Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          UT6cIbW7/cGEa7r0tYUDg2Wjgwsm+uG7uURbj9qvWWI=
Subject key identifier:   4A:D1:87:1C:0E:E2:42:EE:3A:B0:BE:05:AE:2F:CF:9E:65:C0:3D:FD
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       01976C2AE0E1F85DA21A656B5A8BFACE44AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          0898
Signing time:             Sat 14 Jun 2025 02:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:38 +0000
Files and hashes:         1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: KTGZS9Xfc+03cmKPv7rYKaBwLFWVMUtX94qnjOunuSI=)
                          2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:e0:e1:f8:5d:a2:1a:65:6b:5a:8b:fa:ce:44:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Jun 14 02:00:38 2025 GMT
            Not After : Jun 15 02:00:38 2025 GMT
        Subject: CN=4ad1871c0ee242ee3ab0be05ae2fcf9e65c03dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:6c:57:86:f2:4f:f1:d5:13:e1:71:20:bb:
                    6a:4f:12:91:c9:de:19:55:fe:61:80:64:b3:e7:42:
                    e0:45:e9:3e:3b:d4:27:17:19:ba:95:7c:69:0b:2e:
                    ac:a3:80:02:80:41:15:f3:6c:2f:c0:df:dd:f2:c0:
                    8d:e1:24:b8:b5:33:72:70:c2:94:d9:0c:8a:ea:54:
                    01:d4:f4:07:9e:ed:37:07:e5:0a:67:12:80:cf:b2:
                    fb:79:9d:20:a3:e3:f8:16:97:ac:df:d0:69:11:30:
                    7d:33:21:db:2b:e9:f1:bb:7e:b4:ba:b0:4f:1d:39:
                    c4:11:ba:21:a3:eb:fb:ab:4d:d3:78:02:89:21:32:
                    fc:7d:98:ef:86:3a:7d:ab:71:d2:1e:07:56:85:67:
                    3b:87:92:7f:60:de:58:78:f4:65:69:98:af:83:f8:
                    b9:cd:79:4c:f3:74:96:61:19:0d:75:39:1c:cf:9a:
                    6f:bd:5a:c4:f6:87:f8:65:24:a6:5f:02:7a:1c:3d:
                    10:a8:c4:fe:a2:47:60:6e:6f:9d:1d:8b:e3:40:e0:
                    c6:7b:cc:5b:fb:fb:18:a6:ad:bd:81:85:b5:95:29:
                    28:8c:b9:8c:80:3a:d2:f0:8c:38:56:1e:7b:d0:25:
                    7b:d4:06:85:fc:f9:df:56:d1:06:cc:e3:2a:76:cb:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:87:1C:0E:E2:42:EE:3A:B0:BE:05:AE:2F:CF:9E:65:C0:3D:FD
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:2e:85:d3:6e:55:ba:36:71:cd:bf:96:81:e0:29:21:02:
         ef:b6:79:86:32:0f:45:42:0b:8d:00:9f:b1:f3:cf:c8:37:3a:
         e5:72:88:fd:5b:35:68:02:7b:3a:3d:dd:51:54:26:6d:81:58:
         49:45:83:a8:9d:aa:84:b8:30:cf:b7:00:23:17:af:81:98:3d:
         ac:ec:db:5e:f9:54:5e:52:e2:34:e2:cf:59:c7:68:c2:80:8e:
         38:8b:01:af:72:40:41:6c:0f:f1:cb:58:48:49:08:f3:ad:0c:
         60:01:f1:d2:72:33:e5:56:50:86:a0:59:60:cb:e6:9e:de:37:
         2c:9d:b3:e1:36:95:5e:d4:90:15:f4:2c:d7:40:58:1b:fd:e2:
         0c:02:7e:a5:84:38:82:86:74:bb:1b:40:25:12:19:ff:e0:78:
         cb:49:0b:e3:41:e4:de:e5:35:96:b5:a4:30:a6:9e:29:9d:1b:
         74:fb:6e:7e:6f:6c:d9:73:32:62:15:d0:a8:8e:b8:a2:99:1e:
         c2:2c:71:97:69:4b:cb:6b:83:4d:2d:e8:42:3e:97:35:79:8d:
         e7:8f:4d:ce:e5:00:dd:15:9b:a4:46:d9:d1:05:67:55:63:00:
         57:e7:2a:3d:5a:e7:94:fe:e6:f0:e2:eb:f2:a3:53:cb:22:74:
         6a:92:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:20 2025 by rpki-client