Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File:                     OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier:          6nuKFXn4pdhr+E6zl0HCravWvjxnRxQwgjzCAkYb80w=
Subject key identifier:   93:B6:CF:DC:4D:B5:42:F7:CC:A0:75:B9:53:09:30:21:61:76:C2:86
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer:       /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial:       01963FC26C754F68BE663F3D8EA034C37D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number:          14F6
Signing time:             Wed 16 Apr 2025 18:00:28 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:28 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:28 +0000
Files and hashes:         1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
                          2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: myRdy+9HMrGBZ3LHUuGdzKT3cpe0VNMJrNHCIRu9K3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:6c:75:4f:68:be:66:3f:3d:8e:a0:34:c3:7d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
        Validity
            Not Before: Apr 16 18:00:28 2025 GMT
            Not After : Apr 17 18:00:28 2025 GMT
        Subject: CN=93b6cfdc4db542f7cca075b9530930216176c286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:06:80:09:b2:0f:b4:5a:5a:f5:cd:22:c0:
                    49:ac:28:99:58:e5:1e:6f:46:ae:20:2e:f3:2d:60:
                    f5:78:d7:b1:90:b7:fd:72:09:48:d1:dc:34:79:d9:
                    3e:e2:04:d1:d9:13:a3:3a:fd:5b:15:b3:d0:2c:1a:
                    45:b0:25:83:35:f1:4c:b0:99:22:bb:7d:1b:04:8c:
                    fd:69:e0:67:36:df:60:73:c3:e1:22:c5:34:c3:d7:
                    68:19:28:2f:92:d0:06:30:53:12:3d:13:5e:e2:98:
                    31:8f:08:94:24:0e:e2:29:72:81:69:64:08:c0:bf:
                    47:79:9e:3d:b7:67:ed:f5:56:71:9e:b7:78:6f:30:
                    58:04:28:d2:bb:4f:71:54:c4:a1:7a:ee:60:eb:57:
                    71:e6:85:4a:25:fd:91:67:de:8f:ac:f0:c7:1f:ea:
                    76:0c:0c:ab:60:63:04:08:05:f2:82:7d:c8:d7:21:
                    63:56:f7:28:91:93:b1:db:dd:26:7b:88:d0:fc:6a:
                    6f:22:ad:bc:87:1b:3f:96:80:aa:d3:e1:24:9e:4c:
                    27:f2:41:a6:a9:39:3c:29:90:10:d1:20:67:ca:e5:
                    b7:d3:28:f0:20:32:bf:b3:ea:ec:1e:2a:f2:52:ed:
                    05:46:00:f9:ba:b0:65:7c:fd:1a:bd:a2:67:b4:14:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B6:CF:DC:4D:B5:42:F7:CC:A0:75:B9:53:09:30:21:61:76:C2:86
            X509v3 Authority Key Identifier:
                keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:41:80:57:13:2a:f7:54:d8:d6:b6:f7:d8:77:9d:98:f7:
         32:f6:9d:1d:46:8f:8e:4f:19:06:63:10:d2:b0:b6:34:cd:72:
         f0:36:f8:c5:61:8a:f9:8a:6f:f4:07:7e:98:8d:3c:3d:1f:3b:
         85:2e:7b:0d:35:b7:f3:b5:30:38:ec:a4:b6:a9:c8:c8:da:37:
         d6:3f:7e:82:fe:09:b1:19:1c:70:49:12:16:3a:db:7d:59:0d:
         bd:72:f3:d0:28:a8:d5:c6:cd:0f:1b:d8:6f:02:f9:3b:7a:d2:
         7e:8e:e6:73:8c:bc:38:26:80:e8:5d:e0:04:ff:35:2f:59:f6:
         01:2e:fd:02:5b:52:c4:64:05:10:d9:5c:e0:96:5c:9f:b1:ab:
         a7:32:18:80:e9:e8:40:f8:06:b2:d0:87:57:06:91:01:76:8b:
         5a:49:71:99:3f:04:3f:89:79:2a:d7:42:80:1f:bc:cc:da:36:
         20:83:7e:88:1c:e0:68:cc:fc:dc:70:c5:80:ad:66:81:7d:aa:
         0f:73:32:45:2f:fe:0e:8a:0c:14:6b:c9:43:3c:28:dd:29:a4:
         50:7f:47:0f:29:30:50:28:61:c6:3e:e2:3c:e8:81:2f:a4:47:
         64:81:d6:37:6c:6f:ba:8b:4d:13:25:a5:7b:5a:de:de:ed:be:
         13:52:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:47 2025 by rpki-client