Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File:                     OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier:          YrRTFSEcrd2T9CNmZlT/86Bfnl3mfdU8RyY+aifLfhY=
Subject key identifier:   D7:32:54:8B:52:A2:A9:BB:30:F8:7A:86:69:6A:FC:A2:0D:81:81:45
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer:       /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial:       019629E011479FEA62CBA5F6355C8CBF526B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number:          14E9
Signing time:             Sat 12 Apr 2025 12:01:12 +0000
Manifest this update:     Sat 12 Apr 2025 12:01:12 +0000
Manifest next update:     Sun 13 Apr 2025 12:01:12 +0000
Files and hashes:         1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
                          2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: pPC2D6W6Sjm6XowB+JhDKsJDZ0PuSKpV7U+bvw1c32U=)
                          3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
                          4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:e0:11:47:9f:ea:62:cb:a5:f6:35:5c:8c:bf:52:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
        Validity
            Not Before: Apr 12 12:01:12 2025 GMT
            Not After : Apr 13 12:01:12 2025 GMT
        Subject: CN=d732548b52a2a9bb30f87a86696afca20d818145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:16:29:ba:99:54:54:54:cd:ad:92:82:a2:
                    ea:82:9c:b4:4f:3e:eb:86:ec:96:15:b4:c9:4d:84:
                    f8:64:27:2d:75:6a:68:f1:a8:29:42:4e:e7:af:cf:
                    fd:50:81:80:20:de:02:9a:94:28:2f:65:e8:9c:03:
                    66:09:22:d8:59:a5:c2:71:da:fe:a9:de:bf:39:3e:
                    7a:64:5d:37:37:f9:2b:01:d2:48:1b:62:98:e8:97:
                    2e:7f:c3:c1:5f:bc:66:23:f7:b0:a1:a1:1e:ee:f7:
                    59:a0:46:1a:4d:3a:2f:c0:15:87:04:f3:95:cd:28:
                    53:d7:d7:ae:c3:5e:5d:a9:4b:7d:d6:8f:af:52:45:
                    df:4e:8e:37:fb:cf:d3:f1:d8:58:5e:39:e6:72:8c:
                    ca:f7:df:13:7a:07:f5:14:14:53:98:83:f2:4f:6e:
                    86:fc:2a:68:f0:8d:04:75:0b:74:b1:de:d0:b6:75:
                    5f:75:6d:4d:ac:4a:8c:ce:3c:57:84:0b:e9:98:d2:
                    0c:ff:fe:a1:14:ef:63:8a:c8:b8:62:89:71:88:3e:
                    09:44:c8:b3:b8:9d:e6:0c:06:3a:b9:3d:80:e2:84:
                    6d:7d:18:94:6e:f5:46:24:60:82:40:a5:24:d3:67:
                    d0:3f:55:10:a7:3f:38:ad:14:e7:70:96:1f:a9:9c:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:54:8B:52:A2:A9:BB:30:F8:7A:86:69:6A:FC:A2:0D:81:81:45
            X509v3 Authority Key Identifier:
                keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:82:85:c9:ff:71:33:da:ca:8d:84:35:0f:36:99:86:57:
         e1:54:4a:92:47:66:0b:5d:98:b6:90:8e:3f:70:5c:93:1e:53:
         47:22:02:31:81:92:06:f8:ad:96:b6:94:b8:0b:96:be:0c:ee:
         fa:5d:0f:e3:10:96:28:1c:55:03:b3:3c:7e:ec:91:4e:ca:df:
         e1:03:34:b2:fa:56:c9:1c:0a:6e:55:f4:32:46:ef:84:19:79:
         5f:c0:1c:31:88:2d:83:03:6b:e8:35:5a:99:bc:f5:42:ff:bb:
         cc:f3:dd:4a:74:17:48:33:cc:15:05:d3:58:cd:b4:72:3b:50:
         55:84:7e:ab:4a:1f:3a:12:e7:90:70:f2:05:b0:ee:76:8a:74:
         f8:68:eb:52:02:1e:70:fc:13:0d:de:11:c7:6d:3d:07:dd:dd:
         6f:51:a0:fa:a8:3c:61:4b:b4:70:5a:e2:4f:a0:7b:5b:c8:7b:
         44:44:4e:db:0f:0d:25:96:e2:28:99:72:cb:48:f5:05:18:e7:
         f6:0a:32:5d:e7:79:c7:5c:eb:f2:5f:7d:c2:07:44:42:4f:4b:
         97:8b:7f:dc:d4:36:8c:6e:27:ec:f8:f1:ea:90:8f:6b:fe:e3:
         df:7c:af:4f:88:1c:e6:b3:e7:09:ee:f7:be:e8:71:ff:34:03:
         80:44:cb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYp4BFHn+piy6X2NVyMv1JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0
OGEzODAwHhcNMjUwNDEyMTIwMTEyWhcNMjUwNDEzMTIwMTEyWjAzMTEwLwYDVQQD
EyhkNzMyNTQ4YjUyYTJhOWJiMzBmODdhODY2OTZhZmNhMjBkODE4MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztkWKbqZVFRUza2SgqLqgpy0Tz7r
huyWFbTJTYT4ZCctdWpo8agpQk7nr8/9UIGAIN4CmpQoL2XonANmCSLYWaXCcdr+
qd6/OT56ZF03N/krAdJIG2KY6Jcuf8PBX7xmI/ewoaEe7vdZoEYaTTovwBWHBPOV
zShT19euw15dqUt91o+vUkXfTo43+8/T8dhYXjnmcozK998Tegf1FBRTmIPyT26G
/Cpo8I0EdQt0sd7QtnVfdW1NrEqMzjxXhAvpmNIM//6hFO9jisi4YolxiD4JRMiz
uJ3mDAY6uT2A4oRtfRiUbvVGJGCCQKUk02fQP1UQpz84rRTncJYfqZxEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcyVItSoqm7MPh6hmlq/KINgYFFMB8GA1UdIwQY
MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt
MTZiMzZkMDgwMWU5LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5
LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSyChcn/
cTPayo2ENQ82mYZX4VRKkkdmC12YtpCOP3Bckx5TRyICMYGSBvitlraUuAuWvgzu
+l0P4xCWKBxVA7M8fuyRTsrf4QM0svpWyRwKblX0MkbvhBl5X8AcMYgtgwNr6DVa
mbz1Qv+7zPPdSnQXSDPMFQXTWM20cjtQVYR+q0ofOhLnkHDyBbDudop0+GjrUgIe
cPwTDd4Rx209B93db1Gg+qg8YUu0cFriT6B7W8h7RERO2w8NJZbiKJlyy0j1BRjn
9goyXed5x1zr8l99wgdEQk9Ll4t/3NQ2jG4n7Pjx6pCPa/7j33yvT4gc5rPnCe73
vuhx/zQDgETLaw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:29:21 2025 by rpki-client