce:
                    7f:cb:33:03:19:12:4a:5c:e4:b8:f9:81:89:00:13:
                    93:0c:33:8b:fa:eb:de:82:23:45:70:3d:1b:46:c4:
                    68:93:3d:5f:f5:d0:79:37:b6:c2:f4:f4:ec:40:4f:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:2C:A9:FF:96:0A:D3:27:D2:C4:C7:2F:A9:8F:87:B8:66:9B:A2
            X509v3 Authority Key Identifier:
                keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:03:9f:24:3d:7c:3e:fb:7b:e6:43:c1:1a:66:38:d0:87:
         c5:73:b1:df:d0:44:aa:fc:7a:b1:18:ff:2c:a5:52:aa:06:8d:
         57:62:3f:70:ce:bb:00:29:55:5b:97:22:17:9a:ce:b7:71:eb:
         47:57:08:00:18:f2:f8:6e:8e:dd:6d:e5:a9:7f:97:56:82:4a:
         45:36:5c:2d:9d:21:0e:44:89:cb:ef:f9:eb:c9:42:f5:ad:59:
         77:ee:56:f6:85:db:5d:55:ba:f6:2c:18:3c:f3:6a:01:72:68:
         0a:84:3b:c7:1a:67:3c:8b:9f:b5:19:1f:7d:61:3c:30:1e:a1:
         26:f2:c9:64:2d:21:22:ff:cf:46:f8:1e:61:30:e0:4f:3d:ba:
         7e:7f:ea:81:05:55:74:a3:00:ea:ee:cf:d3:de:80:c9:50:91:
         89:b9:0f:59:63:0d:77:1f:c2:4c:a6:81:94:20:f6:5d:f1:4b:
         1e:cf:82:f9:39:f8:e5:1a:f4:68:4f:2b:aa:ee:a2:1e:66:93:
         f4:18:ea:e0:cf:a4:f1:3b:c7:ab:0a:41:17:fc:a6:f3:54:7d:
         f0:9f:4d:14:3b:62:a2:8b:94:bc:2d:23:05:1e:b5:76:3b:6c:
         a0:9e:21:54:7c:44:17:c6:42:4f:24:56:3e:82:0a:eb:6e:ee:
         58:3b:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:29:39 2025 by rpki-client