Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File:                     o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier:          nlpmIam0PbQYGKuJa+WJTVlPDLRIQN6kUb02/q4GkMk=
Subject key identifier:   D2:F4:B0:11:4A:FB:28:4D:72:87:7E:A3:6D:AB:C5:81:63:E4:E6:14
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer:       /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial:       01964BC6C75BCB6CC6FC683BE970F8F8F02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number:          0A26
Signing time:             Sat 19 Apr 2025 02:00:40 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:40 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:40 +0000
Files and hashes:         1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: QLbSfqRr9tDjPfZVTJCfBxmlMVDw5oWRPh+X3VatWac=)
                          2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:c7:5b:cb:6c:c6:fc:68:3b:e9:70:f8:f8:f0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
        Validity
            Not Before: Apr 19 02:00:40 2025 GMT
            Not After : Apr 20 02:00:40 2025 GMT
        Subject: CN=d2f4b0114afb284d72877ea36dabc58163e4e614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:50:f2:c0:26:d3:dc:ce:99:24:c5:e5:33:
                    30:b5:9c:d2:8c:1a:7c:e7:7e:43:92:38:82:77:2c:
                    85:23:6f:b2:0d:9c:30:5e:59:50:cb:12:11:16:cc:
                    76:01:95:8e:d6:18:b0:17:ec:81:50:51:45:b0:50:
                    f4:50:67:be:f6:91:9b:5b:78:5e:d8:23:4c:bb:54:
                    3f:b5:eb:6f:42:44:7c:d8:8a:53:46:b0:c0:70:0e:
                    e9:16:64:db:b0:ba:e9:ae:24:ec:df:d8:67:52:f4:
                    fa:f4:5b:73:e3:8d:a2:97:28:e9:2b:ef:f7:7b:76:
                    db:de:43:22:a0:4a:3d:a6:0f:06:4a:ac:a5:c2:91:
                    aa:13:54:14:42:64:45:93:3f:7d:02:05:67:e8:a6:
                    14:d9:5e:cc:6a:c8:61:37:3e:8d:94:25:1a:1a:48:
                    dc:51:30:eb:6b:b9:b4:4a:e2:8d:b1:e1:0a:30:f1:
                    e3:ba:27:6c:e7:19:f5:c4:3a:d3:41:6a:f0:19:a8:
                    ef:3e:6e:fd:f4:76:ec:de:c3:83:88:74:06:ee:8d:
                    5d:8c:fd:31:bd:a7:c6:f3:72:01:bd:15:32:d6:8b:
                    f5:ec:c6:3c:c1:b7:c0:69:79:44:47:74:a8:b7:27:
                    28:e7:67:d8:71:03:b8:d1:7e:db:ec:1e:ba:75:0c:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:B0:11:4A:FB:28:4D:72:87:7E:A3:6D:AB:C5:81:63:E4:E6:14
            X509v3 Authority Key Identifier:
                keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d9:a5:14:41:c7:33:57:d8:d1:d9:52:a3:d3:6d:c3:0e:e2:
         46:84:1e:dd:5a:f6:8b:b1:fb:7f:8b:64:c6:35:ac:3a:50:82:
         68:e3:64:0d:c2:be:bd:6e:97:7d:1a:90:4b:11:04:47:b0:8c:
         09:09:70:36:51:f7:90:c8:44:f2:93:91:fa:a5:27:6e:10:61:
         79:d3:c7:20:0e:76:2a:56:e0:85:42:90:8b:01:da:96:cf:40:
         35:5d:13:c2:3f:b1:3e:e4:e6:ef:0a:05:69:68:8b:68:c6:5d:
         6d:f1:f5:1a:f9:a9:bf:36:dd:4a:b3:b1:dc:fe:0a:8c:46:06:
         36:1b:d6:ef:69:fc:b4:69:f4:bf:3d:2a:6a:1f:20:55:8a:e4:
         c0:3e:e8:e2:6b:5f:6a:9f:95:56:6e:87:9c:7a:2a:14:b9:5e:
         d0:7f:5d:ee:a0:4f:94:f1:f8:e7:c2:98:1a:0a:0a:ee:de:f0:
         91:0a:c7:fb:b8:06:ee:48:01:8a:40:03:8f:cd:b4:a7:7c:af:
         03:b3:f6:d5:34:8b:df:b0:c4:d7:bc:df:36:e3:eb:e2:7a:f0:
         fe:de:a1:fa:c9:d4:e6:fb:08:dd:de:14:1f:36:e2:ab:19:25:
         09:26:9a:cb:62:49:55:5e:54:5f:dd:64:50:24:1d:01:7b:41:
         cd:26:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:27 2025 by rpki-client