Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          ED6Cf5c+a4ussoRvrGqY5qXOxXSQ/qL4qRUruRWUv1M=
Subject key identifier:   C6:33:D3:F9:11:0E:EB:85:26:67:D7:33:EE:D2:E7:8E:D4:E9:26:B8
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       0196A61CE362AD8D6A8C0A0B592F154F46FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          152F
Signing time:             Tue 06 May 2025 15:00:33 +0000
Manifest this update:     Tue 06 May 2025 15:00:33 +0000
Manifest next update:     Wed 07 May 2025 15:00:33 +0000
Files and hashes:         1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
                          2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: 9rQPUW8gKEHxABNdjcrXmTYNQgHB9KWNBCeWyD/eruc=)
                          3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
                          4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
                          5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:e3:62:ad:8d:6a:8c:0a:0b:59:2f:15:4f:46:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: May  6 15:00:33 2025 GMT
            Not After : May  7 15:00:33 2025 GMT
        Subject: CN=c633d3f9110eeb852667d733eed2e78ed4e926b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:02:80:dc:63:78:4b:e8:8d:70:5a:7c:48:
                    65:8b:11:f0:cf:a8:38:59:b7:59:39:c4:6e:8e:de:
                    24:cf:81:6e:52:f8:71:8d:e4:db:3e:ae:50:7b:c9:
                    2c:78:f9:8f:17:ac:21:39:4d:e4:2c:87:a0:bd:11:
                    11:6e:6e:8a:ab:70:ae:f3:8a:f7:8d:f6:94:66:81:
                    ee:ec:7d:2a:94:08:d2:b5:11:85:d6:26:8c:9f:c8:
                    ff:a3:09:7b:c4:c0:4f:3d:4f:33:22:c2:d8:ab:58:
                    97:96:c4:d6:c0:b9:27:96:11:8a:63:7d:13:5c:f2:
                    01:90:1c:1f:b5:14:5e:63:b8:68:ef:6b:da:92:a2:
                    cb:d5:5d:bf:7b:cb:0f:4b:b4:af:9e:f6:1b:64:46:
                    cb:46:09:16:81:47:d8:77:fa:52:1a:48:19:43:50:
                    1a:7c:a9:c8:87:a2:21:09:7f:31:8d:a3:e4:cf:15:
                    d6:9a:0e:3b:79:87:7e:20:31:cc:62:13:c9:99:bb:
                    f8:64:43:27:34:43:ed:ef:b3:e7:2b:61:8e:e3:3c:
                    20:54:4c:37:76:5e:05:31:2e:69:10:58:0b:24:eb:
                    bc:5a:ae:52:25:51:8f:71:db:0a:c6:49:08:67:91:
                    52:9c:d8:c3:5f:0c:47:c6:f5:51:f1:96:f4:93:f5:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:D3:F9:11:0E:EB:85:26:67:D7:33:EE:D2:E7:8E:D4:E9:26:B8
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:35:b1:59:37:84:95:58:0e:b2:c9:fa:bb:58:5d:72:37:a3:
         aa:1f:fc:25:76:b6:03:ac:67:a9:d7:4f:13:17:5a:d4:68:54:
         3a:09:e9:90:7f:64:06:79:2d:3f:94:e6:fc:c3:10:51:f3:a2:
         1d:bb:c3:9e:c2:f2:42:34:7f:04:02:f6:a4:ce:4d:b4:1e:2e:
         e6:1c:dc:61:24:d3:b6:9d:27:26:1a:04:a7:18:20:4d:b7:26:
         34:17:0d:5e:e2:76:f6:f6:ac:8b:c3:95:0c:3d:d3:32:6b:43:
         43:05:af:4c:a6:f5:43:d1:1c:50:56:b4:5d:47:b3:76:ac:ee:
         ed:39:fd:9d:a8:bc:3f:ac:47:de:a4:bb:48:60:64:f9:39:1d:
         23:ad:1c:8e:44:bf:d7:04:44:c6:f1:67:c0:04:bc:be:b6:64:
         b8:35:36:4f:b8:4a:76:12:86:99:6b:a4:5a:f5:c8:ab:7f:80:
         85:c2:a6:c8:76:fb:19:b6:f6:8e:e1:25:ce:09:e6:fe:84:d2:
         10:04:48:60:e3:50:27:f4:6f:ed:03:0d:43:2a:ef:d0:ff:d4:
         3c:82:0f:b5:5e:49:18:38:51:df:90:f6:25:94:cd:03:64:06:
         60:fd:2b:d1:01:c5:0f:fa:9f:31:7a:4a:f9:1f:85:3e:73:2d:
         83:02:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:56:55 2025 by rpki-client