Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File:                     rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier:          IyEzK3P7uZ0caAf5VA1D9oBz5IsG/7PDvAWi5YL5fTk=
Subject key identifier:   68:6E:27:00:49:ED:03:9B:4A:EA:C8:BE:74:DB:A5:33:DA:79:21:A8
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer:       /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial:       0196A5E5E73AF340D33E4F859466F4C68513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number:          0B30
Signing time:             Tue 06 May 2025 14:00:29 +0000
Manifest this update:     Tue 06 May 2025 14:00:29 +0000
Manifest next update:     Wed 07 May 2025 14:00:29 +0000
Files and hashes:         1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
                          2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: G4H4vS/vLTEwt/DmYmJc4Pezu9viTO27P7bIGZrDRNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e5:e7:3a:f3:40:d3:3e:4f:85:94:66:f4:c6:85:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
        Validity
            Not Before: May  6 14:00:29 2025 GMT
            Not After : May  7 14:00:29 2025 GMT
        Subject: CN=686e270049ed039b4aeac8be74dba533da7921a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:76:6f:bf:d5:da:a8:f9:14:2a:63:eb:a3:
                    e9:b0:42:23:bb:fc:03:c7:37:a3:45:66:77:2a:d2:
                    1e:83:7b:3b:5a:78:6a:d3:f5:dc:28:91:53:53:55:
                    ae:ca:59:12:6f:65:76:69:8f:46:64:c1:c3:d8:a7:
                    1f:46:13:eb:cd:29:75:d4:74:ec:51:40:b4:ad:09:
                    e1:d4:aa:9c:91:46:a3:b7:f2:f5:57:19:ba:2b:d5:
                    04:13:e2:99:e1:31:44:be:0c:f4:bc:0c:c7:bc:33:
                    d8:8b:71:70:5e:96:0f:6d:e2:4a:65:42:e0:eb:45:
                    85:91:39:c9:0d:a9:e7:6f:b5:9d:07:fc:28:c7:5d:
                    62:41:d0:49:90:70:c3:fe:70:03:c8:b6:b6:71:0e:
                    a8:cc:ea:8d:13:2d:fa:d8:c6:60:0a:90:f0:c4:1f:
                    d4:3c:6b:ca:9e:cb:6b:b9:ae:27:8e:19:c7:8a:10:
                    e9:8e:0d:91:df:18:df:83:30:a3:6c:e3:6d:d3:3a:
                    ea:fa:32:bd:5e:2b:27:fc:8f:77:cb:46:8c:7a:d1:
                    9a:64:b3:00:71:e3:55:f4:2e:54:75:cf:51:f0:71:
                    e5:d8:92:de:da:72:bb:4d:5d:9f:be:3c:f5:a8:92:
                    1a:30:29:81:d0:a0:eb:71:69:a5:e8:cd:6b:d9:70:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:27:00:49:ED:03:9B:4A:EA:C8:BE:74:DB:A5:33:DA:79:21:A8
            X509v3 Authority Key Identifier:
                keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:2c:10:07:25:dc:bb:3a:71:22:fe:00:37:16:f2:62:64:
         10:34:18:cb:31:4e:47:68:65:ff:a4:1e:a2:b6:76:4d:b8:8b:
         9d:04:19:34:49:d8:20:69:85:e2:c9:d1:90:0c:26:8f:1d:2c:
         06:47:75:c9:6e:4e:e4:81:53:75:5e:72:41:b0:f6:65:78:ba:
         6a:8a:e7:1f:96:d9:2f:aa:74:e4:1f:34:41:76:75:57:75:fa:
         ff:bd:36:e8:c8:0b:91:7f:cd:36:0a:67:f2:7f:5e:86:5d:7d:
         08:ad:30:f0:2a:d8:97:35:04:80:12:fc:6b:96:22:c6:f2:5c:
         74:9a:f9:c9:26:f5:06:98:de:6b:b7:b6:63:02:3b:2a:20:53:
         56:81:34:82:b8:fc:94:1f:6b:98:39:fa:9b:c3:c0:83:f5:a2:
         7c:8a:e5:61:06:c7:90:2f:cc:6a:57:70:fb:8b:71:71:19:b0:
         42:5c:e2:4b:8f:31:75:34:43:ef:da:3d:c8:fb:2f:a1:56:9f:
         74:ce:46:8b:0b:a6:86:32:df:a9:78:80:47:2b:8b:8f:59:50:
         6e:49:80:7c:94:22:31:c1:18:97:fd:6b:c1:43:f9:a2:64:bd:
         7d:ee:33:c3:c2:1d:1a:c1:94:85:81:da:29:4c:6f:2f:36:0e:
         df:09:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:14:02 2025 by rpki-client