Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File:                     p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier:          TYb/iPNaR7eEKGMXXWmafuMAo1EJ/qQpWTXg2GgPV90=
Subject key identifier:   67:F8:CC:54:0D:16:76:9A:02:B4:89:F8:7A:FF:16:46:FC:84:97:45
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer:       /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial:       01967B6988FA2B9FBAC697E2168B297AA820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number:          0B19
Signing time:             Mon 28 Apr 2025 08:00:35 +0000
Manifest this update:     Mon 28 Apr 2025 08:00:35 +0000
Manifest next update:     Tue 29 Apr 2025 08:00:35 +0000
Files and hashes:         1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
                          2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
                          3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
                          4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: g2zdMJ9yWp12BVbUi/4kUW93GSwHEjXjvhmQw2FBHt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:69:88:fa:2b:9f:ba:c6:97:e2:16:8b:29:7a:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
        Validity
            Not Before: Apr 28 08:00:35 2025 GMT
            Not After : Apr 29 08:00:35 2025 GMT
        Subject: CN=67f8cc540d16769a02b489f87aff1646fc849745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:44:10:ae:e9:fd:43:30:df:91:fe:49:50:
                    b2:a2:98:eb:d4:16:a6:c1:7f:8d:4d:03:84:4d:45:
                    7d:80:c8:0a:53:3c:f8:20:fd:a3:1d:7f:cd:7a:2f:
                    16:9b:75:d0:66:33:5a:1f:98:a9:f4:bd:22:a7:bf:
                    a4:ca:81:7c:ac:19:b7:51:7c:9f:51:0d:9f:01:de:
                    06:39:3c:6d:25:69:e8:71:52:ed:59:da:a5:92:89:
                    d1:cd:f7:f6:70:d1:57:49:ed:b7:9f:3c:04:c2:da:
                    37:64:79:59:33:ba:72:d5:f6:1f:97:39:cb:78:95:
                    9a:dd:84:e4:7a:77:58:05:59:1d:34:7c:6c:4a:bb:
                    ae:35:23:18:ad:4a:ac:32:46:06:51:be:7a:bc:44:
                    80:6d:c1:72:39:99:57:30:d8:95:c6:de:2e:09:8b:
                    67:dd:04:38:6c:e0:1e:06:0d:b3:b6:e6:41:32:0e:
                    65:8b:a3:12:28:96:ea:5d:e5:05:55:91:fd:c7:50:
                    85:13:ec:87:f0:69:09:16:ad:5c:c7:99:04:b3:d5:
                    d2:8b:4d:ef:8e:13:09:4e:e2:65:a8:b5:3c:ce:8f:
                    ca:02:6a:bf:0a:01:8c:34:65:bc:01:bc:2b:59:13:
                    b2:71:bb:4c:3a:e8:40:c5:9c:7b:dd:5f:67:f0:76:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:CC:54:0D:16:76:9A:02:B4:89:F8:7A:FF:16:46:FC:84:97:45
            X509v3 Authority Key Identifier:
                keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:70:ea:15:06:df:5e:82:51:f9:32:f9:43:c3:45:89:0e:
         7e:81:72:68:03:f0:73:0a:d7:7f:0b:ca:3b:4c:05:f5:32:04:
         33:53:a0:82:36:62:05:fe:42:f8:d3:42:4c:3f:55:89:cb:5f:
         97:77:6a:8a:c9:57:16:69:19:e5:c7:59:97:ef:22:73:08:b3:
         21:d5:62:5d:41:b0:34:71:ec:e2:4d:37:07:3e:c4:dd:7c:b8:
         12:b9:37:ff:57:6b:da:91:a7:74:b3:be:eb:44:8d:9c:b0:47:
         77:02:f2:1c:c9:a4:38:6b:4a:c7:11:a1:70:05:3e:7f:df:7d:
         99:c1:55:df:12:26:bc:65:44:40:58:c0:ca:17:53:9a:ca:a3:
         bf:32:30:47:02:09:42:e6:44:3c:62:96:c9:29:1c:57:b7:01:
         30:c4:79:85:f4:f4:8d:8f:9b:ce:86:23:a7:ea:8a:4e:70:02:
         1c:b3:01:4d:5c:42:1b:57:f3:3e:34:4c:58:5c:f6:83:e9:48:
         1e:e4:0a:6f:0c:f2:3d:1e:7d:3a:13:43:23:59:10:34:01:0a:
         be:76:4c:27:42:32:39:51:ff:e2:f1:be:50:b1:e6:04:cd:35:
         98:f7:ee:74:cd:24:35:dc:96:6f:8f:b6:61:ad:73:fd:6e:88:
         10:3e:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:22:19 2025 by rpki-client