Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          68zpbTq5Q1u5C6E1rYbCP4jpgUp7mKMvmmVZDR+WYVU=
Subject key identifier:   55:89:3D:F2:85:C6:40:C0:85:B4:46:E7:06:E0:B4:4D:10:1F:60:85
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       019674FA07449F18B1A9FC302339B9AFF439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          0F46
Signing time:             Sun 27 Apr 2025 02:01:04 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:04 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:04 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: 5vt87cLPIzutFqda+lQJZdImkl/V+PzuUiTjSNm0tfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:07:44:9f:18:b1:a9:fc:30:23:39:b9:af:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: Apr 27 02:01:04 2025 GMT
            Not After : Apr 28 02:01:04 2025 GMT
        Subject: CN=55893df285c640c085b446e706e0b44d101f6085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:89:5c:23:d1:28:32:10:34:01:bb:4c:4f:93:
                    95:bb:b2:ed:85:78:2e:bd:8c:44:7a:7f:4c:8f:8d:
                    64:f6:8e:8b:d8:a3:b2:4c:28:80:8c:b4:50:d7:3b:
                    fc:a0:a0:84:aa:71:bd:d6:63:2b:d2:ab:b3:6e:dd:
                    36:8b:e4:5d:00:59:31:b0:41:5c:54:b0:31:ae:90:
                    a0:5c:65:50:41:44:3f:48:16:b6:e3:a4:e6:63:c4:
                    af:ac:da:e4:99:55:32:73:dc:e4:d1:44:d8:a0:d2:
                    2d:4b:d2:5a:33:39:a0:5c:a6:7b:e2:c9:00:27:4a:
                    49:8f:11:e2:fe:50:ca:09:72:0a:92:10:40:bf:fb:
                    db:6e:a8:de:8b:7c:39:7d:fc:09:d0:91:5f:c9:9d:
                    f6:02:91:ed:a2:5f:b6:26:52:7c:f6:96:0a:b5:90:
                    8a:cb:e1:e4:db:e7:9e:fc:2e:8f:f3:0e:b7:19:ca:
                    a1:8d:62:e5:35:62:fb:e9:cc:62:c1:8f:7b:38:cd:
                    91:59:a0:60:e9:2d:72:fb:17:b5:51:d8:10:54:93:
                    97:41:7b:9a:b5:29:c5:ce:57:e6:89:b8:0d:24:4d:
                    02:a3:53:8f:58:aa:36:61:cf:71:9a:63:13:7a:ff:
                    e7:82:bf:01:fc:08:d5:99:54:f7:4c:d5:69:12:58:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:3D:F2:85:C6:40:C0:85:B4:46:E7:06:E0:B4:4D:10:1F:60:85
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:51:d8:97:ec:05:e3:71:e1:51:f4:cf:1c:3f:67:cb:02:de:
         c4:25:f4:0a:0c:f6:66:6b:6d:9c:d5:e1:1a:86:65:36:08:37:
         28:c0:51:f8:e3:f4:dc:85:dd:d2:67:a3:31:13:28:d6:6e:f4:
         c7:ed:64:5b:22:de:2e:0f:46:ad:df:4d:2d:8a:3b:3b:be:e7:
         bf:64:09:74:d3:37:70:03:9f:0f:a5:b4:f3:1f:01:ca:cb:d6:
         8f:9d:d8:30:3a:65:80:95:29:4c:2d:da:03:a2:d5:01:4e:b3:
         5b:20:8c:b7:31:a6:b4:f0:c0:96:4f:3a:9c:c3:ec:99:fa:66:
         e9:f0:dd:7c:94:78:14:a1:48:30:b9:ec:3d:e3:73:5a:dc:d2:
         0c:ed:69:7e:81:ce:be:48:9f:25:2a:4e:f9:4c:72:fd:89:76:
         06:80:70:e7:e5:23:de:e3:62:bb:3b:0e:26:d6:d1:3a:04:b1:
         0a:1d:8a:ed:12:f5:62:7e:dd:f3:71:94:cf:55:89:e2:44:30:
         5c:32:09:4f:8d:fa:4a:d3:45:63:14:2c:5f:89:3a:e1:19:3b:
         65:ce:7a:41:de:5e:c6:bd:84:14:50:43:8f:fc:17:cc:16:3c:
         09:8b:42:15:47:10:d6:1c:08:03:06:5a:98:91:af:91:c5:02:
         89:41:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:19 2025 by rpki-client