Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File:                     O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier:          rda+6L409rchnFU7tKjQDsO18tGOJNUDV8vUM2x/b2U=
Subject key identifier:   B7:18:BC:C3:BD:C1:45:09:AF:B9:39:80:7A:18:7C:54:B8:F0:7F:42
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer:       /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial:       0196899324470D415312FF6A926CC1DEDDDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number:          1055
Signing time:             Thu 01 May 2025 02:00:43 +0000
Manifest this update:     Thu 01 May 2025 02:00:43 +0000
Manifest next update:     Fri 02 May 2025 02:00:43 +0000
Files and hashes:         1: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (hash: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=)
                          2: BibofgsXi1m02E0sydv0lSzcS6M.roa (hash: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=)
                          3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: c8Q2zDXnDTcq1PY3hyGycG4T64dVwpZf+H44DTlrtzc=)
                          4: c4wHBWSbrNsVlf_a1cQ3OL9nR-U.roa (hash: b+RfZmuxixUWKJA86U4yLBBzKqnW3kWf0oaDSsDCSts=)
                          5: ovHMIugdzTg_bwipZYtU7WSoXAk.roa (hash: gF8CQNR3IscVXMALoF8UJJgAvjQPh7b9Wa8roCX6mtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:93:24:47:0d:41:53:12:ff:6a:92:6c:c1:de:dd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
        Validity
            Not Before: May  1 02:00:43 2025 GMT
            Not After : May  2 02:00:43 2025 GMT
        Subject: CN=b718bcc3bdc14509afb939807a187c54b8f07f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:24:2b:d3:7b:a0:1a:d3:94:ab:6e:41:32:
                    b3:5c:91:03:09:df:82:bf:33:22:0e:5f:a5:df:f1:
                    db:bf:48:20:d2:d7:bc:33:12:94:0b:59:a4:3b:eb:
                    0b:92:27:bd:54:72:8a:b9:ef:2b:d1:b1:e7:fe:78:
                    49:4d:69:fe:75:2f:14:0c:9e:33:00:2f:45:46:51:
                    89:f2:7f:68:7a:90:d0:3d:f8:7b:f5:0a:4a:42:1d:
                    77:f3:a3:70:fb:9e:dc:07:d2:84:37:f8:92:a8:87:
                    3d:8e:3c:e0:19:3b:48:53:b0:65:83:04:7d:5e:01:
                    24:a2:4c:4f:50:96:5e:6b:c3:7c:eb:da:eb:d5:2c:
                    8b:91:9d:a9:1e:10:eb:55:aa:8a:6d:ff:8d:19:4e:
                    6b:75:5d:d9:6e:b8:7d:ff:23:c7:1c:27:0f:c9:34:
                    ce:d6:23:21:60:b7:86:d6:f9:30:1e:2f:8e:5a:6c:
                    ac:76:9a:65:f2:51:a9:60:9b:15:f8:71:c3:8d:0d:
                    d0:cf:9b:59:ad:a3:0c:e2:1e:19:d2:ad:58:b4:9b:
                    5c:9d:9e:02:cf:fa:46:72:a5:98:31:15:97:d3:d3:
                    c5:9a:36:38:df:78:8e:66:12:7e:b1:e8:2e:ff:31:
                    1d:a0:3e:c5:e7:d0:19:d5:28:3a:6c:8b:f4:b1:86:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:BC:C3:BD:C1:45:09:AF:B9:39:80:7A:18:7C:54:B8:F0:7F:42
            X509v3 Authority Key Identifier:
                keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:26:99:45:04:b4:b3:9b:d4:2d:45:38:5d:ff:53:d6:99:
         b9:71:a0:79:c5:db:1f:38:b9:fa:7a:41:4c:c9:fd:f2:91:87:
         f9:2c:a9:76:c6:3d:65:d5:6a:e0:23:c3:6a:5c:2a:0f:db:20:
         69:8f:9a:c6:d1:13:c3:b9:09:b1:ad:00:bc:2e:5e:d5:91:04:
         55:b0:24:3e:a3:7a:19:ca:9e:4a:d6:33:8a:c5:71:cb:d3:5e:
         a1:43:cc:7c:37:11:49:db:c5:4b:41:54:69:72:e7:41:cd:cd:
         19:88:ff:46:28:1c:87:79:b3:d5:85:e6:60:9a:a3:13:ef:8d:
         ad:82:53:c1:89:fa:07:88:f3:fb:33:21:8d:c0:3f:81:dc:e0:
         ee:47:d2:11:eb:ae:b7:93:34:09:94:bb:29:d9:c6:b8:97:2f:
         b3:05:40:b7:f4:f5:9b:e0:c7:a5:a4:ec:39:0c:af:ee:aa:25:
         eb:45:ab:8d:81:63:5e:20:1b:e8:73:69:4d:f1:5a:06:bf:53:
         40:50:78:ca:3d:33:3b:56:80:92:9e:66:c7:0d:99:34:14:33:
         d5:a0:5e:15:6e:f7:c4:00:6a:f7:6a:1c:6b:ab:a3:ab:aa:80:
         fc:88:6c:e8:8b:69:cd:1f:29:54:90:28:de:22:28:3b:3a:53:
         6d:d2:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:16 2025 by rpki-client