Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          vG6YhRNX+N9VtJKT/TSn4Kyt0e/TTu4oDnr9Kf4aqw0=
Subject key identifier:   B5:AE:3F:95:13:81:F0:2A:F9:FB:1B:6A:0D:06:D9:FF:5F:4A:28:46
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       01975121BE3A5C023C932851C6A8AABD66C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          0ABB
Signing time:             Sun 08 Jun 2025 20:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:55 +0000
Files and hashes:         1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
                          2: ALdpivp7qzpUB5jnmeapFiwkGxg.roa (hash: 7MA0ajseX1lz/krgeoOJVgQJUF4DBwVOkQ4FKnVb0B4=)
                          3: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
                          4: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: uZnflj7ooCH/h3WlRPKLaSoDgHcVBiYu4RNqpzg71kw=)
                          5: R9lxjYdjsKxlvanBaxZtqFtiK5M.roa (hash: EAnasKsXxwBwZXC0ThjWuRnRdndnASQeOuSOk8haA34=)
                          6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:be:3a:5c:02:3c:93:28:51:c6:a8:aa:bd:66:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: Jun  8 20:00:55 2025 GMT
            Not After : Jun  9 20:00:55 2025 GMT
        Subject: CN=b5ae3f951381f02af9fb1b6a0d06d9ff5f4a2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:aa:2b:6c:d0:c1:c8:77:a3:d2:f1:0d:36:
                    bc:9a:f3:2a:7f:ef:76:0f:b8:91:89:fb:b6:77:62:
                    2a:6c:d5:77:29:3c:4c:68:cd:58:d1:60:b0:84:5b:
                    c3:b4:a2:3a:8f:7d:87:b7:28:b7:fc:b8:22:97:55:
                    81:fa:bc:0b:84:4a:a7:c8:02:1c:ae:10:ba:70:0f:
                    b5:1d:da:dc:de:87:82:5a:da:fc:09:61:55:b5:d4:
                    85:79:48:56:6c:dd:40:22:95:b4:4f:6d:f4:44:7c:
                    60:79:43:f7:00:fb:3a:a0:c5:a8:ff:fe:f8:ae:e7:
                    36:d4:64:c0:64:b7:e9:70:4c:7c:df:35:55:99:56:
                    20:21:42:e4:0d:18:5d:41:41:8d:cb:a5:ef:6f:d1:
                    ad:59:60:74:80:6f:c3:01:bc:d7:ea:9e:25:56:d6:
                    27:03:f6:ab:6e:22:19:b0:d5:fd:23:c6:84:4d:37:
                    1a:08:8c:af:bc:44:0f:a7:05:94:c6:3a:41:10:e7:
                    b6:73:5e:b8:aa:7d:16:d4:68:37:6c:fd:c4:a2:e4:
                    6e:b6:e9:b8:c6:d5:8b:3a:56:ad:ec:36:c3:43:1f:
                    1e:9f:b0:cd:eb:3a:f7:d9:bf:dd:be:25:fc:5d:1c:
                    1e:4c:d5:a2:46:83:b0:16:12:0c:cc:a5:2a:d1:4a:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:3F:95:13:81:F0:2A:F9:FB:1B:6A:0D:06:D9:FF:5F:4A:28:46
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:b0:cd:ce:69:29:4a:0a:d4:20:44:93:c7:da:72:26:b4:
         b0:de:3a:83:5f:03:d1:06:34:e2:42:be:ce:d4:38:4b:d7:b6:
         f2:71:99:ac:b0:ff:0d:7d:4d:e5:14:b0:8d:66:d3:7f:ad:b3:
         2c:3b:db:e4:a3:e1:0a:6a:80:ea:ed:50:d6:f3:48:03:d4:3a:
         41:b5:ce:37:0c:3c:8b:6b:1a:bc:38:62:3d:a1:64:0d:3c:fa:
         83:81:1f:e1:fc:b2:2a:fd:22:5f:8e:fb:9f:6e:c6:e2:03:84:
         a2:3f:5c:c1:f7:5f:1d:08:47:16:53:92:4e:58:97:4a:f9:be:
         2a:5f:2d:a1:05:2a:26:c3:f7:ae:57:b8:01:52:b0:39:a9:a0:
         d8:23:fc:1d:4d:f8:d6:a3:a1:58:2a:f4:3a:fb:64:b2:24:63:
         90:5b:dd:57:c7:51:27:50:ec:58:9b:d1:6f:7a:c4:37:cd:ca:
         49:af:fe:fa:31:09:45:9c:39:af:2a:6e:2f:53:ad:8c:c7:3d:
         7e:89:58:92:90:b2:6c:d9:0d:72:02:81:90:01:99:4b:a8:14:
         bb:c3:cd:07:5b:38:0d:96:43:46:07:e0:d4:cd:2b:cf:43:39:
         83:08:3a:e4:9f:e9:39:8d:bf:17:ff:2e:d0:3b:63:01:8b:8c:
         07:85:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:13:46 2025 by rpki-client