Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          /7cvVXrhhWNnV7DU+YaPE6ZrBjhYF8t6VnMfIFYmaKY=
Subject key identifier:   CB:41:35:96:DF:FA:03:6A:08:16:A0:EC:A9:92:AC:F6:4E:5E:4E:2A
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       0196BD49A42FADD49503F86909BCF05E5D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          05BE
Signing time:             Sun 11 May 2025 03:00:42 +0000
Manifest this update:     Sun 11 May 2025 03:00:42 +0000
Manifest next update:     Mon 12 May 2025 03:00:42 +0000
Files and hashes:         1: 1-llihL5lyA2GQR2PsGqhLCANktk.roa (hash: mzRJaHFcotS/RWlzVy4qgPbMvteqzba1lDARW973GdY=)
                          2: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
                          3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: ee04Mh0iN+YY8S0VbCmj+f5zkoLXxiODL8QSpnZOKGo=)
                          5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:a4:2f:ad:d4:95:03:f8:69:09:bc:f0:5e:5d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: May 11 03:00:42 2025 GMT
            Not After : May 12 03:00:42 2025 GMT
        Subject: CN=cb413596dffa036a0816a0eca992acf64e5e4e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:d0:07:ea:3a:65:6c:9f:8a:6e:1b:e2:91:
                    2a:b8:81:b0:c6:be:80:fb:55:80:35:c2:64:89:fb:
                    8a:07:af:f0:15:b4:66:86:cb:2a:88:79:31:b4:41:
                    90:f7:9b:bf:c3:da:45:9f:5e:c9:5e:fd:7a:08:97:
                    39:e4:50:84:4d:39:e8:a4:35:39:83:c6:f3:8b:f0:
                    96:a8:fe:13:de:f5:b9:1f:17:ee:40:97:42:9e:0a:
                    37:0d:88:5d:b5:a3:73:0a:1f:24:16:02:af:1d:16:
                    33:d2:c8:2c:9e:d0:cf:fb:cf:65:78:0c:95:59:cf:
                    1e:66:eb:f0:33:58:23:81:35:ab:85:72:0b:63:8a:
                    81:65:d6:d8:37:6d:7f:ed:b6:06:b1:8a:7f:16:22:
                    1b:cd:07:fc:8c:ef:10:cd:38:32:2d:d8:c4:95:39:
                    9f:b0:59:34:e8:d3:ea:71:36:3c:77:95:39:1a:69:
                    70:06:60:1d:45:cc:cc:86:ec:2c:55:16:29:c9:e7:
                    97:97:e9:ec:92:f2:34:06:ec:58:90:35:5b:33:fb:
                    f9:dc:5c:d5:19:90:44:d4:8a:54:05:86:86:4e:d5:
                    2d:73:4c:a4:db:60:32:30:5b:00:a3:77:f6:dd:0f:
                    82:4f:f1:91:96:77:06:81:75:a4:d2:e8:f4:f4:08:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:35:96:DF:FA:03:6A:08:16:A0:EC:A9:92:AC:F6:4E:5E:4E:2A
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:d2:d5:36:82:e8:81:96:51:35:01:27:d2:e0:0f:8a:f0:
         34:01:40:91:97:16:f4:d9:45:fa:91:e2:a3:84:66:92:69:3a:
         54:7f:d4:e4:75:8a:a2:2e:56:92:80:0c:8f:01:49:1a:2d:35:
         20:6f:40:23:d0:87:f7:7e:d9:f3:ab:f8:fe:cf:e2:35:67:e3:
         67:62:5b:31:dd:04:04:ba:8b:f4:90:9b:4e:d5:0f:df:b0:f7:
         58:12:87:99:62:1a:7f:bd:70:fa:72:e5:e5:f0:50:9b:c8:b9:
         ee:79:3a:c3:d3:46:35:d2:89:73:fa:ca:90:89:e3:73:64:ff:
         64:f5:37:5e:96:8d:bc:92:d2:f2:35:e0:16:1e:e7:06:b4:dd:
         07:84:f5:95:61:3e:e1:15:72:3b:db:fc:d4:6b:51:72:06:83:
         9b:86:db:6a:83:86:94:77:5b:8d:de:13:d7:0b:6d:16:9f:b6:
         06:f0:52:66:61:2f:01:b4:c8:fe:3f:97:63:e0:73:0c:72:a8:
         f5:c2:e1:cb:58:37:4c:e0:38:a6:be:1f:65:06:25:f9:14:c8:
         a3:32:b3:fa:61:ae:dd:ee:5c:28:0c:0c:e4:37:af:f9:7f:9c:
         ef:00:5c:84:05:57:e1:24:17:05:77:5a:44:6b:e3:a9:40:35:
         ac:6b:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:31:55 2025 by rpki-client