Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          NIEGjdwIX3zW7cGkweUWAZMRWJmEJWS3+6RMk+azjf4=
Subject key identifier:   6F:01:9B:52:28:33:C2:30:99:CB:E7:F1:64:F2:6C:52:56:16:EC:20
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       01964B8F63E2DA66509B52DDB147E371321C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0A52
Signing time:             Sat 19 Apr 2025 01:00:10 +0000
Manifest this update:     Sat 19 Apr 2025 01:00:10 +0000
Manifest next update:     Sun 20 Apr 2025 01:00:10 +0000
Files and hashes:         1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: JXlaO4cvm6Zi8D/uoeUfm8+ySPiYoZFpfVlVQu/HyOc=)
                          2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:8f:63:e2:da:66:50:9b:52:dd:b1:47:e3:71:32:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Apr 19 01:00:10 2025 GMT
            Not After : Apr 20 01:00:10 2025 GMT
        Subject: CN=6f019b522833c23099cbe7f164f26c525616ec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:ac:1a:ef:a6:b2:68:9f:3a:a9:9e:f0:e8:
                    b3:53:cc:f1:dd:be:30:e3:c0:99:3f:be:d5:4b:8c:
                    35:8a:92:6d:01:e6:99:8e:cb:26:d6:2f:10:99:4f:
                    c3:b6:43:b5:4e:45:b0:71:b4:82:c8:be:65:48:f1:
                    89:b8:c4:83:c2:82:0a:3a:69:90:71:9a:fc:e2:3a:
                    27:59:ac:d4:4b:92:fa:69:45:2e:43:4c:45:e8:69:
                    3e:1f:f2:91:43:9c:19:67:77:66:ab:13:dc:94:b4:
                    1a:27:40:a0:51:ef:4b:43:2d:a4:22:05:7d:0f:c4:
                    c8:ee:f1:9c:cc:14:11:2d:92:3f:a2:71:f6:29:9b:
                    fb:c0:1e:8e:86:19:43:22:37:d2:54:e8:0c:41:0e:
                    19:d0:42:82:3e:ee:ec:90:3b:29:0a:12:37:d1:ab:
                    64:bf:da:8b:00:6d:2e:d2:0b:b2:ff:0a:db:32:49:
                    de:21:4b:1d:cd:e5:de:ee:80:40:bd:1b:5c:bd:b2:
                    8c:71:0a:8d:38:8a:50:27:ac:d6:f9:51:b1:a6:24:
                    bc:d1:3a:87:73:3b:32:85:a2:1b:2c:fe:c2:69:28:
                    37:f2:83:4f:66:8b:32:9d:57:0c:9f:27:66:a7:c1:
                    d3:1c:fd:19:20:da:2d:73:44:fe:3b:4f:47:7f:d0:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:9B:52:28:33:C2:30:99:CB:E7:F1:64:F2:6C:52:56:16:EC:20
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:dd:e6:1f:06:73:05:bc:30:43:30:55:04:9f:fc:b5:ed:
         b8:fb:84:88:e4:3a:a1:45:03:1b:d4:a1:a4:38:9d:09:5e:e9:
         a1:3c:bf:62:1f:d9:3a:14:c0:b8:98:62:fc:e1:2b:d0:7d:4e:
         e9:41:47:49:e4:9d:04:c9:6e:83:3e:ed:dc:c4:b0:df:57:88:
         5f:55:3f:40:58:0c:e0:0a:24:3d:12:ac:2b:2e:99:d5:a5:63:
         44:e3:24:32:fb:6a:06:ea:e4:c8:e0:3e:1e:0b:63:7a:a2:a4:
         74:d0:47:da:ee:c6:6e:2d:4b:43:66:5c:0e:59:9f:de:78:0c:
         67:63:c3:4e:e9:fc:c8:fa:92:e5:81:89:60:d9:fe:7d:8a:88:
         fc:a6:7b:0f:57:74:c8:45:30:b6:14:4b:f9:aa:c5:0f:b7:29:
         c3:ef:98:19:99:69:13:5a:e1:c1:75:43:2a:8a:b8:b7:ec:ec:
         1d:03:b1:eb:68:40:eb:59:2a:1a:02:af:01:79:8a:a0:28:d0:
         5d:bc:0d:a4:88:33:9c:57:05:e4:2f:59:d5:fb:87:9a:fa:6c:
         ef:48:f6:b5:14:c3:96:6e:03:78:45:8a:c6:1d:20:3a:04:4a:
         21:5b:ac:6a:a5:36:a2:1c:84:cd:ef:cd:66:a7:06:cb:e6:49:
         61:e8:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:53:49 2025 by rpki-client