Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File:                     O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier:          sLNn+mpJfcUKJz5pHu0+ivBLy0vSuYWpp/NZF1TGmqY=
Subject key identifier:   09:5B:50:AB:D5:24:37:0F:EE:1F:A9:42:4D:BF:33:1D:89:8F:37:B2
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer:       /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial:       019772D18D09A10048025DF783B714F7EC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number:          0B1E
Signing time:             Sun 15 Jun 2025 09:00:25 +0000
Manifest this update:     Sun 15 Jun 2025 09:00:25 +0000
Manifest next update:     Mon 16 Jun 2025 09:00:25 +0000
Files and hashes:         1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
                          2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
                          3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 0lvgEHo29mRDQ35ztk3qAOYZbU5LP993DhMR2X5VAHM=)
                          4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:d1:8d:09:a1:00:48:02:5d:f7:83:b7:14:f7:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
        Validity
            Not Before: Jun 15 09:00:25 2025 GMT
            Not After : Jun 16 09:00:25 2025 GMT
        Subject: CN=095b50abd524370fee1fa9424dbf331d898f37b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:54:e6:d2:e3:a1:1f:6d:f5:a2:67:e5:8c:
                    7a:44:76:ba:bd:17:d9:fa:29:e4:7c:c4:45:72:55:
                    9b:27:7e:32:6b:4a:29:1c:0c:3d:52:69:ef:dd:c8:
                    96:92:47:e8:3c:dc:9f:b8:f1:66:0c:04:ca:a8:35:
                    d5:75:d5:e1:43:32:72:7f:3f:da:91:39:98:e5:41:
                    66:bd:72:88:95:84:c8:60:2f:4e:8d:4b:84:01:0a:
                    86:8f:0b:ae:c6:ad:b6:5e:80:a3:c4:46:db:ba:98:
                    23:df:b4:0a:94:f4:e1:42:44:a8:cd:f3:b3:b5:53:
                    d2:78:4f:2a:fa:8a:ef:74:97:98:b5:da:ff:36:cf:
                    27:27:a7:20:4e:1a:b5:41:88:ff:a5:bd:4e:1d:90:
                    a9:dd:cd:6b:88:cb:de:75:0a:b2:05:bf:e4:15:7c:
                    32:68:16:51:a3:6e:fe:33:8f:7a:27:f7:38:f1:53:
                    e1:89:0c:23:ee:04:88:71:13:bb:7e:30:88:cf:f8:
                    80:df:b2:29:b8:50:c8:c8:94:f1:1c:35:5e:bc:c0:
                    27:92:53:e4:0e:bd:44:aa:7a:f1:f7:e4:35:53:dc:
                    8b:f6:fd:a4:52:d8:99:5c:1d:92:84:59:42:3b:cb:
                    a6:9b:28:80:52:1d:85:a5:c9:95:c9:9f:92:a3:59:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:50:AB:D5:24:37:0F:EE:1F:A9:42:4D:BF:33:1D:89:8F:37:B2
            X509v3 Authority Key Identifier:
                keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:cc:bb:3f:7d:60:e4:96:86:1c:5b:ce:b5:10:74:84:78:
         ee:5c:b1:3a:af:f2:df:f0:43:13:6d:82:2a:da:e1:8a:70:8d:
         6f:eb:96:3f:00:53:38:30:f4:93:28:dc:7a:80:97:b6:88:e1:
         e2:7c:44:e7:7e:7b:ab:c7:43:38:3b:26:a9:77:5a:e1:24:53:
         06:bf:5c:09:7d:67:11:1b:ee:70:c8:81:0f:29:4f:74:85:1f:
         79:60:a4:f2:8f:0b:16:7d:ca:e9:6f:e7:46:1e:2e:19:88:54:
         66:3d:9f:0f:14:4c:a0:11:a0:d2:7b:38:bc:d4:a7:64:04:57:
         6c:fa:3d:fc:a5:fa:e3:56:35:12:37:82:c5:57:d6:e3:91:8b:
         02:c1:be:05:9c:77:22:b8:d3:b3:32:98:d6:2f:0c:d6:d6:20:
         15:6b:ad:2d:74:ed:4b:8f:c0:18:85:1d:07:d6:59:97:67:02:
         b7:90:cf:7e:37:5f:f7:62:79:f2:74:b9:e1:3f:ec:c6:62:41:
         83:a8:8e:f8:88:04:7e:fb:ac:06:87:14:68:22:75:90:65:11:
         38:96:6f:71:c8:f0:7f:26:6f:d1:4b:fd:1f:f3:89:2d:56:0b:
         91:66:a1:89:13:ec:12:1d:9c:5d:94:bf:d7:06:c1:ae:37:17:
         ee:da:69:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdy0Y0JoQBIAl33g7cU9+wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm
N2JmMmEwHhcNMjUwNjE1MDkwMDI1WhcNMjUwNjE2MDkwMDI1WjAzMTEwLwYDVQQD
EygwOTViNTBhYmQ1MjQzNzBmZWUxZmE5NDI0ZGJmMzMxZDg5OGYzN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP9U5tLjoR9t9aJn5Yx6RHa6vRfZ
+inkfMRFclWbJ34ya0opHAw9Umnv3ciWkkfoPNyfuPFmDATKqDXVddXhQzJyfz/a
kTmY5UFmvXKIlYTIYC9OjUuEAQqGjwuuxq22XoCjxEbbupgj37QKlPThQkSozfOz
tVPSeE8q+orvdJeYtdr/Ns8nJ6cgThq1QYj/pb1OHZCp3c1riMvedQqyBb/kFXwy
aBZRo27+M496J/c48VPhiQwj7gSIcRO7fjCIz/iA37IpuFDIyJTxHDVevMAnklPk
Dr1Eqnrx9+Q1U9yL9v2kUtiZXB2ShFlCO8ummyiAUh2FpcmVyZ+So1lbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlbUKvVJDcP7h+pQk2/Mx2JjzeyMB8GA1UdIwQY
MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt
YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw
LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAzMuz99
YOSWhhxbzrUQdIR47lyxOq/y3/BDE22CKtrhinCNb+uWPwBTODD0kyjceoCXtojh
4nxE5357q8dDODsmqXda4SRTBr9cCX1nERvucMiBDylPdIUfeWCk8o8LFn3K6W/n
Rh4uGYhUZj2fDxRMoBGg0ns4vNSnZARXbPo9/KX641Y1EjeCxVfW45GLAsG+BZx3
IrjTszKY1i8M1tYgFWutLXTtS4/AGIUdB9ZZl2cCt5DPfjdf92J58nS54T/sxmJB
g6iO+IgEfvusBocUaCJ1kGUROJZvccjwfyZv0Uv9H/OJLVYLkWahiRPsEh2cXZS/
1wbBrjcX7tppSg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:02 2025 by rpki-client