Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          zdzFMA07/uk7slU3IKfRa4F6KEU51ex7gWSH1w8SHOk=
Subject key identifier:   46:1F:C2:CE:EF:2C:0E:94:70:F8:08:BF:2B:0A:2A:51:85:F1:ED:23
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       019672660C63C5E36A82FB46073BCBFF0206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0EE9
Signing time:             Sat 26 Apr 2025 14:00:12 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:12 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:12 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          3: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          4: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: aHO5qdTg+VomCLjPEV/ThM7iZjt72x22g+V5L1xK4ys=)
                          6: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:0c:63:c5:e3:6a:82:fb:46:07:3b:cb:ff:02:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Apr 26 14:00:12 2025 GMT
            Not After : Apr 27 14:00:12 2025 GMT
        Subject: CN=461fc2ceef2c0e9470f808bf2b0a2a5185f1ed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:df:ee:c7:36:a9:52:4d:38:6d:6e:9b:39:
                    aa:2f:8f:cb:4e:be:f3:6d:cc:bb:43:48:02:93:01:
                    65:dc:4c:84:20:dc:2c:a6:93:66:7f:fe:7c:87:63:
                    54:a5:ce:87:40:7a:87:60:e6:21:65:54:c1:72:c7:
                    65:a4:81:d7:69:2e:81:6f:8f:dd:15:92:95:84:6e:
                    11:ed:25:dd:f5:a5:a9:1c:d2:63:e4:7c:1a:d7:0d:
                    6a:6e:93:69:d1:81:4a:15:62:f3:ba:18:08:63:87:
                    ea:7c:f3:c3:cb:e8:92:55:99:6c:56:18:32:29:02:
                    67:38:a4:52:32:3f:ce:67:bd:b1:f6:ad:f0:8a:d3:
                    22:72:e0:ea:4b:15:a0:89:09:d8:58:34:12:bb:02:
                    a1:ab:95:02:1d:56:6d:ea:38:6a:a5:c2:01:32:ea:
                    91:32:2a:67:28:92:ec:99:c3:93:a4:43:24:59:8d:
                    93:dd:f6:3e:dc:e3:fa:36:44:cb:16:81:08:5f:e0:
                    71:68:6c:de:7c:0d:1f:29:75:a2:85:c7:b0:34:b9:
                    51:c3:29:3b:0c:95:90:46:19:64:26:16:8b:60:2d:
                    8b:dd:af:a0:ad:60:fc:e7:87:4d:05:71:1b:27:dc:
                    19:33:0c:3b:62:a6:e6:67:4f:14:a2:26:45:d3:78:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:C2:CE:EF:2C:0E:94:70:F8:08:BF:2B:0A:2A:51:85:F1:ED:23
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:06:3d:62:b4:75:d4:1f:0a:b3:49:54:9a:5c:a9:1d:6e:
         bd:19:b3:50:18:e3:c8:70:22:6d:38:26:92:ff:7d:f5:d9:0e:
         7f:94:f3:48:dd:cd:8d:39:8f:a7:85:8a:2f:7c:2f:d9:3d:26:
         96:7a:df:a8:b0:94:d8:75:6a:e2:7d:2d:b0:1d:44:2f:1a:56:
         8c:c8:6e:a1:41:f6:3e:7e:89:c2:8f:f8:32:14:d5:01:24:69:
         f9:2c:ad:1e:21:2c:16:a6:fb:23:2b:c0:0b:6d:c6:d4:c7:b7:
         da:58:6b:e9:83:bc:c4:bc:31:06:98:d4:75:3b:a8:04:d9:0e:
         b9:fb:75:38:56:62:17:4e:29:21:ae:d2:cd:a5:68:87:7e:d0:
         fd:86:03:f8:a8:da:98:cd:07:cb:bf:af:fa:85:f9:7e:75:e6:
         4a:9c:9f:41:bf:41:1f:50:2b:89:a7:59:06:fb:51:1d:f5:c4:
         01:05:43:da:a0:f3:4c:a2:31:3c:a9:d7:fb:ed:0f:54:a5:7f:
         18:10:77:60:0b:58:b7:15:f8:1b:7c:01:73:08:76:d6:54:2a:
         2a:00:94:bb:6f:28:f1:78:a4:3f:04:b8:b3:ef:63:1d:49:2d:
         55:8a:e8:9a:cd:3b:15:2e:2c:fd:16:8c:94:f2:b5:d9:b4:69:
         79:bc:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:30 2025 by rpki-client