Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          zCBGzzyKvRJr2dvFRssB6Fn0vZjXhVX6e7ZNZN9ueTc=
Subject key identifier:   6F:ED:BC:94:19:C1:BA:CE:20:E4:02:C2:8E:0A:03:2D:7C:24:01:95
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       01964A7CDF0926D497A7DA2D37DDCA064449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          0A30
Signing time:             Fri 18 Apr 2025 20:00:19 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:19 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:19 +0000
Files and hashes:         1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
                          2: 6xn-nrHQSXs05ccTEOlrbgL9Q4E.roa (hash: lUga55GbETOAcYAC/fkbUuqJ6uvOhI9s/yOAAQaczw4=)
                          3: ALdpivp7qzpUB5jnmeapFiwkGxg.roa (hash: 7MA0ajseX1lz/krgeoOJVgQJUF4DBwVOkQ4FKnVb0B4=)
                          4: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
                          5: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: gSWA/j1de92gltol89q0pEcXm1ACo0v/MdheF2qetLg=)
                          6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
                          7: pz30gP5HXmvVhezEbR2M9x5jpYg.roa (hash: zMuCQqFnbVDZWipMHPrJQB2cNPEYXwDyxtFSxkBu5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7c:df:09:26:d4:97:a7:da:2d:37:dd:ca:06:44:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: Apr 18 20:00:19 2025 GMT
            Not After : Apr 19 20:00:19 2025 GMT
        Subject: CN=6fedbc9419c1bace20e402c28e0a032d7c240195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:84:36:b8:be:56:c3:41:31:e0:8f:2c:f8:
                    6b:1f:55:69:5b:ac:e5:9f:88:9e:70:31:da:be:86:
                    5f:bf:df:ce:a2:a8:0d:6d:db:fd:46:86:0f:d5:51:
                    ef:2b:fe:48:36:41:0b:f9:e5:cc:e0:69:04:c8:7a:
                    51:da:95:82:4b:a6:71:2a:68:2a:ff:1e:2a:e2:f5:
                    bb:9d:57:a2:6e:ce:0d:ed:27:f5:15:c2:83:89:4d:
                    dd:1a:61:13:0d:0b:97:98:b8:68:09:85:80:73:6d:
                    ec:d3:e0:6c:46:90:96:e9:9f:2d:b6:71:c8:db:46:
                    5f:7d:5f:cb:d4:5d:fd:7c:fa:10:aa:fd:49:14:63:
                    49:2a:de:5e:71:eb:24:79:9a:70:af:49:7d:dc:ff:
                    6d:33:93:d7:6f:f6:16:d8:63:4a:f2:ca:92:22:17:
                    06:2f:6d:5a:22:83:3e:53:7f:52:f8:6d:d4:9d:b1:
                    8b:88:b5:a3:ff:80:14:7f:03:14:50:e4:77:51:ed:
                    b0:3b:5b:17:f6:f9:2c:bc:7c:d7:af:77:44:6b:7d:
                    45:91:5f:f0:cc:af:c7:6c:6d:f0:e9:8f:5e:39:b5:
                    5a:16:de:97:6a:77:7d:df:72:ae:52:01:d2:fc:ba:
                    cc:18:d5:b6:1b:ab:19:b1:32:1d:5a:66:c4:b2:5e:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:ED:BC:94:19:C1:BA:CE:20:E4:02:C2:8E:0A:03:2D:7C:24:01:95
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:7f:72:fa:67:be:d9:5b:14:e0:c9:06:c0:31:b4:69:ea:
         ad:f6:36:f2:87:45:e6:fb:1b:cc:c6:1c:64:69:40:fd:4f:8b:
         3d:b9:dc:cd:9b:d6:be:a3:2f:59:25:af:bc:82:99:d7:af:42:
         92:9e:29:a2:52:73:d5:19:44:e0:f0:db:a3:98:15:e4:1d:e4:
         d9:b8:79:47:d6:9c:2c:df:36:2f:3e:62:76:5d:3a:ba:ec:47:
         2c:58:96:01:91:ed:86:3f:2a:65:65:ed:35:45:34:02:fb:8f:
         3e:6a:a9:8e:41:c7:6d:b1:78:d3:4d:e1:48:1a:f0:24:da:16:
         84:f3:1a:4e:56:c7:53:09:8a:1e:b1:e6:19:0e:33:73:b1:bf:
         8c:d6:06:a0:a9:ca:be:09:33:49:f1:91:ae:be:e9:1c:e0:a4:
         80:7f:09:4e:db:ca:41:52:53:3a:5a:c4:b0:75:da:19:c8:39:
         38:8d:2c:80:78:c3:17:cf:e6:e4:b1:fd:7a:26:da:8a:11:af:
         8c:b2:a9:9a:e0:11:fd:c6:c8:b0:3d:08:80:8e:af:31:11:11:
         f1:97:e8:f2:2b:fd:c2:5a:16:f9:10:05:18:46:f4:4f:34:be:
         cc:45:fe:c2:e6:12:91:69:89:a1:23:96:8e:ff:ad:3a:48:36:
         ae:69:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:35:19 2025 by rpki-client