Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File:                     AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier:          8LsFqirg3QBeaY18i4llRL9gKgcCjPWzoTblcpIt4pE=
Subject key identifier:   E5:90:9F:58:5A:19:10:7D:04:40:E4:81:EA:53:B2:04:9A:79:1B:37
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer:       /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial:       01958EBC8DC7B6945163F30330F4B1F379ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number:          1498
Signing time:             Thu 13 Mar 2025 09:01:16 +0000
Manifest this update:     Thu 13 Mar 2025 09:01:16 +0000
Manifest next update:     Fri 14 Mar 2025 09:01:16 +0000
Files and hashes:         1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: jqUl9Hkg7qwWRgSFKuyznAqWDoEbqwrZHK1fJCmOltg=)
                          2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:bc:8d:c7:b6:94:51:63:f3:03:30:f4:b1:f3:79:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Validity
            Not Before: Mar 13 09:01:16 2025 GMT
            Not After : Mar 14 09:01:16 2025 GMT
        Subject: CN=e5909f585a19107d0440e481ea53b2049a791b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:72:dc:4e:14:08:d0:69:71:2c:eb:4d:2d:
                    9e:ff:b8:8f:a8:64:35:f8:ee:23:f4:c0:60:6e:b9:
                    ad:d5:26:0f:30:69:8b:dc:a4:2e:e3:a5:ab:55:ec:
                    e5:bd:62:dc:1d:c8:12:b4:1f:49:04:2f:a7:eb:5c:
                    6c:85:b2:34:29:bb:ad:5a:7f:ce:b5:fd:b9:38:86:
                    70:bd:cf:c9:55:bb:40:7d:f7:bb:39:17:90:23:2b:
                    86:ae:4c:65:ac:a9:d2:9f:01:4a:2d:50:74:5e:53:
                    be:06:76:c6:94:f2:cc:2d:3b:12:99:60:4b:fa:30:
                    43:cf:57:14:51:5f:a9:1e:5c:43:ef:4d:37:e8:ee:
                    bc:f0:56:56:3b:0b:71:b2:6d:07:1f:75:2d:97:da:
                    9c:fa:25:f1:03:33:b1:17:11:31:53:c2:8f:ba:80:
                    6b:f6:2f:75:2f:76:ce:81:12:36:da:36:ee:c8:a8:
                    c3:a2:bc:e4:34:b3:00:0d:65:c4:11:aa:c9:60:c7:
                    6c:07:3e:7e:8d:6e:19:12:3c:d4:04:f6:67:f9:55:
                    99:f2:06:88:3b:ae:3c:a8:fd:13:f7:2d:7e:f4:23:
                    13:69:3b:01:a7:71:75:be:08:40:36:a4:ac:5d:40:
                    7d:1c:a8:4a:5b:de:0d:f3:83:e4:1b:84:3a:ff:d7:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:90:9F:58:5A:19:10:7D:04:40:E4:81:EA:53:B2:04:9A:79:1B:37
            X509v3 Authority Key Identifier:
                keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:0c:47:00:2f:fd:85:42:c4:e6:06:ac:df:f3:2f:0a:fd:
         7e:2f:43:32:e8:e3:ff:36:fe:c6:60:b0:ef:74:6f:c3:8d:be:
         c4:93:70:bf:3a:99:51:c5:b9:a6:87:e2:93:ba:61:f4:ec:80:
         ca:ca:79:ed:a4:26:78:15:f9:16:8c:23:57:62:ff:01:16:c3:
         8d:4c:a4:13:0b:95:84:d7:dd:7f:80:39:18:a4:4c:82:61:d6:
         66:77:de:6b:d4:4b:57:46:30:e9:9e:ef:6b:96:86:c6:98:ce:
         21:2e:60:45:01:ed:b4:01:62:d0:d2:3e:04:a4:ae:9c:df:60:
         db:c9:8e:12:49:ea:1c:7f:28:60:01:e4:82:d2:12:f3:00:96:
         a1:1e:81:4d:eb:eb:59:e1:42:01:5c:4f:b1:1e:71:26:28:1c:
         71:30:f0:2c:b8:80:f4:1d:1b:09:fc:36:86:c6:9b:c3:44:ec:
         16:34:09:b9:0d:54:5f:45:44:17:5f:91:bc:d2:ed:a1:1d:52:
         40:4e:54:2d:3c:59:f5:ff:7d:5b:4e:a7:70:33:02:e4:80:8b:
         a6:ef:3d:68:77:f1:c6:3d:ba:cd:e7:63:4c:06:28:5f:8b:54:
         11:f1:e1:79:39:2e:36:27:89:68:10:54:6c:3c:d4:88:2e:af:
         ea:62:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:00 2025 by rpki-client