Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File:                     O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier:          VI63r4UL/YmzKr/xC6lT9YfIKjsgp7Ht8djKGR3tvQE=
Subject key identifier:   F6:4C:26:F8:33:CE:F5:6C:AE:77:2B:08:22:19:FD:6A:39:F9:ED:74
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer:       /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial:       0196B935F2BC23EBD77CE700BE9A2057CA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number:          0E02
Signing time:             Sat 10 May 2025 08:00:42 +0000
Manifest this update:     Sat 10 May 2025 08:00:42 +0000
Manifest next update:     Sun 11 May 2025 08:00:42 +0000
Files and hashes:         1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: EPk4jA9C8jBqawt+hlxQbAav6YuyL5ofoRf0aC+D+8o=)
                          2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:f2:bc:23:eb:d7:7c:e7:00:be:9a:20:57:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
        Validity
            Not Before: May 10 08:00:42 2025 GMT
            Not After : May 11 08:00:42 2025 GMT
        Subject: CN=f64c26f833cef56cae772b082219fd6a39f9ed74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:5c:93:21:cb:11:35:eb:ab:ab:57:ac:7c:
                    3b:01:da:0c:fc:85:5e:12:93:c7:de:cc:dc:9a:e0:
                    53:e1:38:d0:75:bf:af:30:c3:27:e7:09:96:b9:7e:
                    2c:5f:5a:3f:c2:a4:50:40:26:bd:5d:28:74:d9:3f:
                    0a:5e:7b:c9:4b:48:89:dc:1e:e9:0c:2f:1e:3e:09:
                    97:05:b6:13:f5:1d:ba:ec:cc:7b:cc:d3:a0:ec:6e:
                    c7:e1:19:f5:88:51:49:99:43:81:6c:1f:e0:6a:60:
                    ff:17:26:4d:d3:04:69:a2:27:91:1c:18:ad:26:90:
                    43:d0:61:85:89:9d:b6:ce:ba:5f:27:91:b5:99:61:
                    91:c2:7f:36:07:32:34:85:72:99:ae:a4:78:70:bb:
                    b0:7d:9e:5c:35:16:1c:9b:6b:a4:40:ce:09:1d:c4:
                    7e:1d:5e:59:24:f5:48:4a:33:b9:cc:5d:4f:e6:b7:
                    27:af:b0:c2:a9:04:f3:15:ad:ff:26:ac:f9:93:bc:
                    9b:bb:de:e4:56:43:87:08:1e:c4:24:05:3b:f5:3b:
                    c9:41:13:25:4a:71:78:0b:c1:7e:6e:4b:90:27:8a:
                    64:29:86:d2:4f:fb:27:b1:20:55:7f:4a:b5:cd:08:
                    d6:d3:54:f6:20:63:da:60:af:36:f4:64:e5:5f:a5:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:26:F8:33:CE:F5:6C:AE:77:2B:08:22:19:FD:6A:39:F9:ED:74
            X509v3 Authority Key Identifier:
                keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:54:5a:a4:60:77:1f:e1:96:2a:78:3c:89:9e:7d:23:1c:
         f0:7b:7e:70:36:a5:f4:f7:ea:87:a4:0f:0e:69:7c:f8:83:e8:
         00:18:8d:b8:2a:84:71:17:c6:57:7c:71:1f:9e:28:e1:9a:47:
         6a:21:47:8e:a1:78:99:1b:c3:67:73:ea:c4:af:1f:99:37:ad:
         80:a8:78:04:10:2c:b0:9b:43:61:a4:96:7b:52:35:04:25:b1:
         e0:ac:ce:8a:cd:9f:6a:ac:e7:9e:0b:ec:a2:44:1e:2f:ca:85:
         cb:9e:6d:b4:14:35:8b:75:f3:0f:3f:17:7f:12:b1:4b:a9:06:
         3c:d8:7a:60:38:f7:ee:40:66:ef:d4:0d:1d:56:4d:05:b1:e7:
         67:c9:07:c4:a0:bb:26:f3:94:23:84:7a:f7:61:09:18:90:83:
         cc:24:29:47:b9:9e:61:c0:74:36:a9:75:39:63:43:3e:43:ff:
         8d:0b:0d:3d:2e:53:e8:7a:84:7c:92:e2:39:ae:df:22:3a:04:
         bf:b4:45:54:18:88:58:66:3d:60:57:51:34:e2:bd:e4:f9:65:
         17:a3:3d:df:6e:62:56:c7:86:76:2b:58:ba:a0:a5:8a:b6:c3:
         61:1f:75:1c:c9:ae:26:0f:3d:92:58:07:61:3a:6c:03:bc:cc:
         3e:86:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:00:26 2025 by rpki-client