Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File:                     0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier:          Mn5yur7qkWV29yd/vfPx1wRYiXglZEr4KlBpu9E7j9Y=
Subject key identifier:   F1:59:3D:BC:B3:E6:6F:85:5A:D1:33:4F:10:61:75:DA:3C:3A:0C:55
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer:       /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial:       0196729D363816CD4E961BC5FBF0761DC227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number:          1525
Signing time:             Sat 26 Apr 2025 15:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:27 +0000
Files and hashes:         1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: 1BrZIBYgS5cDwSJPI7cYCIb4xltSZHh3GEhE9fbBAY8=)
                          2: 5OwJ7Nx9zd66LR5phaxL178se74.roa (hash: M1DO1OvN9ivfay+ywMfPxNgMiiNX3g+6vZbPpBB/BE8=)
                          3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
                          4: PFeWbSIp2oj_TqrDumfnTLH73EM.roa (hash: UcYYjAHi4KJALU4CMr3iLInfrvyna7odLqJtuWtrvBI=)
                          5: oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa (hash: sAQHwkiD2lZDCVsriC16YxE+OETBeSCkVF8S8rYbgnE=)
                          6: ot1seKuPr0VWOzaiRtogA4gk2L4.roa (hash: qGNUCx3dvdHGEqP5qtWndFudBrst3InkEgLzxymjhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:36:38:16:cd:4e:96:1b:c5:fb:f0:76:1d:c2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
        Validity
            Not Before: Apr 26 15:00:27 2025 GMT
            Not After : Apr 27 15:00:27 2025 GMT
        Subject: CN=f1593dbcb3e66f855ad1334f106175da3c3a0c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:20:92:ea:c3:82:c6:12:5a:91:ee:cb:12:
                    a8:84:49:aa:10:69:27:29:a7:92:15:7a:d4:ba:d1:
                    e3:de:0f:b6:a5:9e:17:c3:86:43:05:e4:9c:7d:3f:
                    95:8d:82:88:89:8c:07:37:68:e3:14:af:58:11:12:
                    46:a4:a5:9d:a7:4c:0a:94:81:6b:53:ab:39:d5:d3:
                    0b:56:ac:25:89:e9:3d:45:39:93:89:45:2a:1b:0e:
                    52:3c:c0:36:b6:fb:a6:e4:f2:04:5b:d4:90:f5:c5:
                    29:eb:ab:39:1d:92:11:b0:b7:24:55:5b:2f:a7:05:
                    81:11:42:de:0c:e4:62:e4:d7:17:8d:ee:6d:d0:98:
                    06:f1:2e:04:8e:a9:cf:fd:0e:fb:01:72:72:aa:48:
                    0e:1e:ea:cd:cb:1d:87:60:08:9a:ed:b7:7e:1d:63:
                    ba:80:ff:83:cc:ee:09:de:94:41:84:91:4c:b8:de:
                    f4:80:8b:93:1e:30:ec:b7:70:62:ce:f4:eb:a2:ca:
                    1f:1f:f3:d0:09:e4:94:75:21:ed:6a:5a:74:b8:9d:
                    40:5c:d9:f8:3a:6b:e5:d6:39:f4:76:f6:df:a1:5d:
                    f2:20:2d:6d:f7:dc:d8:d8:14:4d:60:ec:47:25:63:
                    4f:f3:a0:ec:35:27:ab:68:2a:a4:10:2e:a3:90:4d:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:3D:BC:B3:E6:6F:85:5A:D1:33:4F:10:61:75:DA:3C:3A:0C:55
            X509v3 Authority Key Identifier:
                keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:1d:1a:99:63:d9:b1:c5:67:d0:9d:aa:59:6b:9c:55:17:
         8b:f8:c8:5d:1d:35:43:4f:c3:fb:83:52:1f:2f:4e:ea:c4:14:
         3c:08:57:2f:f9:eb:af:b4:32:34:c7:fb:c3:ef:ee:47:2e:7e:
         40:3d:7c:73:b7:88:27:32:c2:c5:f3:08:df:68:03:d7:92:8b:
         19:89:66:f9:40:41:bb:0d:a3:82:b6:5e:a8:e0:4a:bb:77:5d:
         22:73:ea:ef:c0:07:c3:bf:32:d0:e5:9f:cf:9f:fe:c1:f5:55:
         ff:37:8a:4f:fd:70:58:86:0b:79:dd:b6:2d:ef:ec:59:c3:36:
         0c:be:bf:47:0e:a0:62:12:63:26:42:a6:1f:f9:a8:f2:e5:5f:
         0b:20:81:5a:76:fe:69:0f:68:58:fa:85:75:d5:64:23:ea:5a:
         2b:78:36:db:66:71:73:f0:05:4c:3c:a3:ee:8c:14:ca:62:0e:
         82:ed:26:9c:ad:fc:99:f0:0e:37:94:74:b4:19:43:ba:94:bd:
         a7:59:2d:96:c6:4f:72:9a:da:98:68:4d:9a:cc:44:a7:6d:0c:
         e4:1b:2d:94:35:b6:b3:8f:22:90:7a:ab:1b:2c:e2:74:ba:5d:
         ef:28:f5:64:0a:c8:20:07:02:08:11:c5:01:d9:cf:c7:12:c4:
         64:7c:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:46:43 2025 by rpki-client