Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          rUOsoWcPlmq+tHmlhbvykCHgRHyzXFgWHWLKc08l7Sw=
Subject key identifier:   90:DB:5E:EF:C0:38:1F:8C:E0:B2:23:A1:F2:47:4E:33:18:F6:BD:58
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       01964FA33F473612B30A1E456A2D0250E55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          07D2
Signing time:             Sat 19 Apr 2025 20:00:20 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:20 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:20 +0000
Files and hashes:         1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
                          2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: O37vSMX+BLP9vGVqHBYu8Hi8VJmig/Fq0J8DduRqyyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:3f:47:36:12:b3:0a:1e:45:6a:2d:02:50:e5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: Apr 19 20:00:20 2025 GMT
            Not After : Apr 20 20:00:20 2025 GMT
        Subject: CN=90db5eefc0381f8ce0b223a1f2474e3318f6bd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:5a:82:98:1a:43:65:67:b7:77:22:6a:aa:
                    b6:21:f9:fb:df:9a:90:00:2d:04:86:6f:f6:38:ba:
                    30:70:c8:a0:9b:16:8b:d2:2c:12:8b:1d:27:18:16:
                    95:1c:e3:6e:77:df:57:9b:0d:f4:f0:54:ad:2a:b7:
                    7a:1e:39:db:03:36:00:30:42:94:33:c1:6c:cd:46:
                    1f:3e:54:9f:1e:3d:59:36:14:da:52:11:18:b0:41:
                    c0:34:96:c9:63:43:9d:dc:67:e8:82:4a:d5:52:31:
                    57:e8:fc:27:9b:ec:c5:c1:af:60:ea:03:0b:9f:94:
                    4c:15:dd:43:ec:65:4e:3e:48:f8:b9:f2:97:40:3f:
                    c1:00:40:d3:ae:9b:bf:8b:6b:ca:16:db:04:cc:b4:
                    d8:42:c2:61:b5:10:f5:97:7f:c7:4c:78:85:d1:8a:
                    53:14:2d:88:f8:f1:c3:0a:8c:88:8c:e6:33:93:96:
                    c8:88:e2:dd:5c:2a:bc:04:aa:ce:bf:7c:f2:49:95:
                    1e:c8:ec:15:db:8f:78:5b:57:da:c7:98:ff:a8:42:
                    d0:b6:55:81:e0:78:30:ce:f6:82:8d:39:cd:fc:01:
                    2b:34:23:e2:9a:42:8a:d7:f6:dc:3f:48:6a:36:2a:
                    2d:6a:01:8c:09:75:0a:5d:fc:35:d0:3a:a0:aa:d7:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:5E:EF:C0:38:1F:8C:E0:B2:23:A1:F2:47:4E:33:18:F6:BD:58
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ff:b1:ad:33:eb:8c:65:e9:73:cc:d9:e4:e4:72:6c:d5:ce:
         fd:bc:b0:49:0f:bd:3e:6f:d3:79:da:12:e2:2e:a5:63:8a:77:
         52:82:23:b4:a6:92:b8:a3:3e:d6:f2:e9:85:ef:ae:4b:e5:41:
         42:a2:b1:39:c7:37:21:6c:b5:cc:06:6f:d8:48:e7:7e:b8:77:
         7b:8a:88:e7:c7:be:72:d1:ee:97:c4:d6:2c:8b:b3:f9:d6:73:
         e8:23:0c:12:7e:c1:5f:7b:08:ba:ae:fc:a5:1d:c2:22:ae:a0:
         e3:76:f4:9e:fa:28:81:7a:aa:69:fa:0c:6f:6a:d7:29:c6:8c:
         e2:c1:e8:04:48:27:34:f1:88:3f:56:ff:3f:95:62:48:37:3c:
         d3:7e:6c:c3:b0:02:63:81:44:18:e4:64:ff:ff:5b:48:68:b5:
         77:eb:16:9a:a1:b4:d4:6d:60:b7:2f:a3:2a:ad:6e:bf:0f:2d:
         72:9b:d2:13:ea:0c:d9:d1:51:47:e9:0e:ac:0c:57:17:2c:01:
         54:ea:06:f8:3d:4e:98:aa:6b:5c:0c:66:c3:b0:18:0b:c1:b8:
         be:46:32:89:d7:bb:e7:07:86:41:d3:ef:23:f5:f0:c8:85:62:
         6c:a1:07:87:7b:5e:50:9b:4e:6f:6e:68:26:a4:45:c1:76:9d:
         03:d7:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:07 2025 by rpki-client