Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          Fel81oeJl8yXRTj59/8PBA/Mod5EfuGEvk8jpBb9U+Y=
Subject key identifier:   8F:92:99:F2:BD:12:83:A8:7D:17:B6:A1:6D:40:CE:A5:BB:50:6E:E7
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       01968A00BF620A4EE4A7CCC41AD5DCC57171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          0A51
Signing time:             Thu 01 May 2025 04:00:26 +0000
Manifest this update:     Thu 01 May 2025 04:00:26 +0000
Manifest next update:     Fri 02 May 2025 04:00:26 +0000
Files and hashes:         1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
                          2: ALdpivp7qzpUB5jnmeapFiwkGxg.roa (hash: 7MA0ajseX1lz/krgeoOJVgQJUF4DBwVOkQ4FKnVb0B4=)
                          3: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
                          4: MKBVu2pCivj1mQHtWcMiBwPYJdE.roa (hash: f/m/H35i91O331KWBkE4u+3LshQobWYiBGdA6MeOSGg=)
                          5: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: 6V3RNknueAuR9vG74MnR2XwLU+OiVn8joZ9fVhzRV6A=)
                          6: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
                          7: pz30gP5HXmvVhezEbR2M9x5jpYg.roa (hash: zMuCQqFnbVDZWipMHPrJQB2cNPEYXwDyxtFSxkBu5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:bf:62:0a:4e:e4:a7:cc:c4:1a:d5:dc:c5:71:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: May  1 04:00:26 2025 GMT
            Not After : May  2 04:00:26 2025 GMT
        Subject: CN=8f9299f2bd1283a87d17b6a16d40cea5bb506ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:5a:e1:53:34:b3:b4:4b:bf:e6:60:8d:2c:
                    a2:e8:ed:8c:d9:b0:91:59:ad:d1:9d:c0:bf:c1:9c:
                    6c:ea:7d:96:5b:7b:0c:20:ea:d3:04:8c:58:07:d9:
                    af:a9:ba:ff:d7:47:70:43:0f:1b:1a:9d:cc:90:6d:
                    d5:c3:e3:86:17:95:ae:3f:b6:75:a5:fb:62:f1:38:
                    7f:d4:45:a6:2e:25:f6:e5:c8:e7:45:60:e3:d2:85:
                    1a:f5:ac:4e:4d:c0:e0:f5:1a:75:77:ec:67:4e:ce:
                    3d:f5:19:9c:da:6c:e3:17:d9:66:71:5f:a6:68:8b:
                    58:ea:7d:79:54:46:1f:55:6e:ab:a9:dc:6f:83:3d:
                    71:3a:f2:26:47:29:b6:6f:ca:bc:c0:3e:ce:43:64:
                    8a:c7:17:ca:c3:8d:69:7d:02:ce:b4:b8:6d:2e:78:
                    81:eb:e7:6f:e5:66:76:a0:8e:e4:52:b2:32:d3:1c:
                    6b:00:d4:7e:ce:dd:13:4a:26:58:a3:4a:89:39:67:
                    2c:84:ee:30:22:09:ff:58:d5:70:8d:cd:b1:56:b7:
                    26:7b:fb:e2:e1:a8:e6:f2:d9:4e:2f:87:17:71:75:
                    de:ef:fb:e6:53:24:c1:f6:c6:ef:f6:34:ea:5f:ac:
                    8e:dd:bf:59:57:53:63:fa:95:a2:19:32:39:16:09:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:99:F2:BD:12:83:A8:7D:17:B6:A1:6D:40:CE:A5:BB:50:6E:E7
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:cf:5f:9b:b1:b6:9f:b6:e5:ef:60:01:bd:9f:ed:5f:f5:
         91:18:c7:85:df:6f:99:5d:d9:50:2e:ae:d3:dc:c5:1e:82:4f:
         60:ac:30:95:86:f1:3c:72:c9:27:ed:b7:7f:95:2d:db:3e:dd:
         d2:72:b7:e3:cf:3a:a4:b5:63:ba:15:f3:ff:70:b3:d6:8b:49:
         77:79:7c:6e:f9:93:39:69:73:56:a2:70:d3:b1:10:e9:be:5d:
         cf:85:97:1f:16:1a:ff:d7:b8:4a:b2:92:a0:cb:8f:56:91:d5:
         b6:70:19:84:cc:db:d7:7e:3d:1d:45:dd:03:35:2c:93:e9:a6:
         41:cd:dd:d9:87:43:4d:6a:ee:01:59:f6:98:be:1a:3b:ad:1b:
         76:3b:e4:27:23:95:03:e0:62:f5:6a:35:95:f5:1e:ed:67:d7:
         ed:7b:24:a6:91:6b:f8:fa:ff:51:4b:62:78:c3:a6:a2:78:f3:
         d1:5d:b5:21:d3:aa:0b:8e:a4:c4:87:22:2b:60:81:f7:bc:3b:
         ca:cb:2e:bb:fa:f2:2c:70:bb:53:48:06:3c:35:39:ae:47:c4:
         3c:54:2e:82:15:9f:8d:2c:ae:93:5d:88:ed:4f:b2:d4:15:49:
         b2:0e:b6:11:e7:a7:3b:d7:79:ae:7c:9c:af:1e:25:9b:73:29:
         12:62:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:31 2025 by rpki-client