Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          K8HHRRd9NPJu+mPPhwzFGDgmTbUFKzbju/Bbm1eBQFU=
Subject key identifier:   B4:26:9C:AD:52:C8:B5:F9:40:BC:FB:60:5C:AA:04:9F:A8:EB:EC:52
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       019608D47896EBFAAED37BB306E22C5B7223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          0F94
Signing time:             Sun 06 Apr 2025 02:01:04 +0000
Manifest this update:     Sun 06 Apr 2025 02:01:04 +0000
Manifest next update:     Mon 07 Apr 2025 02:01:04 +0000
Files and hashes:         1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
                          2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: kgeNws3w18gQRJOXHG23CuxLvVcIjVuxnwvChx5s0Kc=)
                          4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
                          5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
                          6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:08:d4:78:96:eb:fa:ae:d3:7b:b3:06:e2:2c:5b:72:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Apr  6 02:01:04 2025 GMT
            Not After : Apr  7 02:01:04 2025 GMT
        Subject: CN=b4269cad52c8b5f940bcfb605caa049fa8ebec52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:ad:f4:53:b4:c0:a4:43:5e:68:71:65:3e:
                    78:07:3d:e9:23:5f:fa:d9:cf:34:48:e1:54:29:9c:
                    87:e8:97:1a:97:56:68:45:5b:f3:21:2f:ee:03:26:
                    99:e7:84:41:56:bd:67:01:44:99:87:b0:0e:f4:a3:
                    bd:8f:57:3d:2f:dc:af:12:04:e9:21:8a:e2:1e:e5:
                    66:ff:90:d4:09:35:2f:18:d4:ce:5f:79:b1:1a:a3:
                    53:80:50:1a:f6:72:03:51:97:5b:2d:66:06:aa:64:
                    50:bc:7d:57:17:71:7a:9c:bb:15:95:46:64:a3:d3:
                    c1:ae:a9:35:6e:7d:32:42:8a:a8:a7:c4:5d:de:0d:
                    97:11:cd:ab:96:39:d3:22:23:99:8c:ce:eb:00:48:
                    5b:8a:ab:1f:13:d2:fc:bd:86:07:67:3e:fb:ac:6d:
                    a7:26:06:0f:bc:97:df:ea:5a:78:2e:30:8d:9f:56:
                    2b:da:a5:75:01:28:5e:32:63:6f:b8:4c:04:5f:51:
                    87:f5:10:1b:f1:6c:8e:9e:4c:db:b1:eb:55:38:f1:
                    de:91:79:6b:57:e5:c2:54:d9:5d:91:3e:d8:33:68:
                    d9:49:1d:19:a8:63:33:17:c7:1e:7f:65:86:96:f0:
                    99:24:83:de:81:b4:0a:2c:5e:2a:95:92:27:de:cd:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:9C:AD:52:C8:B5:F9:40:BC:FB:60:5C:AA:04:9F:A8:EB:EC:52
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:fe:8a:a6:8d:15:ec:48:ce:15:71:a0:ae:e0:79:37:c7:
         8f:ea:64:79:00:10:8b:dd:9e:be:2c:8c:ee:ba:7e:d9:e1:19:
         b4:c2:b8:4d:b0:9e:6d:ec:d7:d6:1f:ab:a7:ca:cf:28:c7:00:
         44:1e:c3:21:5f:f9:d1:40:e3:23:26:ff:25:b2:83:35:f4:a1:
         de:ba:d9:14:cc:19:64:77:91:3e:5a:8e:61:6b:ab:ce:35:2e:
         61:c4:25:e6:0a:dc:19:e4:41:c5:48:1d:51:2f:ee:e8:0d:76:
         1a:68:81:67:25:06:e1:73:72:79:10:b4:f7:fa:58:71:5a:05:
         41:8a:b5:b6:23:aa:fb:0d:cc:d2:29:2b:85:b1:40:02:f8:af:
         d6:f0:c5:33:65:96:18:ba:9a:aa:38:5d:a0:71:23:54:db:65:
         65:d2:03:75:91:98:d2:f8:f1:25:7b:3f:1d:7f:81:d2:19:68:
         60:3b:8f:43:d3:7e:03:43:49:56:4f:61:31:84:96:1d:7f:00:
         74:ea:86:3a:5d:37:d1:b0:86:22:fc:38:8c:2a:ad:5a:22:8c:
         4a:6b:a9:ef:ed:35:66:7c:db:64:38:55:df:c4:12:dd:38:69:
         ec:48:69:f3:48:57:dc:b1:88:05:85:43:c5:cf:7d:a8:7d:13:
         96:2e:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:07 2025 by rpki-client