Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File:                     ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier:          WDMi4NyiSdDCg9ima1CXBMEZ5ZA1UCr4cUcz6TmY2QU=
Subject key identifier:   37:21:FB:78:52:2E:A2:53:18:60:E5:9F:8E:7E:47:56:2F:6B:A1:9E
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer:       /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial:       01976D3E7E527023AC33D2F3AEE7AFAA137F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number:          1183
Signing time:             Sat 14 Jun 2025 07:01:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:41 +0000
Files and hashes:         1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
                          2: ODB5K147usnzcNTK56uipc26ego.crl (hash: wYdFCGlQDf1Hg5OaD4+RlGhySqixLXF1xZcRY9xUmjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:7e:52:70:23:ac:33:d2:f3:ae:e7:af:aa:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
        Validity
            Not Before: Jun 14 07:01:41 2025 GMT
            Not After : Jun 15 07:01:41 2025 GMT
        Subject: CN=3721fb78522ea2531860e59f8e7e47562f6ba19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:7c:ff:c9:64:f5:57:b5:5c:17:ac:38:cb:
                    7c:32:4b:31:4f:e0:67:12:54:fc:59:16:ba:71:e5:
                    6e:5f:5a:55:8f:9e:2c:1a:2b:35:23:9d:c3:91:f5:
                    54:87:8d:97:02:8a:fd:8b:0c:ae:9a:36:f2:ec:b2:
                    41:85:b0:78:57:41:4c:2e:b5:ad:7f:1c:f0:e2:46:
                    d2:2d:e9:ca:ad:6b:01:fe:0c:57:86:fa:0f:86:73:
                    c6:73:a1:d6:0a:29:ed:d1:c8:68:05:a8:87:04:b4:
                    b5:f4:ee:79:0e:53:89:05:dc:41:ff:f6:16:cb:d5:
                    f5:12:f7:75:19:bd:07:a1:80:64:c7:74:df:b2:8c:
                    ff:ae:98:d0:d8:9c:c4:26:63:7f:33:bd:bc:93:88:
                    e4:66:87:5d:59:3c:6d:e7:6e:73:71:ee:30:bc:98:
                    b8:69:7f:6d:f0:05:59:54:fa:17:fb:11:50:68:4e:
                    b2:7e:0b:8a:04:c8:3e:5b:dd:ea:e8:94:84:89:b7:
                    6c:f1:64:7e:c1:49:97:cc:25:da:fa:92:71:d8:9b:
                    49:23:bc:bd:d3:9c:1f:ab:5e:55:2c:ca:6a:37:4b:
                    9d:de:39:de:4e:24:82:65:89:e7:33:49:69:5a:57:
                    a4:0f:33:68:86:07:a5:d6:34:c2:61:e7:1b:54:de:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:21:FB:78:52:2E:A2:53:18:60:E5:9F:8E:7E:47:56:2F:6B:A1:9E
            X509v3 Authority Key Identifier:
                keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:de:2e:43:f7:f2:cb:6e:d2:fa:ec:7c:08:4d:b1:48:38:
         ca:5c:ef:0a:42:6b:e5:49:4d:ca:89:fc:7a:a4:d4:3e:cd:7c:
         34:11:0c:51:4a:8e:e7:3e:75:ac:27:ab:e3:5b:ca:6e:a3:d0:
         84:f0:e3:bf:c2:84:2b:c3:ad:9e:67:93:6b:b1:d2:71:07:6e:
         b5:31:fc:e2:21:74:a2:06:f2:cb:69:1a:d8:e2:ff:22:e1:cd:
         81:31:f7:43:24:79:0a:f5:29:d3:7a:a6:9b:3c:2f:f7:9b:62:
         eb:f9:31:24:3c:79:5b:1c:6e:d9:2e:d6:8b:20:47:0c:0f:30:
         96:13:4e:fa:aa:8f:32:fd:75:b3:67:8a:1f:e3:7d:02:29:02:
         6c:70:d7:e0:d1:42:0f:bf:e1:1e:05:ff:5f:e0:65:fa:f1:d3:
         ed:18:47:b2:87:50:cb:0b:66:1b:43:d9:45:5a:6d:c4:83:b0:
         b7:96:74:fe:60:71:8a:d4:09:c1:26:50:0e:89:90:07:61:fa:
         43:65:01:af:20:03:ed:62:91:f4:f3:53:80:32:e9:aa:51:8d:
         c0:f2:c7:4d:03:72:f1:73:87:70:58:6d:75:f6:30:31:d5:cf:
         a3:a5:7d:a4:ad:cc:9e:1d:ef:9d:fb:e6:8a:90:b7:67:bf:fe:
         0c:b7:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:11 2025 by rpki-client