Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier:          ewiMJURXbR4bOfXjCk9FQyYXJeU2cXStIyG1VLU6k1E=
Subject key identifier:   86:27:E0:82:1B:92:93:1A:BE:CC:F0:71:7A:39:43:90:ED:5D:4F:C7
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer:       /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial:       0196767A3514B06A6542BC543B1A654B370F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number:          0CEA
Signing time:             Sun 27 Apr 2025 09:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:42 +0000
Files and hashes:         1: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
                          2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: AJfsYFzIiHfbBPGCR+p2PbuLjWcyt/b3LnkOqjOmLnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:35:14:b0:6a:65:42:bc:54:3b:1a:65:4b:37:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Validity
            Not Before: Apr 27 09:00:42 2025 GMT
            Not After : Apr 28 09:00:42 2025 GMT
        Subject: CN=8627e0821b92931abeccf0717a394390ed5d4fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:9a:b6:ec:88:f3:35:b1:46:1a:13:3b:0a:
                    89:ff:2b:ad:94:a5:65:1b:53:11:26:44:7d:b1:cc:
                    ec:f8:d4:b6:ce:15:4f:c2:03:96:84:54:ee:6f:22:
                    36:7e:99:34:30:8b:d2:09:35:98:37:5e:e2:d7:ca:
                    e6:7b:d8:49:7e:47:b6:f4:98:fc:84:cb:da:13:0a:
                    90:ce:66:a7:b6:5c:6a:70:4a:f2:e3:2d:e2:1a:97:
                    f3:79:80:1f:eb:db:f9:71:81:8b:80:15:0f:ae:35:
                    04:bb:32:2b:b3:bc:a4:ed:28:55:a3:37:04:b6:8c:
                    8b:30:f7:fe:7d:dd:6f:0d:9c:c4:8a:a0:f9:fd:91:
                    cb:07:2e:ae:84:13:f5:40:8d:ad:f9:d9:08:2a:64:
                    82:c7:2c:83:41:22:ef:e5:88:20:fa:2b:c4:76:c1:
                    3b:63:1d:61:3d:0d:6e:94:d7:88:fe:c3:b6:21:da:
                    2d:61:43:17:10:bf:0b:cf:56:41:98:a2:5e:fa:b7:
                    58:4d:aa:ee:78:2b:fd:4c:5f:3a:ac:2b:31:c8:3f:
                    6d:b7:b9:cf:2d:89:f3:b1:3e:a4:83:2c:5e:98:82:
                    d3:a3:e6:a3:47:4b:f9:1e:52:f1:41:70:ad:d4:a3:
                    8f:e2:4d:e8:33:99:fc:ef:a5:de:ae:b1:15:4e:69:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:E0:82:1B:92:93:1A:BE:CC:F0:71:7A:39:43:90:ED:5D:4F:C7
            X509v3 Authority Key Identifier:
                keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:93:6a:86:27:8d:98:a9:69:2a:75:dc:1e:6b:70:34:cb:07:
         1a:4a:ab:73:cc:a3:37:d2:a5:43:97:5c:47:f5:8a:27:f9:c1:
         46:28:50:52:ae:36:8b:f4:78:45:62:11:f5:5b:02:49:a6:59:
         84:79:49:e6:56:4d:38:55:2a:b9:97:c1:0f:7c:6d:8b:28:e1:
         d5:22:72:42:2e:a7:6a:e9:41:72:30:f4:9a:94:85:cd:03:1b:
         c8:5b:0c:c4:2f:8e:52:cd:fd:9d:5b:87:b9:e8:ea:56:9c:04:
         c7:0c:5a:b1:8b:2f:f2:35:72:03:0e:62:51:ce:f6:67:f1:c9:
         a8:38:61:35:1b:67:92:4b:06:18:b9:e0:74:d9:cd:bc:5d:cb:
         26:77:b8:4a:e1:ca:b1:78:b9:1d:c5:00:12:62:18:93:83:2c:
         07:4c:61:c4:72:4b:57:d7:f3:a0:48:16:93:ea:5d:27:dd:47:
         d8:36:c2:00:21:2e:ef:a4:dc:62:1e:91:4a:09:98:e9:e2:db:
         11:91:82:7b:be:45:81:c2:0b:97:d7:51:cf:8d:41:01:7e:74:
         27:de:2c:5c:e0:1f:c8:5e:97:af:e3:8d:6e:89:f4:bc:2d:ca:
         48:c6:0e:43:ee:29:6f:06:27:40:fd:1f:b3:a1:fa:2e:af:f6:
         6a:92:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:08 2025 by rpki-client