Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File:                     ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier:          XwI5+lzx8WaDfNLoO9iSunHc0tuv2ocwok+97vLtCv4=
Subject key identifier:   BE:6C:5F:EA:DA:1C:3D:7B:4C:7E:85:09:74:96:85:E8:0C:5B:49:16
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer:       /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial:       01968691E4335D38B7CE879E3CD443C31CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number:          04D0
Signing time:             Wed 30 Apr 2025 12:00:30 +0000
Manifest this update:     Wed 30 Apr 2025 12:00:30 +0000
Manifest next update:     Thu 01 May 2025 12:00:30 +0000
Files and hashes:         1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
                          2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: rUqvz16GvtmxtoLwiaaDR352dtg/WZLZFQnw0e8IuBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:91:e4:33:5d:38:b7:ce:87:9e:3c:d4:43:c3:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
        Validity
            Not Before: Apr 30 12:00:30 2025 GMT
            Not After : May  1 12:00:30 2025 GMT
        Subject: CN=be6c5feada1c3d7b4c7e8509749685e80c5b4916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:ac:e5:9c:b5:f6:eb:f7:27:0c:1c:c6:04:
                    31:87:48:cf:bb:2c:ed:64:5a:a0:5c:77:5a:44:b7:
                    24:cb:ce:dc:53:f1:67:66:96:c6:25:4b:6e:a7:33:
                    93:83:c2:06:a0:8a:43:be:1b:62:65:b3:39:1d:54:
                    c5:65:9d:b6:5d:c7:f3:1b:33:89:58:9b:4a:05:11:
                    6b:2b:7f:67:fa:d0:9f:dc:6e:e3:a1:48:38:65:fb:
                    8f:a9:cb:a5:1f:4e:43:e6:10:bc:69:c0:84:e5:98:
                    f4:26:40:ef:26:d6:1e:b5:61:71:8d:3b:1c:e1:eb:
                    31:f2:98:f2:20:ff:23:18:0a:b5:ef:69:80:8e:19:
                    db:01:b9:b1:63:c8:7b:57:47:93:1a:06:0b:93:f1:
                    b8:f5:e6:b6:51:90:bf:a5:f0:7f:b9:5d:29:6f:39:
                    2c:98:6e:3b:1c:27:4b:d1:6b:0a:d8:b8:81:1f:9c:
                    a9:52:e8:91:2a:e4:45:72:07:50:e8:66:4e:23:c8:
                    36:6c:c7:8b:8d:59:ac:ce:e2:c9:19:56:db:04:55:
                    eb:f2:76:3b:40:43:6e:65:8d:18:10:be:4d:1c:57:
                    53:57:c3:a1:53:c9:5b:b0:18:4f:cf:44:01:37:c0:
                    cf:0f:ff:7e:59:e1:1e:d4:5b:10:7e:04:a4:71:df:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6C:5F:EA:DA:1C:3D:7B:4C:7E:85:09:74:96:85:E8:0C:5B:49:16
            X509v3 Authority Key Identifier:
                keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:14:cf:20:a4:f6:e1:1d:f9:36:aa:f1:ea:98:77:7a:70:ca:
         4a:90:bc:c3:c7:3c:bc:97:3b:76:33:64:fb:31:40:a2:2b:8d:
         9a:ef:4c:d2:57:6f:6a:05:f9:d8:52:50:40:49:ef:3f:84:4c:
         bf:45:c5:e7:80:3a:07:62:a2:6c:a2:b1:37:1a:52:77:6e:cd:
         af:80:4e:66:ff:be:b2:05:b4:6c:12:8d:0b:eb:5e:06:94:8e:
         87:28:a2:e1:71:53:ca:a0:9c:14:15:26:92:1e:30:6a:f6:37:
         8f:13:95:6c:24:1e:9c:68:5f:e3:61:a6:0f:3c:19:06:93:00:
         59:3a:6c:8d:ec:68:fc:50:fa:a4:f6:d1:18:58:5a:48:3e:15:
         6e:20:ee:85:1a:f5:7d:d6:27:3a:7f:39:18:e4:e1:9b:d0:5f:
         7f:35:df:ff:bd:fa:f0:a3:8a:c9:2e:b6:3c:5a:e6:6e:e4:3b:
         f1:a6:8f:5a:28:ab:ff:76:a3:5b:91:be:2a:94:ab:e0:40:b0:
         b2:1d:53:6f:75:77:d3:4b:df:ce:df:ad:29:85:2f:ec:50:79:
         90:21:ec:44:4e:65:0f:7d:8c:0c:f5:18:b1:0b:f2:c1:1d:94:
         0c:3e:ab:d2:f5:4c:6d:8d:db:69:f0:45:48:8e:85:df:37:95:
         df:66:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:30:17 2025 by rpki-client