Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File:                     oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier:          0y1IMxT31cNU+GMukZ5rWI+u0j+DPsJgf/qfuCJJBqo=
Subject key identifier:   3A:FC:22:A1:C3:11:36:18:48:4F:F8:8D:E8:E8:53:03:23:A6:68:39
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer:       /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial:       01976929CE83CA76E98787548386EAEB969C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number:          0550
Signing time:             Fri 13 Jun 2025 12:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:36 +0000
Files and hashes:         1: F9oMnlBaYcvudHdAu16anIbAsho.roa (hash: Y2+lSCzHCoY6IW2lijDN5QVdOABERpdjfmMwMnErXhg=)
                          2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: fP+Rz4Wtr/2DAAL1nJLl07TDG2m4FaPfGjJmumL4nvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:ce:83:ca:76:e9:87:87:54:83:86:ea:eb:96:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
        Validity
            Not Before: Jun 13 12:00:36 2025 GMT
            Not After : Jun 14 12:00:36 2025 GMT
        Subject: CN=3afc22a1c3113618484ff88de8e8530323a66839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:f0:8a:e2:08:af:2e:d2:9a:bb:c1:d2:5c:
                    1f:ab:16:59:dd:72:14:9f:0c:83:cd:b8:46:28:ff:
                    78:27:b2:70:9a:c7:32:42:ba:ea:06:64:ec:82:c5:
                    9e:a5:42:a3:64:3e:cd:54:23:7e:5d:55:e2:d6:a0:
                    46:5b:9c:be:2a:2d:aa:bc:86:e0:8a:ca:79:81:32:
                    52:70:85:08:8f:b6:bf:1f:1f:e3:ce:ec:e3:78:1a:
                    4d:2c:b2:8a:ea:bc:42:0a:4a:d5:7a:39:9f:da:c0:
                    ac:88:6a:18:50:4b:e3:63:9e:86:2f:9f:25:12:54:
                    53:be:01:65:e3:02:4c:16:3b:e4:b0:28:32:75:04:
                    20:83:4a:fa:e9:92:7f:04:18:3e:8f:19:8d:6a:65:
                    b5:01:a9:34:c9:d4:39:33:07:81:bf:98:54:0c:41:
                    ff:c7:c6:b1:a4:87:f4:db:98:c7:32:b7:0f:f8:46:
                    8a:ae:c8:35:cb:d2:02:a2:36:2d:c0:6c:18:8f:c7:
                    35:e7:f8:36:33:9b:0c:69:12:a5:98:5c:71:f7:80:
                    cf:c8:60:a2:b0:90:66:5a:85:81:e5:85:3e:d7:0e:
                    27:92:1c:38:05:38:75:6f:b0:67:6e:57:68:15:11:
                    d4:6a:05:fe:36:18:1f:dc:a8:f7:6d:5d:ce:2b:33:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FC:22:A1:C3:11:36:18:48:4F:F8:8D:E8:E8:53:03:23:A6:68:39
            X509v3 Authority Key Identifier:
                keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:db:22:5b:81:e4:e4:3d:4a:1b:c7:cc:38:1c:92:45:88:bb:
         d3:f4:4b:da:10:ec:a1:4b:7f:23:76:0b:a7:80:40:80:5b:14:
         a4:8a:a2:e5:09:2a:48:13:a0:e1:dd:0a:55:0c:ee:83:55:08:
         6a:89:26:54:3d:64:e3:19:2e:3a:13:05:24:e7:9f:3a:b8:bd:
         56:cb:5b:47:de:6c:ca:cf:dc:d1:cf:f4:c5:aa:84:c8:24:69:
         6e:b4:13:a7:20:b1:f9:77:2c:09:b1:1e:5f:6f:e9:61:33:85:
         27:43:d2:31:90:b3:c4:ef:4e:5a:81:8f:a1:49:5e:69:9d:da:
         39:dc:2a:2d:ef:80:e7:9a:10:b7:ee:ba:f7:d7:d4:ce:4b:da:
         a7:17:c6:ca:4b:39:94:59:f1:37:67:f7:ec:5c:06:ad:42:cf:
         de:c3:30:8a:23:aa:b3:87:c3:4e:0e:b3:e4:63:0e:7e:8f:a3:
         60:9e:49:00:ed:a1:02:45:16:24:00:89:31:71:4d:bb:9b:20:
         e1:29:74:54:53:91:88:1f:96:1f:dc:ad:b2:55:12:54:e4:08:
         50:7e:88:7b:cb:17:1e:58:85:fe:11:14:cf:b3:87:cb:d8:27:
         36:5c:1c:ae:ac:da:00:d9:94:09:0a:fb:68:28:ba:55:53:24:
         df:0f:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:39 2025 by rpki-client