Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File:                     oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier:          lpeVRNCYSgKwYnb0bXozvtjxIygN++VHtPPPFtJoUXk=
Subject key identifier:   57:9C:B7:77:B5:F1:CB:EB:74:A3:FB:C8:27:D7:AA:2C:DC:A9:B6:C2
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer:       /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial:       019676B15CC0F66A7CED9E1A9173E551690E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number:          0259
Signing time:             Sun 27 Apr 2025 10:00:57 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:57 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:57 +0000
Files and hashes:         1: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (hash: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=)
                          2: 58QzCphRddJsBqi71H5oisOTtGM.roa (hash: K7oZA9oPzuB3kuDmCdohN1gPlNbeKKgYedD/MB4pxbM=)
                          3: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (hash: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=)
                          4: Qt9hOGMkdfDH8ID_bHwfLmJlE60.roa (hash: ARZiY2rT8rE43lKmT9EIHjzaS4HpYkA+YcbbFMZTS4E=)
                          5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: F1tUJOXfq+pqwOYTu5fDmqS3tz/7O516BiNEfqvv1pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:5c:c0:f6:6a:7c:ed:9e:1a:91:73:e5:51:69:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
        Validity
            Not Before: Apr 27 10:00:57 2025 GMT
            Not After : Apr 28 10:00:57 2025 GMT
        Subject: CN=579cb777b5f1cbeb74a3fbc827d7aa2cdca9b6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:c8:d0:e0:bd:3c:f8:09:1b:a2:24:54:59:
                    f3:1c:73:6b:ed:3a:64:a7:3e:41:ad:bc:90:a8:d8:
                    ae:ad:c0:c4:df:cc:02:b0:19:8d:1f:7d:2b:a7:cb:
                    04:10:31:01:e7:41:93:cb:27:bf:ae:78:53:03:0c:
                    de:82:a7:74:bb:a0:3d:e5:fb:9f:4e:0e:56:76:c8:
                    13:76:9c:85:24:99:a1:63:8b:1d:a2:40:0d:4d:e1:
                    5a:56:28:8b:67:50:1a:d0:83:cd:1f:5f:4c:64:cd:
                    61:f7:ba:13:d3:38:5a:d3:82:5a:60:d9:ce:68:94:
                    eb:69:6a:e6:e2:0d:b9:6a:14:20:1f:28:cc:f0:81:
                    cb:56:b3:91:0a:1b:2b:ae:10:8b:03:57:ac:f5:70:
                    fc:bd:34:06:14:fe:61:68:fe:ac:cb:41:ed:9e:b2:
                    09:e3:ed:20:1c:16:88:51:e1:d9:3a:7c:a4:03:bf:
                    ab:47:69:1a:04:be:bc:5e:1a:6d:10:bf:2b:d2:8a:
                    f6:d3:c6:27:68:36:b9:fd:30:ac:14:e8:00:8d:0b:
                    78:ae:7d:74:37:2b:8d:4f:f1:31:7c:25:b3:ac:73:
                    8d:ca:f0:58:eb:f3:1e:d4:63:09:72:a9:1b:74:3e:
                    0f:a9:32:2d:68:5f:e5:8a:bd:45:7e:2e:86:92:7b:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9C:B7:77:B5:F1:CB:EB:74:A3:FB:C8:27:D7:AA:2C:DC:A9:B6:C2
            X509v3 Authority Key Identifier:
                keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:28:93:cd:62:8e:9a:53:33:3c:0e:b0:1b:f2:48:14:52:e5:
         74:0a:f5:a3:5c:23:92:99:7a:eb:30:1a:20:b3:93:cb:ec:96:
         3d:49:47:1e:b2:ab:87:6d:e8:04:39:93:ae:35:5a:69:9e:79:
         28:d7:41:49:5e:42:e0:f9:1d:b6:30:e5:e4:57:36:48:15:02:
         01:e9:1c:7f:5b:b9:6c:d8:a8:10:99:f5:3c:fc:97:1a:9c:a5:
         58:74:46:67:c9:69:40:9c:da:06:02:ec:0f:55:40:b2:5a:98:
         fc:d7:32:c2:f8:0b:98:d7:b4:f5:26:ce:98:97:7f:61:a4:0d:
         9b:dc:8b:73:a1:c9:70:9a:d0:a5:5d:32:a4:d7:58:b6:fd:1d:
         75:cb:ef:ba:06:20:9d:69:bb:a0:6a:bd:24:cb:12:61:b3:94:
         bc:68:34:92:22:af:d4:09:f0:29:83:5c:35:1f:ab:71:ec:c9:
         5c:be:75:5a:38:2b:53:5d:06:b8:70:68:a2:f3:5c:3d:44:c9:
         0a:9f:17:db:c4:44:d7:e7:98:3f:52:be:20:73:d5:da:b0:fb:
         ca:5b:67:4d:e2:b8:c3:58:53:4f:39:97:dc:72:36:e7:60:c4:
         c7:6f:cc:8f:99:43:f0:0c:64:7f:a7:a6:56:a0:6f:eb:87:b9:
         d7:10:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:44:24 2025 by rpki-client