Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File:                     Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier:          9QvYqsFNiSOJUSJbMHCYvgF+P02+l294mOuz+L7hKNg=
Subject key identifier:   36:AE:28:11:27:41:A2:71:BD:67:54:30:5F:22:C4:DB:29:04:FD:97
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer:       /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial:       01969416D2E4EA1FEF734595F2ADAFF54A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number:          01B7
Signing time:             Sat 03 May 2025 03:00:45 +0000
Manifest this update:     Sat 03 May 2025 03:00:45 +0000
Manifest next update:     Sun 04 May 2025 03:00:45 +0000
Files and hashes:         1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: +oPoUTQbf93IzoDnSdfbxP441yXHTQlEB82EJWEngRc=)
                          2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:d2:e4:ea:1f:ef:73:45:95:f2:ad:af:f5:4a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
        Validity
            Not Before: May  3 03:00:45 2025 GMT
            Not After : May  4 03:00:45 2025 GMT
        Subject: CN=36ae28112741a271bd6754305f22c4db2904fd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:7f:c4:b1:82:db:79:9f:82:4c:a8:a6:a4:
                    72:34:64:cc:b7:4f:ae:83:af:a7:bd:68:de:12:a3:
                    3a:91:1b:2d:5c:a6:31:c8:5d:d2:5d:aa:bd:01:42:
                    cb:9e:e4:1c:65:c8:91:46:6a:82:c0:4e:90:02:b3:
                    d0:63:8f:7f:c3:7c:a1:0e:34:db:08:67:96:c0:8d:
                    78:e3:c6:ac:27:44:90:bc:5e:5e:80:26:53:ef:e8:
                    93:8c:0b:f9:35:79:20:fd:0e:30:03:67:c5:71:fc:
                    df:66:09:79:e9:a2:86:fa:a1:aa:30:28:8b:6b:bb:
                    0c:6e:b0:8c:65:d1:27:84:a8:01:e9:46:08:4d:5d:
                    39:ae:8e:0b:dc:a3:33:24:d9:25:8a:02:fd:f7:fc:
                    f3:41:dc:6f:d0:22:49:09:a2:65:ae:47:12:f6:98:
                    cb:ba:69:44:38:a4:41:80:fa:88:d7:d2:c0:d1:d5:
                    db:0f:68:e9:fb:e3:67:3b:aa:1d:c3:15:fe:de:e7:
                    ce:9f:e1:24:39:ed:da:31:05:bc:d4:bc:85:0a:a1:
                    2d:f2:54:9d:cd:d4:31:d7:01:d1:fc:4b:d8:f4:5f:
                    03:ad:ff:37:a9:74:eb:8d:eb:0a:cc:8e:36:22:b2:
                    68:51:90:28:8b:08:fd:99:5d:89:94:35:2b:96:27:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AE:28:11:27:41:A2:71:BD:67:54:30:5F:22:C4:DB:29:04:FD:97
            X509v3 Authority Key Identifier:
                keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:54:c4:d4:e5:85:4f:43:a7:fa:bd:87:8a:c7:21:25:61:
         85:4a:fa:88:42:d2:dc:e6:fb:5a:36:c8:56:6d:36:44:53:ec:
         ca:84:1d:62:b7:7d:a4:32:43:fa:86:0a:4a:55:8a:93:03:09:
         64:da:bd:32:71:2b:d2:8b:09:56:03:d1:23:ed:78:66:7a:48:
         de:dd:e8:43:d4:65:9a:c6:b4:53:7c:6a:91:23:1b:6f:7b:df:
         e1:1d:e6:ea:6e:a9:08:da:15:bf:24:32:67:60:4c:2a:da:02:
         95:9a:dc:13:24:fe:eb:e1:d3:39:dc:c5:8c:1d:16:31:7c:2c:
         71:30:e9:e4:fe:ba:2d:d8:8e:8f:af:bf:81:a6:36:58:3a:fb:
         86:bc:45:6e:1c:ae:b7:19:7c:07:ab:d0:74:62:7a:f3:2a:66:
         7d:43:75:07:31:f3:d3:d8:45:e7:5f:6a:b7:3a:eb:c0:21:75:
         d2:74:b1:11:88:6a:40:6b:ca:af:14:1e:5f:ff:8a:63:38:b6:
         68:14:1a:8f:5d:c7:1e:a3:27:9a:23:30:7f:e0:2a:95:ac:a9:
         66:26:2d:e0:2a:bf:ee:69:59:ca:62:02:77:09:66:ac:0b:e1:
         bd:46:b0:00:03:a4:14:0b:fc:be:db:61:90:44:2c:b8:08:a7:
         2d:90:24:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUFtLk6h/vc0WV8q2v9UqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0
NWQxNTgwHhcNMjUwNTAzMDMwMDQ1WhcNMjUwNTA0MDMwMDQ1WjAzMTEwLwYDVQQD
EygzNmFlMjgxMTI3NDFhMjcxYmQ2NzU0MzA1ZjIyYzRkYjI5MDRmZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIp/xLGC23mfgkyopqRyNGTMt0+u
g6+nvWjeEqM6kRstXKYxyF3SXaq9AULLnuQcZciRRmqCwE6QArPQY49/w3yhDjTb
CGeWwI1448asJ0SQvF5egCZT7+iTjAv5NXkg/Q4wA2fFcfzfZgl56aKG+qGqMCiL
a7sMbrCMZdEnhKgB6UYITV05ro4L3KMzJNkligL99/zzQdxv0CJJCaJlrkcS9pjL
umlEOKRBgPqI19LA0dXbD2jp++NnO6odwxX+3ufOn+EkOe3aMQW81LyFCqEt8lSd
zdQx1wHR/EvY9F8Drf83qXTrjesKzI42IrJoUZAoiwj9mV2JlDUrlifoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDauKBEnQaJxvWdUMF8ixNspBP2XMB8GA1UdIwQY
MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt
YWJhZWM4MmJkOGJiLzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi
LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3RUxNTl
hU9Dp/q9h4rHISVhhUr6iELS3Ob7WjbIVm02RFPsyoQdYrd9pDJD+oYKSlWKkwMJ
ZNq9MnEr0osJVgPRI+14ZnpI3t3oQ9Rlmsa0U3xqkSMbb3vf4R3m6m6pCNoVvyQy
Z2BMKtoClZrcEyT+6+HTOdzFjB0WMXwscTDp5P66LdiOj6+/gaY2WDr7hrxFbhyu
txl8B6vQdGJ68ypmfUN1BzHz09hF519qtzrrwCF10nSxEYhqQGvKrxQeX/+KYzi2
aBQaj13HHqMnmiMwf+AqlaypZiYt4Cq/7mlZymICdwlmrAvhvUawAAOkFAv8vtth
kEQsuAinLZAkWg==
-----END CERTIFICATE-----
Generated at Sat May 3 08:27:07 2025 by rpki-client