Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          sFmhWmxMz1sS75yOs2uaIdPaAPWMiBg29KoDoaoA3bs=
Subject key identifier:   FA:67:49:FF:F1:40:C2:2F:D4:2B:05:BF:50:3F:DD:D8:E9:41:3D:DC
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       0196730B47A5A9B0A0C64173D26C120169F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          0FCB
Signing time:             Sat 26 Apr 2025 17:00:41 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:41 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:41 +0000
Files and hashes:         1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
                          2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: Kzz/Of7c7R9WIWotu/K+bQkaQV/uj3jC1WAHKeq38a4=)
                          4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
                          5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
                          6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:47:a5:a9:b0:a0:c6:41:73:d2:6c:12:01:69:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Apr 26 17:00:41 2025 GMT
            Not After : Apr 27 17:00:41 2025 GMT
        Subject: CN=fa6749fff140c22fd42b05bf503fddd8e9413ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:7d:44:06:ad:aa:fe:21:53:57:fb:3a:d1:
                    ac:b1:16:76:36:75:39:4f:ac:61:b4:bc:f3:33:33:
                    ce:94:c1:7d:fa:c1:26:6e:dc:35:bf:87:b5:da:e8:
                    c1:53:6a:59:52:ee:52:9f:bb:93:68:89:9b:d4:09:
                    4d:12:8f:dd:a8:25:ad:f2:ce:ae:d2:91:22:25:94:
                    57:9c:a2:08:cf:25:f6:48:ea:d1:6b:aa:a2:cb:24:
                    82:2a:4f:3c:a8:1e:77:a5:e4:67:0a:33:1e:bc:ea:
                    9f:8c:f5:43:0c:af:35:b3:46:74:55:cd:f2:84:e5:
                    69:02:f9:eb:b5:c0:6b:a1:01:49:93:47:ce:a8:3b:
                    83:66:8b:c9:9c:1a:b4:79:58:8a:2c:b9:6e:c2:07:
                    ae:f0:fa:65:c0:2e:ef:ea:2b:8f:f6:f9:b0:e4:cd:
                    98:3a:2e:20:96:eb:e3:1c:a9:65:02:0c:96:ed:ec:
                    94:c0:0e:c4:05:04:ac:26:84:e9:34:1a:a2:8c:31:
                    2b:6e:53:39:e0:de:f5:4e:ec:18:06:0d:24:19:54:
                    15:e7:8a:e2:c8:49:2f:b5:88:6b:1e:78:b8:9c:5f:
                    fe:57:f5:72:ca:d4:5f:36:8c:55:ef:c6:9a:10:b3:
                    d6:0e:fc:c4:00:df:5c:24:14:24:36:dd:d0:9e:90:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:49:FF:F1:40:C2:2F:D4:2B:05:BF:50:3F:DD:D8:E9:41:3D:DC
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:46:85:c9:c4:70:6d:2c:6d:cb:2e:20:47:9d:ec:b7:c5:2b:
         90:df:82:c0:ef:af:58:e9:96:5b:d1:eb:36:cb:1f:55:c0:81:
         d6:77:13:f0:4f:f6:d4:5f:9c:63:ae:5a:00:1d:b4:01:5f:d9:
         e4:fd:3f:9f:c1:69:1c:01:8a:ac:87:9b:27:76:1a:da:5b:91:
         95:5f:82:67:cc:a2:07:15:2c:05:cf:1f:7c:8d:21:ff:39:75:
         ad:5a:11:b7:13:07:6b:97:ec:01:1b:9d:25:dc:41:bb:f8:73:
         48:1b:4d:9b:70:c5:f1:bf:09:6b:73:0d:6e:32:6c:43:57:a9:
         81:dc:22:f2:1a:71:30:ce:26:e4:35:05:98:e3:bc:a3:b6:44:
         0a:79:c5:1a:a4:25:64:cc:42:ea:74:3a:95:3d:ad:c5:f1:3e:
         5e:37:f0:ab:02:71:d7:cc:e4:2c:82:ea:84:d3:58:49:6c:7f:
         1c:bb:4e:26:bb:e8:6f:9a:07:88:c5:8b:80:74:c1:02:72:ba:
         b1:ed:71:43:42:80:c6:b7:43:12:e0:3f:ac:37:d0:6c:40:3c:
         ae:b3:90:2f:30:c9:1e:3b:7b:d2:f1:59:3c:ee:45:4d:fa:ac:
         f3:ed:23:b7:7b:56:d4:95:f0:b1:5e:41:06:74:59:09:a3:3e:
         4b:43:cc:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzC0elqbCgxkFz0mwSAWn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw
ODIxZmQwHhcNMjUwNDI2MTcwMDQxWhcNMjUwNDI3MTcwMDQxWjAzMTEwLwYDVQQD
EyhmYTY3NDlmZmYxNDBjMjJmZDQyYjA1YmY1MDNmZGRkOGU5NDEzZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqR9RAatqv4hU1f7OtGssRZ2NnU5
T6xhtLzzMzPOlMF9+sEmbtw1v4e12ujBU2pZUu5Sn7uTaImb1AlNEo/dqCWt8s6u
0pEiJZRXnKIIzyX2SOrRa6qiyySCKk88qB53peRnCjMevOqfjPVDDK81s0Z0Vc3y
hOVpAvnrtcBroQFJk0fOqDuDZovJnBq0eViKLLluwgeu8PplwC7v6iuP9vmw5M2Y
Oi4gluvjHKllAgyW7eyUwA7EBQSsJoTpNBqijDErblM54N71TuwYBg0kGVQV54ri
yEkvtYhrHni4nF/+V/VyytRfNoxV78aaELPWDvzEAN9cJBQkNt3QnpBZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpnSf/xQMIv1CsFv1A/3djpQT3cMB8GA1UdIwQY
MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt
ODM1NTk5MjYwZmY2LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2
LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEaFycRw
bSxtyy4gR53st8UrkN+CwO+vWOmWW9HrNssfVcCB1ncT8E/21F+cY65aAB20AV/Z
5P0/n8FpHAGKrIebJ3Ya2luRlV+CZ8yiBxUsBc8ffI0h/zl1rVoRtxMHa5fsARud
JdxBu/hzSBtNm3DF8b8Ja3MNbjJsQ1epgdwi8hpxMM4m5DUFmOO8o7ZECnnFGqQl
ZMxC6nQ6lT2txfE+XjfwqwJx18zkLILqhNNYSWx/HLtOJrvob5oHiMWLgHTBAnK6
se1xQ0KAxrdDEuA/rDfQbEA8rrOQLzDJHjt70vFZPO5FTfqs8+0jt3tW1JXwsV5B
BnRZCaM+S0PMDA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:40:07 2025 by rpki-client