Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File:                     O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier:          2I6ek/tPRnm2ETfTEcSGp553lsm29SHNSyZ3q+t/8Z8=
Subject key identifier:   4F:7F:12:25:86:A7:85:75:6E:3F:CB:8D:8E:7A:A4:C8:D8:BC:13:77
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer:       /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial:       019688EE60A01C2C9D657D319365122D089E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number:          0DE9
Signing time:             Wed 30 Apr 2025 23:00:45 +0000
Manifest this update:     Wed 30 Apr 2025 23:00:45 +0000
Manifest next update:     Thu 01 May 2025 23:00:45 +0000
Files and hashes:         1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: SECpGXkeOoQK9yIJ1vumTF1P6j5zjbAh2+YJLMDf3L4=)
                          2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:ee:60:a0:1c:2c:9d:65:7d:31:93:65:12:2d:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
        Validity
            Not Before: Apr 30 23:00:45 2025 GMT
            Not After : May  1 23:00:45 2025 GMT
        Subject: CN=4f7f122586a785756e3fcb8d8e7aa4c8d8bc1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:44:ac:c3:80:78:ac:cf:9e:93:07:3d:6f:
                    8d:6e:91:75:27:f0:2e:3f:6d:9b:72:39:ef:84:b3:
                    5e:c9:09:88:6c:4d:21:79:b0:d5:28:af:57:9d:5a:
                    1e:24:c2:b4:2e:a7:de:4d:30:47:11:f0:8e:a1:11:
                    7e:ab:f0:37:7c:47:19:36:89:f8:31:53:96:92:d0:
                    a7:25:2b:2d:8f:1a:d3:8d:7c:e5:3d:4c:84:11:c9:
                    45:b8:34:52:52:d1:2a:97:e4:02:e2:31:d6:5a:3f:
                    fb:82:1c:30:8d:17:7e:17:58:4a:b7:97:99:67:27:
                    73:cd:6d:64:a9:23:53:65:7e:69:58:d4:70:ad:51:
                    ed:08:24:43:9d:7e:0e:88:26:b3:07:36:fa:27:0e:
                    54:dc:7b:b6:35:0e:d9:3b:28:96:2f:3d:21:04:01:
                    46:11:a8:c4:5b:e4:78:3c:9a:7d:95:87:b6:60:4c:
                    13:9f:e2:c6:70:71:fb:8d:a0:5b:d5:c9:e7:66:78:
                    bf:9d:3d:f4:ee:66:96:3b:b5:97:58:57:89:42:f3:
                    b6:07:1a:7d:b0:5f:2e:3f:95:37:da:49:88:03:65:
                    77:12:01:5c:a1:bf:af:05:82:0b:af:88:34:ad:b7:
                    75:82:52:38:bb:02:9f:29:77:ba:fd:17:3d:d0:b9:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7F:12:25:86:A7:85:75:6E:3F:CB:8D:8E:7A:A4:C8:D8:BC:13:77
            X509v3 Authority Key Identifier:
                keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:48:f9:52:8d:48:62:60:b1:2d:76:72:35:7e:c8:4b:09:
         0c:4e:14:33:90:54:77:28:8d:8e:3d:07:3c:ae:0a:8d:78:d8:
         3d:7c:4f:c1:67:93:3a:b3:84:a1:b7:52:15:40:a7:ed:70:19:
         0b:7b:25:81:6c:54:09:1a:bc:35:6b:83:10:3e:8d:a7:2e:00:
         5d:64:bd:46:5b:e1:1d:c7:49:23:cc:f5:f0:7b:0d:b6:9d:a6:
         ee:aa:1c:c2:17:9b:bf:16:89:65:e8:30:80:a9:4f:81:ef:e7:
         d2:08:ce:a3:2b:c9:18:13:93:79:b2:d9:b2:e1:56:0b:e4:81:
         c4:b2:0f:68:1b:92:30:aa:80:ad:fe:2c:da:c8:4a:fe:82:a8:
         d6:df:71:c7:4c:fa:3f:d5:47:27:a1:c7:b6:a3:91:1f:f4:a2:
         de:66:04:3d:bd:49:81:39:38:8b:3f:72:3d:86:b6:d9:d5:d2:
         db:76:53:5b:95:65:2e:e6:47:ca:ea:fd:de:b6:12:b9:4c:93:
         3f:a2:06:83:c5:c9:05:7e:ff:d9:4d:e7:0b:48:1e:d5:ad:1d:
         34:6e:3e:c7:4b:2b:68:04:7b:16:07:de:20:59:47:d9:6b:a0:
         0b:f7:e4:bb:f9:b3:60:1f:aa:3a:ed:9a:cc:68:e3:ca:fe:fd:
         cd:ab:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:54:57 2025 by rpki-client