Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          /07ysM7k+m+b1JHdplhXEmSVYxZAxbYVEhBsAWJnMJo=
Subject key identifier:   10:1E:B0:4D:CD:CB:86:A4:7B:A7:40:18:40:29:5B:6E:D2:AD:25:68
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       019688800F4F9A9D61E3F2CA540558A4127C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1517
Signing time:             Wed 30 Apr 2025 21:00:15 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:15 +0000
Manifest next update:     Thu 01 May 2025 21:00:15 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: YFfV33+woQcszDSGVVRgLgNN+J+j4CvQUfSNaNovhUQ=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:0f:4f:9a:9d:61:e3:f2:ca:54:05:58:a4:12:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Apr 30 21:00:15 2025 GMT
            Not After : May  1 21:00:15 2025 GMT
        Subject: CN=101eb04dcdcb86a47ba7401840295b6ed2ad2568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:57:f2:5e:b0:5e:c4:3d:3f:6a:8b:83:77:
                    bf:9d:bc:a2:9f:60:8b:74:46:ed:03:cd:6e:f6:f2:
                    bd:a6:08:e1:04:70:a6:2b:71:b6:66:da:81:3a:de:
                    7c:32:29:c3:50:82:72:de:a6:1f:6c:b6:23:e9:93:
                    b8:38:f2:1e:50:cf:c1:6f:60:57:72:73:e6:4a:92:
                    53:0c:32:b4:4b:a9:31:0a:5a:45:a3:16:3e:91:1c:
                    eb:95:2d:84:b8:19:17:59:7c:92:16:cb:c4:97:cc:
                    4a:de:08:d9:ad:c5:78:6d:5b:cd:6b:0f:7d:a5:9b:
                    b7:c8:b4:59:11:95:9d:6c:dd:68:01:90:de:7e:06:
                    db:4c:30:bc:fc:92:33:41:16:36:21:14:38:a1:e3:
                    dd:da:e5:5a:2b:72:d0:14:08:e4:c7:1e:02:00:4c:
                    4d:66:f0:14:dd:64:c0:6e:3e:fe:14:50:2e:35:3e:
                    ec:69:81:37:bb:61:58:30:84:e3:2d:6a:0f:a7:30:
                    e3:d0:59:f1:1b:6c:90:15:08:1d:4a:cf:fb:a1:41:
                    c7:bc:43:3f:04:dd:46:b4:58:a1:29:e2:cb:c7:26:
                    19:e5:4a:46:4a:4e:4d:16:e3:7b:57:7d:4e:53:c8:
                    21:c1:3e:87:d3:4d:d6:9b:9c:f6:63:97:cd:ed:25:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1E:B0:4D:CD:CB:86:A4:7B:A7:40:18:40:29:5B:6E:D2:AD:25:68
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:b5:3c:44:bc:46:fe:aa:ec:61:4c:3e:f4:27:d0:33:4a:
         ce:c5:aa:62:97:95:25:23:76:c2:6d:9b:e7:7a:aa:25:33:03:
         bc:81:c4:5a:58:37:af:df:2b:21:fc:8b:ce:a8:68:d8:40:cc:
         00:85:7a:44:87:fc:51:0b:19:72:c0:68:13:5e:53:e6:03:9c:
         97:4e:06:a3:0b:a3:42:31:88:c1:0c:e3:9a:0a:59:65:8c:ce:
         f4:d1:7d:46:24:81:a4:80:5e:68:68:c2:97:23:4b:90:be:de:
         6e:53:eb:7f:08:fa:11:fe:2d:1e:39:9a:8f:d7:28:ad:5b:4e:
         df:a3:2a:83:83:2d:42:6c:e8:ad:7e:89:22:f4:ed:54:cc:ba:
         95:cf:e6:67:c1:17:fd:15:6c:8e:21:e8:89:a0:b4:f1:8f:1a:
         c1:b2:2b:61:58:0b:55:02:a3:cb:6e:c5:ea:33:91:c9:05:05:
         f5:39:b6:b4:9b:7b:ef:03:72:7e:f1:91:c5:a4:3d:86:9e:6b:
         95:c1:b3:55:ec:4b:f9:c2:16:1b:e2:43:d1:58:37:80:9d:7b:
         16:86:78:65:c6:09:9c:95:58:34:d5:c8:2b:49:ba:c7:6f:1e:
         5f:eb:e6:50:27:0f:09:b6:71:91:46:46:ae:7b:a6:4e:bd:ce:
         94:1a:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:29 2025 by rpki-client