Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          tLllwtiN+BGnvaV/cqNur59bZRbv1UxyvuWkKV4du5M=
Subject key identifier:   02:DF:DB:F4:97:7E:EB:C6:11:41:1D:E9:A5:5C:3C:9C:11:10:0E:DE
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       019677FB92A4E64A5ABBE62E7AA3A645C342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0A69
Signing time:             Sun 27 Apr 2025 16:01:37 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:37 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:37 +0000
Files and hashes:         1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: YlZu5W3JPzJGRyAtSN8jykCLHQQITOu0SFljHUyA1z8=)
                          2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:92:a4:e6:4a:5a:bb:e6:2e:7a:a3:a6:45:c3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Apr 27 16:01:37 2025 GMT
            Not After : Apr 28 16:01:37 2025 GMT
        Subject: CN=02dfdbf4977eebc611411de9a55c3c9c11100ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:a1:ee:07:1c:03:ae:c9:92:3f:47:70:39:
                    82:19:04:fc:91:1f:64:c2:f6:fc:cc:97:76:1a:c4:
                    e5:16:5b:a0:c4:84:4e:a2:f3:5f:d5:57:22:55:a3:
                    24:b2:65:e3:3c:86:0f:7a:c9:f4:d7:a2:52:83:c8:
                    1c:cd:78:3c:55:18:89:cf:cf:01:c3:2a:5b:a1:84:
                    96:3f:fd:5b:4a:ca:e9:5a:cb:d0:aa:f4:d4:44:74:
                    d2:0e:a2:45:d1:e0:89:39:d9:ab:c1:a2:a9:0f:1c:
                    4d:82:36:5b:6c:3b:3e:21:98:13:5d:ca:03:a9:98:
                    12:f3:ed:51:fb:f9:7b:55:db:7d:67:ba:52:9f:76:
                    2d:30:bc:04:d5:20:60:4d:f2:64:7a:e3:4f:f6:09:
                    30:c8:18:76:e3:eb:de:23:e8:89:73:d6:d6:51:87:
                    28:43:5b:45:eb:ea:72:ac:f9:b6:d2:37:e7:57:06:
                    22:d1:5a:d5:5d:44:20:17:be:19:52:f6:13:70:eb:
                    84:a0:76:e0:14:78:a8:b2:6d:bb:21:21:57:66:28:
                    f8:85:e4:b6:9c:46:b3:72:1c:f2:bc:a0:02:d6:af:
                    c2:16:5c:ab:42:52:1e:f9:c3:a3:25:8c:ae:39:85:
                    1a:00:87:71:29:80:3e:ef:8a:1e:e2:e7:a9:ee:c0:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:DB:F4:97:7E:EB:C6:11:41:1D:E9:A5:5C:3C:9C:11:10:0E:DE
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:3c:b8:e2:73:84:ab:42:7e:08:78:dd:ce:9e:d9:a2:94:
         9b:7b:97:95:50:41:ef:65:e8:a4:70:40:4a:0a:71:fc:03:9b:
         23:17:32:a9:43:f2:85:db:64:04:0d:76:e9:e3:ff:da:cd:e1:
         32:f3:21:28:1b:3b:7b:9f:a7:35:f6:76:73:c4:60:d8:07:16:
         25:b1:28:ab:d2:42:92:ce:50:8f:b1:3a:30:f4:21:c1:67:a8:
         fb:dd:4e:ee:26:83:ff:b0:dc:a2:8b:3e:22:3b:3f:aa:d4:2c:
         67:0f:bf:f5:d5:a1:5f:4e:65:78:4c:b1:ef:2d:be:e9:39:fe:
         95:fa:77:2a:4d:cf:3c:aa:aa:2a:4c:1f:37:5d:d8:53:60:07:
         b3:16:6c:3b:19:92:ba:65:31:75:8d:64:31:d9:c6:ca:15:8d:
         b2:37:46:2c:b6:54:dd:6e:29:da:6c:71:bb:50:f7:ae:7c:03:
         95:20:f9:f1:73:ca:4a:4f:36:1e:00:78:90:4c:be:8d:82:7e:
         17:81:e7:e1:7c:2c:ba:c6:f6:bf:95:e1:3d:c0:ff:6e:fe:a8:
         5c:e5:24:85:50:54:9e:d0:f1:22:35:4a:f0:ad:67:dd:08:25:
         ed:8d:bb:b6:72:f7:07:ef:5f:5c:e5:ab:fd:08:be:03:64:3b:
         84:14:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:30 2025 by rpki-client