Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          zBSD9rD/UWsFH32g7IpqP9ZHgpkxRJrm22rDRPQ8SHs=
Subject key identifier:   07:FA:58:3E:98:B3:BF:36:63:CF:E7:B5:9C:DA:2D:EA:54:C5:87:13
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       019690A7CFA99CDAA01F10D24CDBE1672574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          1522
Signing time:             Fri 02 May 2025 11:00:38 +0000
Manifest this update:     Fri 02 May 2025 11:00:38 +0000
Manifest next update:     Sat 03 May 2025 11:00:38 +0000
Files and hashes:         1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
                          2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: q4VBBqXR9rCLZyHbMKQvB+nX2qvaLiexk0+G4eQz3RU=)
                          3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
                          4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:a7:cf:a9:9c:da:a0:1f:10:d2:4c:db:e1:67:25:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: May  2 11:00:38 2025 GMT
            Not After : May  3 11:00:38 2025 GMT
        Subject: CN=07fa583e98b3bf3663cfe7b59cda2dea54c58713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:ab:bf:c1:57:51:9e:9d:44:89:25:de:d3:
                    d6:f4:ad:04:d0:2f:d6:df:20:3d:76:7e:6d:5d:9b:
                    a5:a3:d7:e4:1b:c4:7c:6d:c7:c5:a9:f0:08:54:2c:
                    53:13:d7:e7:9e:d3:fb:2a:80:0d:48:5b:68:88:54:
                    47:ff:6c:69:0e:23:64:7a:58:d9:5c:a0:3b:fe:5b:
                    ed:f2:bb:78:1a:e7:cf:33:7a:65:84:64:ff:bb:f9:
                    78:94:b9:f8:ef:b1:20:ba:64:01:47:a2:df:da:59:
                    7b:98:ad:a6:d8:f3:a3:56:ca:f7:98:3f:e8:20:53:
                    f5:42:e5:90:43:8e:c5:ef:cc:e4:23:5c:b2:79:88:
                    07:34:7f:b0:77:23:a7:7d:79:c3:26:db:f3:db:b0:
                    9f:f5:da:61:90:d5:06:32:8b:ce:a6:c6:26:4d:a5:
                    5c:26:85:66:8b:d3:78:96:db:00:4c:e6:19:92:57:
                    4d:42:11:74:f3:0e:19:cd:3a:8c:d3:03:9a:df:22:
                    e0:68:d7:5a:db:c3:e4:cf:ee:39:df:55:a7:d2:3d:
                    0d:eb:b9:19:78:3c:1b:f6:b2:06:5c:0f:34:4b:94:
                    26:b8:ff:3a:02:d9:c9:61:b2:43:2f:23:fb:20:16:
                    19:cd:95:06:83:37:2a:c6:af:08:14:77:d2:ce:24:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:58:3E:98:B3:BF:36:63:CF:E7:B5:9C:DA:2D:EA:54:C5:87:13
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:af:25:c7:e9:b7:12:7b:0f:ad:fd:d9:77:26:c9:36:3c:
         2b:54:f0:9a:0b:bd:6d:d9:fa:ce:ad:06:1e:68:3c:8a:46:f1:
         7a:5d:84:c5:1c:e7:4a:cc:0c:7d:91:bb:58:6e:f2:5b:c6:a7:
         83:d0:c4:7b:2d:b7:47:54:c2:4c:fd:fc:25:34:ee:a8:68:64:
         72:0a:63:74:ce:27:cf:43:41:9b:17:e8:2f:35:13:57:8c:e3:
         78:10:05:9d:9a:f6:b2:58:8f:d4:ca:80:85:66:19:5d:91:06:
         2b:80:c7:5e:f8:df:5b:59:2e:f4:a1:e2:fe:73:30:ec:a0:23:
         12:95:d7:98:69:88:30:a1:c4:ca:0a:e3:e8:a6:79:f8:90:38:
         48:22:63:89:7f:01:d8:88:27:5a:0a:0a:c6:0e:77:b0:89:3e:
         7a:8c:40:4d:b9:59:a2:4b:96:c4:91:70:03:ce:93:c7:c8:6a:
         dd:fe:e0:06:66:1d:2e:9f:10:73:c5:b6:a0:2a:ca:f5:01:f2:
         2f:59:f5:be:50:76:04:19:c0:d2:7f:38:66:5e:e2:0d:c2:13:
         04:e1:b5:da:64:0b:06:8c:bd:00:94:c4:d3:27:da:c2:ee:0b:
         8d:9d:72:05:f4:59:4f:43:ec:9a:e9:18:8d:84:c2:bf:c3:27:
         d0:49:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:54:03 2025 by rpki-client