Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File:                     o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier:          g+iu7r/WxyUpi/3FdxKZJecg5IRnlZnqnT44LTJR3bc=
Subject key identifier:   0D:21:37:D2:84:F9:A8:1B:BD:2D:D6:B1:5D:E2:9D:01:20:6E:06:45
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer:       /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial:       0197703E8B599B4888B6109D8FD7848A7BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number:          0481
Signing time:             Sat 14 Jun 2025 21:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 21:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 21:00:36 +0000
Files and hashes:         1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
                          2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: WmEyL65RN8IOElzx2MAc7Ep9RR33aqZlq8BPXrBM4HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:8b:59:9b:48:88:b6:10:9d:8f:d7:84:8a:7b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
        Validity
            Not Before: Jun 14 21:00:36 2025 GMT
            Not After : Jun 15 21:00:36 2025 GMT
        Subject: CN=0d2137d284f9a81bbd2dd6b15de29d01206e0645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:30:75:cb:c5:54:19:9f:31:ae:ca:c8:07:
                    dd:e4:15:95:dd:a0:8a:9f:bb:f1:54:d0:07:0c:04:
                    3e:71:a0:c5:3f:a1:60:2c:5e:29:5e:0f:bc:4d:13:
                    b6:40:d9:56:a1:a5:1e:66:5d:cf:d3:90:2c:74:f0:
                    07:98:76:2c:a3:2f:4f:b1:03:a0:68:65:02:d4:40:
                    6d:a0:99:fc:60:40:f2:71:16:1f:6e:d6:69:e4:75:
                    ec:f3:92:66:ca:4c:fa:68:51:d5:a3:72:71:4b:ee:
                    c5:69:ea:af:bf:a3:70:2d:7e:ca:a8:de:42:c8:6e:
                    0e:57:af:6a:35:27:39:e6:79:66:cd:1f:d9:d8:3a:
                    70:31:9e:9a:00:75:fa:0a:b0:53:35:4e:2c:c5:79:
                    85:0d:73:97:d8:91:49:6d:bc:9e:84:51:f8:89:63:
                    5d:e6:ea:a9:ab:61:d0:70:1f:3b:ef:81:a1:7b:bd:
                    f1:80:75:59:33:bc:70:43:97:4d:ce:19:66:d9:a9:
                    57:15:e2:22:85:4f:fd:57:18:4b:42:58:86:6a:01:
                    45:49:ff:86:35:9c:c0:4d:0a:e6:02:a2:5e:01:d9:
                    4d:b5:32:81:ba:00:6e:ab:52:1d:11:e2:0c:3c:ea:
                    7d:b0:ac:a4:ad:97:92:1e:00:6b:cb:6d:25:95:17:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:21:37:D2:84:F9:A8:1B:BD:2D:D6:B1:5D:E2:9D:01:20:6E:06:45
            X509v3 Authority Key Identifier:
                keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:90:72:52:29:ad:bf:a7:53:ab:e3:fe:51:24:10:83:ba:
         02:7c:58:93:e5:2d:03:34:7d:c5:a5:29:ff:78:12:68:e7:54:
         f3:dc:b9:61:4d:c9:99:b7:d6:bf:db:68:16:81:ee:6f:38:d1:
         81:b8:04:07:70:fb:6c:48:3a:39:ca:da:39:02:f7:52:86:8d:
         37:29:6a:1a:bb:f5:0d:92:91:39:17:25:fe:08:ae:9c:96:94:
         9f:36:74:57:cf:c2:a5:2a:32:1d:4d:f8:d1:cd:94:b4:81:51:
         38:8d:27:fd:b7:ca:74:cd:25:7f:66:2f:3c:3c:de:f7:4a:5b:
         45:73:c0:80:67:56:69:73:42:45:1b:be:bc:3a:4f:98:d0:5e:
         4d:62:c6:d3:87:be:56:18:6d:12:ce:3c:22:d2:ee:be:2e:54:
         d3:9c:79:10:e0:0e:05:ca:b6:7c:6a:08:18:ca:62:ea:e4:8c:
         0f:fa:5d:9c:5e:56:2a:29:bf:4c:65:e6:6e:da:8b:80:3f:29:
         22:ed:8f:c8:83:6b:8c:af:79:9a:8c:59:30:d7:9a:42:4f:f7:
         a8:98:99:27:c7:de:8e:7e:e1:f4:3e:1c:89:0b:d8:ba:b1:f7:
         ca:9c:46:fe:dd:5d:26:1f:91:3b:7e:3a:bb:f2:d4:3a:b2:db:
         e5:4e:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:55 2025 by rpki-client