Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File:                     pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier:          OBtcbVKkecFNTfz03nIm0EmjNAT9W2he7pzYngKlccE=
Subject key identifier:   0B:79:CF:3B:E0:18:A5:5F:EC:39:90:B6:C3:E8:86:55:AB:3F:8D:53
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer:       /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial:       01968A37C7D603A229448F10CDA51AB56C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number:          0BAE
Signing time:             Thu 01 May 2025 05:00:33 +0000
Manifest this update:     Thu 01 May 2025 05:00:33 +0000
Manifest next update:     Fri 02 May 2025 05:00:33 +0000
Files and hashes:         1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
                          2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: N2eACtSXUWfLQgeYvPweJfNCLp4x5mIGcT5/Pl1umwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:37:c7:d6:03:a2:29:44:8f:10:cd:a5:1a:b5:6c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
        Validity
            Not Before: May  1 05:00:33 2025 GMT
            Not After : May  2 05:00:33 2025 GMT
        Subject: CN=0b79cf3be018a55fec3990b6c3e88655ab3f8d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:70:c5:cc:7e:00:35:ef:07:7c:e0:80:be:
                    18:30:e9:7a:cb:79:4a:71:88:dc:34:91:0e:54:b0:
                    85:73:e0:88:a6:7c:37:44:e9:15:f0:dd:38:d0:f6:
                    e7:8d:ed:61:f5:06:13:0e:8a:0c:0e:8e:86:19:65:
                    f4:fe:ad:4e:7a:14:5c:24:2e:c0:56:f1:24:a7:ab:
                    96:f1:74:7a:85:09:e5:c6:d9:dc:dd:c4:67:2f:af:
                    74:31:9d:5a:ed:16:d0:73:c6:f8:b4:0e:60:77:a4:
                    79:6c:bf:c7:d6:50:e6:ef:cc:eb:e1:7d:e5:8e:8e:
                    91:7c:74:db:74:12:f7:64:55:9e:83:5c:e9:68:b1:
                    0f:8e:a8:89:c0:7e:ca:0a:94:dd:20:08:d1:eb:27:
                    ee:2f:60:4b:d2:f1:38:c5:45:a9:ef:d4:3e:db:38:
                    dd:f3:ee:41:ee:47:56:60:b9:0b:f7:db:07:db:22:
                    e9:2e:53:25:d4:3f:19:3b:03:14:62:f5:98:26:c1:
                    ec:59:41:b9:cf:dd:8c:53:dd:03:e0:bc:78:eb:97:
                    65:07:28:f1:2c:91:d0:36:7e:6e:db:00:fd:58:c7:
                    d8:8c:59:cb:76:d4:d5:b7:8a:3d:fa:3f:bf:c2:e0:
                    79:6b:d8:a8:ca:10:ea:f6:9d:1c:c5:b3:19:29:09:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:CF:3B:E0:18:A5:5F:EC:39:90:B6:C3:E8:86:55:AB:3F:8D:53
            X509v3 Authority Key Identifier:
                keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:d0:db:cd:cb:e1:28:74:44:e0:58:14:b9:9f:cc:f9:6c:
         8c:fc:03:5f:01:51:04:e4:60:b2:1a:62:83:14:28:fc:46:94:
         f8:5b:16:5d:23:ad:f1:5f:c5:ff:48:1b:d0:e6:d2:45:89:e0:
         23:16:48:72:b0:f1:75:e1:3e:d7:8d:2e:ae:6a:f9:50:f6:c7:
         56:ef:17:07:95:7f:db:de:12:f4:e3:f3:2e:2e:d7:e1:bf:5b:
         ee:da:6e:80:c0:69:48:87:bf:2a:30:33:b4:06:bc:84:0d:f2:
         98:bb:b7:39:9b:c6:88:10:ef:cc:f1:61:db:7e:ac:cf:c1:5c:
         c3:5d:ae:ed:26:02:3f:c1:ce:09:e9:28:a0:a7:78:4f:0d:58:
         b7:99:ec:cb:e6:ca:19:69:7f:5e:34:97:e1:f7:e7:39:d1:0a:
         25:06:2f:66:07:36:a7:04:05:0a:99:58:de:f5:e1:cc:6a:7d:
         f8:49:ff:92:6b:9c:94:97:bb:20:f7:34:19:de:cc:2b:82:be:
         f4:60:23:99:e3:7b:79:61:bf:03:6f:39:ec:09:3c:69:03:0c:
         42:d4:0d:0d:60:0e:f4:ea:4d:64:df:ce:5c:37:86:13:b7:4d:
         62:b4:b1:94:ff:45:c9:19:78:42:29:62:0b:51:07:97:81:36:
         0f:e3:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:32:24 2025 by rpki-client