Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          aNA55wKlcatcBEhxPX7lpBHabU4/MBVq7FuszqzX54U=
Subject key identifier:   83:39:6E:B7:55:FE:4A:21:CE:6A:FD:2D:74:76:2D:79:FB:85:8E:0D
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       01964E90E6660227B0DB16A9CD4D252501A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          066A
Signing time:             Sat 19 Apr 2025 15:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 15:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 15:00:41 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: 0nM9mBt2vGS6APpnu79nqKzGiyvU3306isr2tUBUX3Q=)
                          2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
                          3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
                          4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:90:e6:66:02:27:b0:db:16:a9:cd:4d:25:25:01:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Apr 19 15:00:41 2025 GMT
            Not After : Apr 20 15:00:41 2025 GMT
        Subject: CN=83396eb755fe4a21ce6afd2d74762d79fb858e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:d3:83:33:92:9a:7e:e2:d7:aa:da:85:ec:
                    41:06:5e:b3:f9:86:ba:e2:f9:1a:48:a2:db:93:81:
                    83:bf:ec:e5:ed:63:e4:6b:7c:a7:67:69:b2:a6:90:
                    cb:69:d3:4a:50:ec:5f:08:3e:ba:ea:f4:97:17:90:
                    70:70:2d:05:3a:56:4b:7b:30:e1:ec:9a:1c:52:31:
                    7b:5e:14:eb:b7:cf:6a:2a:0a:6a:01:c3:60:57:06:
                    ec:a2:a6:0b:61:2c:2e:98:16:fd:60:83:81:e3:4e:
                    9b:77:6f:96:58:44:8f:5c:48:c9:7d:ca:29:79:4f:
                    00:13:dc:80:38:ef:f4:4a:9e:28:33:87:91:1d:3f:
                    8a:a5:ac:b2:73:7d:df:34:9b:b2:11:51:49:c6:1d:
                    d6:88:30:a0:18:8c:7a:8b:20:88:6a:8d:68:8e:1c:
                    93:5a:21:e3:0d:c3:c9:1f:4a:e1:ab:5a:d3:ac:c4:
                    5c:af:74:3b:4b:62:1d:7c:42:ff:d4:3d:52:3d:59:
                    6d:7e:d8:9e:0f:40:0f:6d:a2:df:36:41:a0:f1:88:
                    6b:aa:0f:a3:6e:39:9a:97:6e:cc:ac:01:09:6e:ff:
                    bc:ce:13:6a:6b:13:ef:12:ea:01:35:5f:06:c4:1a:
                    cc:71:b1:db:e6:fb:b4:6b:43:d2:c9:01:7c:82:69:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:39:6E:B7:55:FE:4A:21:CE:6A:FD:2D:74:76:2D:79:FB:85:8E:0D
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:61:23:b0:d2:dd:87:8b:77:19:d3:fa:30:d8:af:a0:68:3f:
         b0:7d:0c:d7:38:30:64:0c:2f:1a:8b:b4:bb:99:c7:6d:10:78:
         20:ca:52:9d:7a:9d:65:b5:8e:07:27:2c:ae:e7:98:67:11:25:
         4b:1e:3e:87:05:6f:11:e9:12:6f:53:47:0a:0a:a0:29:e2:c6:
         7c:b1:78:8e:bd:07:32:34:f5:72:1e:0f:bf:fe:3e:82:f0:07:
         19:bf:13:a3:74:01:78:17:f4:52:87:4e:be:ba:79:0c:d4:be:
         a8:c3:92:3e:e0:38:16:2f:ae:f2:4a:58:f2:63:3c:99:27:91:
         1c:c6:d6:0c:05:67:0a:e8:4e:65:6d:21:8e:34:01:eb:32:24:
         a4:2f:d4:86:1d:dc:19:31:a6:57:b5:d2:a1:27:b8:48:e6:a5:
         44:02:52:0f:3d:13:89:ce:02:95:79:29:75:1c:5b:13:a2:c9:
         2f:7e:51:20:1e:e6:3c:3e:8f:82:03:36:ec:c8:10:25:36:0f:
         e2:11:62:eb:ea:dc:13:26:b0:ba:c9:c6:26:f8:c6:3c:b0:d5:
         c4:08:95:f3:e9:c0:d8:e6:9e:f2:3a:5b:d3:e6:f8:ef:2e:b9:
         ee:1b:28:a4:28:18:84:86:69:96:81:ea:64:55:a0:ad:f2:d9:
         76:6e:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:59:01 2025 by rpki-client