Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          SrHqufXzMpmxyaIx0xCGF2rHk3wt5gdNZtZZiqfYWX8=
Subject key identifier:   88:1B:D9:9B:37:FE:86:AE:41:1B:18:6F:C6:6A:C1:EA:90:4E:C3:80
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       0196A9F96C002E5EB0DCC9D3967B45D9FF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          111F
Signing time:             Wed 07 May 2025 09:00:17 +0000
Manifest this update:     Wed 07 May 2025 09:00:17 +0000
Manifest next update:     Thu 08 May 2025 09:00:17 +0000
Files and hashes:         1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
                          2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: PoCU/Wku21MDu9g341GpP1o9G2xq0/85MCrmYBrFcrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:6c:00:2e:5e:b0:dc:c9:d3:96:7b:45:d9:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: May  7 09:00:17 2025 GMT
            Not After : May  8 09:00:17 2025 GMT
        Subject: CN=881bd99b37fe86ae411b186fc66ac1ea904ec380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:47:4d:85:6a:b5:f5:77:9a:33:e8:08:c8:
                    a4:6e:df:08:92:8b:2c:fd:61:4b:bd:ce:c8:b0:c9:
                    1e:76:65:5a:95:b8:c9:65:e4:09:3b:fd:3c:e0:f9:
                    7b:c2:02:38:8a:2a:37:0f:e3:dd:4e:d8:40:23:7f:
                    6f:17:14:04:59:00:a6:f3:71:34:fb:07:a2:43:da:
                    5e:6b:2a:50:e7:dc:fa:8e:3c:5c:4b:56:e9:65:dc:
                    f7:a0:e9:8e:3e:c3:3d:38:c1:36:83:55:e5:21:91:
                    e6:85:8b:fd:19:13:0c:16:29:c0:01:51:4f:f6:99:
                    cd:6d:59:c1:49:3a:18:b7:f8:a6:0d:1a:6c:2d:73:
                    d5:3c:1e:65:1f:c9:83:94:28:46:36:a5:ae:d4:45:
                    e0:ff:e5:ed:3c:6f:8c:58:bf:a3:03:1b:a0:00:9b:
                    cf:5a:3c:b6:69:19:91:18:76:0a:58:8d:6d:8d:e3:
                    fc:97:2d:9b:c4:5b:54:71:45:a1:44:24:46:b0:5c:
                    28:9f:c5:6e:d9:94:36:8b:c4:11:c8:17:66:30:c1:
                    4e:09:aa:6d:c3:be:60:b8:28:29:49:67:8d:76:f6:
                    d3:21:29:57:ad:98:1f:72:a5:18:40:45:ea:ce:bc:
                    11:ca:5d:85:03:45:39:a4:0c:0c:1a:f0:f2:15:e6:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:D9:9B:37:FE:86:AE:41:1B:18:6F:C6:6A:C1:EA:90:4E:C3:80
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:a3:df:3f:da:79:5e:11:8b:b5:47:49:e5:3a:7e:62:e2:
         44:42:e9:52:25:22:4b:5b:19:aa:3b:da:14:ee:08:0b:93:f1:
         ef:5e:ed:fe:61:2e:7f:98:2d:57:e6:d6:80:4d:04:a8:7d:39:
         77:3a:c7:b6:e8:eb:6c:c0:46:4a:06:6f:b4:fc:b2:bd:6b:8f:
         f0:dd:ce:44:d2:76:b2:1d:73:91:a5:97:3b:6f:ad:ca:36:97:
         48:96:b2:f5:da:c1:2c:e4:0e:8f:48:78:53:e7:bd:7f:2b:7e:
         e0:e2:af:57:a9:b1:2c:98:b7:69:4d:75:37:e1:09:31:e1:2c:
         1d:00:e2:e8:28:4f:45:37:aa:5e:6e:23:11:f9:8d:b1:59:42:
         74:d7:bb:ba:6b:98:54:70:1b:a5:67:d8:29:54:9e:f7:33:10:
         4c:f0:6a:1b:a7:20:8c:3a:19:5a:bd:94:fb:d9:10:e4:3d:10:
         ea:8f:9f:d4:b5:49:8f:6a:92:a9:44:7c:42:82:b9:ec:00:c6:
         24:b4:c5:f3:e3:8f:7c:cc:f3:fa:4c:19:ae:a9:e9:b5:d9:cd:
         01:a7:59:75:af:56:8d:d6:76:5d:04:f3:ce:4b:ba:dc:c7:3d:
         4a:10:39:60:58:10:9a:ee:fa:ba:23:34:61:6c:40:07:74:5f:
         f7:bb:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:28:15 2025 by rpki-client