Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          Jgf0FHpr4dacrGCJMBtm5gb9+lpAyy7ct4eRccoPxbY=
Subject key identifier:   B0:66:01:DC:FE:84:FC:6E:28:FF:3B:0E:CE:DA:B9:4F:CD:5A:9C:FC
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       01969295F4AB838CD6AC3F4F78E8B1FF40B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          083A
Signing time:             Fri 02 May 2025 20:00:23 +0000
Manifest this update:     Fri 02 May 2025 20:00:23 +0000
Manifest next update:     Sat 03 May 2025 20:00:23 +0000
Files and hashes:         1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: gnL+Pkdx0AlY8O4wuWiFNQCHrKVNjjFmxlVwnzMwSgo=)
                          3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:95:f4:ab:83:8c:d6:ac:3f:4f:78:e8:b1:ff:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: May  2 20:00:23 2025 GMT
            Not After : May  3 20:00:23 2025 GMT
        Subject: CN=b06601dcfe84fc6e28ff3b0ecedab94fcd5a9cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:b1:87:3b:40:73:c5:22:2f:c1:14:f9:31:
                    34:56:52:f4:a2:93:da:34:71:77:bf:00:48:db:6a:
                    47:0f:ef:3a:d4:e9:a7:92:19:a1:b3:5f:f2:9f:17:
                    20:9f:67:9c:b8:c8:7e:45:f4:d0:c8:5d:33:ca:58:
                    7d:3c:3e:46:4a:57:13:73:dc:be:f0:ae:9d:43:b1:
                    78:03:6e:dc:c7:5a:fb:02:af:ba:ac:1f:8d:5a:42:
                    2d:0f:fa:02:e3:92:b3:59:a6:58:e9:01:2c:3a:60:
                    d9:26:fc:e2:42:85:61:61:8b:6b:63:eb:96:13:e1:
                    1e:8a:18:ce:b8:52:ee:0f:0a:4d:6d:0d:91:93:be:
                    e1:6e:c5:ca:e6:7b:8a:f1:75:c6:e7:f6:e7:8c:ff:
                    7d:87:f3:c7:fe:e0:bf:85:a6:14:e4:30:3d:0f:4f:
                    90:9d:da:6e:e2:9e:db:9a:85:5c:32:26:27:81:67:
                    66:72:c7:68:5b:a1:f3:12:78:55:fb:a4:81:95:c7:
                    34:5a:43:1c:ff:0d:84:d0:57:d5:eb:71:9a:f0:f0:
                    8f:32:e5:09:88:5c:a7:e9:15:67:9a:53:a3:1a:43:
                    5f:e2:5a:d8:be:01:3f:7f:68:a9:9e:2c:d5:2d:df:
                    14:cf:b9:85:d6:b1:0f:ac:91:1f:4b:30:1f:f2:1c:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:01:DC:FE:84:FC:6E:28:FF:3B:0E:CE:DA:B9:4F:CD:5A:9C:FC
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:ff:fb:d9:96:91:7f:32:b6:d5:92:6a:53:4f:e2:2f:c2:
         c4:1d:e1:e6:36:d9:70:25:c5:45:4a:7d:54:a8:82:4a:6a:b4:
         79:3b:30:a6:24:73:e6:e5:a5:74:59:a7:68:39:fd:32:b8:0e:
         f5:bd:fa:cc:5b:6a:9c:5c:6c:43:57:42:de:d9:1c:59:a6:79:
         6d:7e:3e:10:c7:40:04:5e:32:0d:5d:26:0c:84:fe:a2:80:dc:
         d1:2f:5c:59:84:f4:94:1a:4b:08:fc:b7:94:ba:c8:ba:df:79:
         dd:0a:4b:29:e3:07:be:ac:b3:65:62:09:18:57:6a:22:16:ec:
         c1:1a:4d:5a:d4:a7:ed:08:78:0b:25:5f:ef:e2:ca:59:97:97:
         91:22:58:93:9a:5f:3d:ea:08:d1:07:30:d1:a3:41:4c:cd:01:
         0b:dd:b8:8a:1d:7c:12:af:70:de:14:f2:bd:17:9c:2b:61:47:
         c7:89:8c:f5:54:e8:92:e1:67:38:74:ef:2f:bb:bf:f4:fa:9b:
         5a:15:ec:6f:ef:2a:96:00:e2:e1:69:63:18:b2:74:6f:b6:66:
         d5:88:4a:4c:d3:d5:a7:c9:ba:8a:7c:ae:04:e0:f1:56:fb:c0:
         91:9c:7a:fc:b0:b7:e9:6b:3b:a5:2c:bf:1a:7d:45:7a:1f:2a:
         92:85:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:26 2025 by rpki-client