Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          44yJ36N5QsYOOmeburIRYzFjtR1ib7ndb8pKOGYRjao=
Subject key identifier:   75:75:8F:25:69:84:22:85:17:A8:D9:E1:76:58:5B:DB:A3:71:04:15
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       0196A9F99791C8172D0C17DC91601D5A0F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          0E71
Signing time:             Wed 07 May 2025 09:00:28 +0000
Manifest this update:     Wed 07 May 2025 09:00:28 +0000
Manifest next update:     Thu 08 May 2025 09:00:28 +0000
Files and hashes:         1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
                          2: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
                          3: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: OfCf5Vnw0Z/e5r07W3a4l0iw4vpvTBbaLo8HZx0Zf2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:97:91:c8:17:2d:0c:17:dc:91:60:1d:5a:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: May  7 09:00:28 2025 GMT
            Not After : May  8 09:00:28 2025 GMT
        Subject: CN=75758f256984228517a8d9e176585bdba3710415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:42:e3:7d:38:4b:0f:ea:fe:b6:ca:d6:be:
                    07:a6:2c:b4:5e:e5:1d:8a:41:9a:9f:a8:80:23:7b:
                    31:fb:1c:41:7f:a5:3e:2f:de:a0:70:1b:64:35:0c:
                    b9:89:d5:e7:80:fb:c0:fd:7d:3f:45:fd:43:5c:6a:
                    70:eb:7d:4e:b7:1e:e3:56:b2:50:ab:ef:1a:3b:77:
                    bb:99:3b:58:24:42:17:30:29:43:f2:f4:4b:56:2e:
                    c4:78:c5:fe:73:0e:8b:53:de:47:3a:0b:5e:f2:5f:
                    8b:a0:f8:2e:92:32:b7:c7:58:1c:92:33:fb:e2:49:
                    c1:ea:bd:b6:ea:c8:02:e9:4e:92:30:5b:ae:cd:a7:
                    d2:0c:fc:a8:f8:97:95:1d:69:52:ee:d3:6f:6d:23:
                    c0:e4:c8:5d:ed:0d:b5:14:b4:ac:27:a0:67:85:ec:
                    8b:a9:e1:57:15:2f:7a:c8:9e:48:2e:c8:78:f4:0e:
                    85:25:3a:d7:5b:dd:b4:07:fb:12:fc:45:bf:79:73:
                    0e:c0:c7:22:ce:c6:3e:f2:dd:f6:17:30:dd:f2:cf:
                    a6:8f:35:ae:7a:63:8e:23:ba:0a:fd:91:8f:9a:e4:
                    ae:3f:17:d5:67:37:0a:d0:33:02:5f:e9:25:99:74:
                    f6:9f:af:19:a8:cd:27:80:46:ed:a7:3c:ce:8c:2f:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:8F:25:69:84:22:85:17:A8:D9:E1:76:58:5B:DB:A3:71:04:15
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:86:3f:6b:12:8a:7f:9b:4e:e6:56:e0:e7:59:49:64:04:
         c8:d3:da:e9:1c:32:7b:f1:3d:68:17:cc:eb:26:c0:64:29:e7:
         21:27:ea:7d:08:be:de:1d:34:eb:2d:04:34:50:18:3c:c5:7a:
         7c:18:b6:d2:90:ab:7b:ec:84:2b:6e:39:71:79:49:43:bd:d1:
         cb:8a:73:8c:2f:84:00:df:f0:ae:4b:d1:73:b3:16:1e:05:35:
         40:f8:6e:04:35:21:a7:df:04:c3:11:bc:f3:cc:f3:eb:b1:b3:
         d8:a3:50:2c:80:8c:1b:c0:08:ff:cc:98:91:09:d7:16:8f:1f:
         55:4d:62:bc:4f:7c:4a:dc:3b:b4:fc:7d:2d:89:14:20:57:c2:
         1c:92:38:b8:59:73:a6:94:cd:fa:de:a8:31:a0:1a:be:f1:2a:
         af:44:d9:44:19:34:3d:73:f4:61:d1:ef:62:7e:ed:d5:fc:1a:
         06:8e:71:e4:5c:e4:2e:4f:ad:ec:db:80:9a:38:c4:e4:f3:00:
         0b:bd:10:18:c2:43:6c:c1:30:bb:9a:00:89:77:91:aa:d4:ad:
         f0:f0:55:36:7b:89:af:ce:d7:48:c3:3d:64:cb:93:91:b8:d5:
         2f:1c:c8:68:89:fa:69:ad:86:42:27:e3:4e:a0:eb:93:46:cd:
         96:4b:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:04:43 2025 by rpki-client