Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File:                     OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier:          HfI0rQEQX367VHkkjScV2Vrl0v4XFRV6sdkQw2H2IPc=
Subject key identifier:   BA:79:A7:4D:03:D2:89:58:DA:7C:86:91:F7:40:9D:2B:DB:2F:2F:7B
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer:       /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial:       0196CA298C37F1EC27102EFC91A3061C537B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number:          0DDF
Signing time:             Tue 13 May 2025 15:00:42 +0000
Manifest this update:     Tue 13 May 2025 15:00:42 +0000
Manifest next update:     Wed 14 May 2025 15:00:42 +0000
Files and hashes:         1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: WEI8sKj4OLDI2Q7m/RJzRFsZK8lVccV7guNN1TwcN7E=)
                          2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:29:8c:37:f1:ec:27:10:2e:fc:91:a3:06:1c:53:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
        Validity
            Not Before: May 13 15:00:42 2025 GMT
            Not After : May 14 15:00:42 2025 GMT
        Subject: CN=ba79a74d03d28958da7c8691f7409d2bdb2f2f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4c:ad:bf:00:9e:66:e1:02:30:a3:05:58:c4:
                    09:ab:c0:19:46:7f:c4:76:16:54:0b:79:62:2b:ca:
                    78:c0:9e:6c:e7:f3:d4:0c:77:4c:c2:df:fc:93:eb:
                    8c:59:0d:d0:2c:09:dc:c0:0f:a6:4f:c9:46:3a:67:
                    59:5d:8c:6e:da:95:29:9c:f1:20:dc:7f:8d:d2:a0:
                    39:7e:24:a3:a1:fe:1d:54:fd:2d:91:85:2a:34:3b:
                    24:1b:08:d6:05:50:a6:00:16:f5:38:ff:80:42:2f:
                    3e:bd:b4:66:76:9d:0f:0b:be:3d:3b:4e:0d:75:7a:
                    db:57:b8:f2:a8:0e:da:3c:e5:ca:f7:d6:9a:3c:e7:
                    69:70:71:7d:23:03:df:d2:45:43:d1:97:9e:89:54:
                    6d:b3:05:2f:e0:24:17:ec:b1:3f:ee:57:f9:5f:61:
                    93:b9:dd:36:29:d5:b4:e4:76:4d:3e:47:86:01:04:
                    9f:00:ae:58:b8:80:25:bb:76:b8:46:c9:d9:0a:e4:
                    d7:01:20:c2:50:2e:b1:58:9c:79:75:a1:40:ad:7c:
                    eb:4d:24:b6:49:75:96:74:77:c1:08:49:a6:0e:99:
                    f8:f7:73:75:63:a8:57:ee:07:9a:af:40:9e:ac:c2:
                    1c:2f:75:4b:bb:c3:08:22:a8:9e:6d:08:0d:7e:08:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:A7:4D:03:D2:89:58:DA:7C:86:91:F7:40:9D:2B:DB:2F:2F:7B
            X509v3 Authority Key Identifier:
                keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:b1:ab:ec:d8:3b:14:c7:9c:50:b9:7d:27:41:78:68:8e:
         3c:aa:f5:17:8f:e3:89:1e:1f:b0:6e:39:74:71:da:76:e3:15:
         e1:c1:df:4a:68:cf:26:38:fa:69:90:c2:74:2d:ce:69:58:ea:
         b0:86:5c:8e:1b:55:9c:37:7d:d4:21:01:c6:68:d0:b3:0e:6a:
         7e:94:bf:c4:f3:81:52:61:94:2a:04:96:db:29:21:c0:ae:2a:
         af:e8:69:c5:a6:08:eb:1c:9d:fa:3a:22:e2:c6:a9:e2:01:d8:
         44:d0:fd:6f:bc:f7:a3:4d:e9:5e:04:96:99:be:35:c1:e7:f5:
         6d:71:f8:9c:79:7b:b9:d6:4a:82:95:bd:72:6d:76:db:87:d8:
         52:16:1c:b5:e4:e3:55:5c:46:05:21:d7:99:1a:af:83:f8:0e:
         9e:14:da:56:93:1c:7c:0a:f6:5a:83:d0:32:2a:9f:d7:fb:b5:
         43:6a:5c:4a:60:5c:e5:ce:16:0e:cf:3c:ef:80:51:42:e5:57:
         ae:43:26:b6:00:f5:e4:65:ba:c7:fe:53:7d:e6:07:0a:78:e1:
         8b:6c:af:e0:1f:2d:a0:55:c2:13:ed:1d:13:e5:fc:fa:f8:66:
         89:24:bb:2f:49:62:d0:22:3f:bb:e7:14:ef:cf:8c:30:fd:f1:
         a5:b7:25:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKYw38ewnEC78kaMGHFN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi
NDczYWQwHhcNMjUwNTEzMTUwMDQyWhcNMjUwNTE0MTUwMDQyWjAzMTEwLwYDVQQD
EyhiYTc5YTc0ZDAzZDI4OTU4ZGE3Yzg2OTFmNzQwOWQyYmRiMmYyZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kytvwCeZuECMKMFWMQJq8AZRn/E
dhZUC3liK8p4wJ5s5/PUDHdMwt/8k+uMWQ3QLAncwA+mT8lGOmdZXYxu2pUpnPEg
3H+N0qA5fiSjof4dVP0tkYUqNDskGwjWBVCmABb1OP+AQi8+vbRmdp0PC749O04N
dXrbV7jyqA7aPOXK99aaPOdpcHF9IwPf0kVD0ZeeiVRtswUv4CQX7LE/7lf5X2GT
ud02KdW05HZNPkeGAQSfAK5YuIAlu3a4RsnZCuTXASDCUC6xWJx5daFArXzrTSS2
SXWWdHfBCEmmDpn493N1Y6hX7gear0CerMIcL3VLu8MIIqiebQgNfgjLRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp5p00D0olY2nyGkfdAnSvbLy97MB8GA1UdIwQY
MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt
YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz
LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUW+xq+zY
OxTHnFC5fSdBeGiOPKr1F4/jiR4fsG45dHHaduMV4cHfSmjPJjj6aZDCdC3OaVjq
sIZcjhtVnDd91CEBxmjQsw5qfpS/xPOBUmGUKgSW2ykhwK4qr+hpxaYI6xyd+joi
4sap4gHYRND9b7z3o03pXgSWmb41wef1bXH4nHl7udZKgpW9cm1224fYUhYcteTj
VVxGBSHXmRqvg/gOnhTaVpMcfAr2WoPQMiqf1/u1Q2pcSmBc5c4WDs8874BRQuVX
rkMmtgD15GW6x/5TfeYHCnjhi2yv4B8toFXCE+0dE+X8+vhmiSS7L0li0CI/u+cU
78+MMP3xpbclNw==
-----END CERTIFICATE-----
Generated at Wed May 14 00:31:26 2025 by rpki-client