Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File:                     OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier:          iTsp5qeJEW7/qHJcJxsfqpKqROMu5x/A5xxeoFQ26Tk=
Subject key identifier:   71:3D:C4:8E:A4:39:88:A2:EC:81:E9:F4:AC:AC:72:02:38:9F:03:93
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer:       /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial:       0196B36A6770F52E82799208103D23C92FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number:          026E
Signing time:             Fri 09 May 2025 05:00:17 +0000
Manifest this update:     Fri 09 May 2025 05:00:17 +0000
Manifest next update:     Sat 10 May 2025 05:00:17 +0000
Files and hashes:         1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: TAoBqezUWoYuaPBaHEFgcan3sMqDPwPdVYtF4+AJAZY=)
                          2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:6a:67:70:f5:2e:82:79:92:08:10:3d:23:c9:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
        Validity
            Not Before: May  9 05:00:17 2025 GMT
            Not After : May 10 05:00:17 2025 GMT
        Subject: CN=713dc48ea43988a2ec81e9f4acac7202389f0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:77:ea:e8:c3:af:f8:20:41:9b:e5:86:25:
                    76:a7:f7:83:ed:49:46:60:10:3b:d6:d7:ae:57:1a:
                    02:b9:38:96:bd:41:78:2f:01:23:c2:75:28:1f:8f:
                    f7:69:34:4b:60:30:d7:8f:e9:a7:92:c4:2a:a6:8c:
                    39:68:ad:e2:3e:c4:d5:fb:f4:6e:8d:57:f1:1a:f7:
                    f0:36:be:42:2f:74:94:72:e1:d7:44:bb:16:51:b7:
                    00:35:f3:8e:f3:20:40:cb:c0:7d:ac:2f:0e:88:42:
                    4b:31:50:7f:92:b7:f6:7a:4d:9d:b3:8d:18:f6:5a:
                    31:8c:8d:69:d3:8b:eb:10:43:5e:37:29:ec:2a:eb:
                    8c:66:5e:b5:d0:7b:44:3b:4a:5d:78:cc:4e:a0:b6:
                    1f:39:37:fe:f0:2c:74:ee:58:aa:89:8c:d9:91:b4:
                    d3:d9:dd:47:c8:39:62:44:2a:dc:f7:9c:7d:d3:95:
                    d7:a5:25:81:d8:5e:f0:74:0a:00:7f:7e:b6:e1:d5:
                    96:1c:72:19:05:6e:83:2a:5b:40:9b:83:75:f5:af:
                    c3:51:0e:64:5e:1b:77:51:e2:9a:58:5f:d2:e0:40:
                    83:20:af:90:e4:cc:5e:6a:fa:f8:89:89:30:a6:bf:
                    04:a0:78:68:f5:62:f2:80:6a:81:4c:84:3e:57:93:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3D:C4:8E:A4:39:88:A2:EC:81:E9:F4:AC:AC:72:02:38:9F:03:93
            X509v3 Authority Key Identifier:
                keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:e2:87:00:1d:f4:aa:78:b1:ec:68:f3:ae:0d:3d:60:f8:
         14:c6:6c:6b:23:24:1c:90:7d:b3:16:86:da:a1:3e:17:50:c6:
         0a:cd:1a:56:d5:68:39:02:82:66:80:00:80:6e:ef:0a:ea:e5:
         a9:23:aa:a8:91:64:48:f2:bf:b0:8a:bf:ea:bf:4d:58:c7:4d:
         95:78:08:2a:ea:7d:d9:9c:19:29:08:66:80:a8:66:78:2b:1b:
         f5:57:3c:36:a8:2e:37:2c:07:2e:b5:a0:a3:fe:09:12:7f:46:
         df:cb:dc:e3:55:88:69:d6:2b:3b:d8:ea:97:77:4c:63:b8:6a:
         73:84:ef:c7:80:e7:d1:14:60:59:ec:7b:5c:26:25:5e:82:09:
         bb:a3:0b:ee:cf:ce:56:47:c5:e6:13:4a:4b:07:16:8d:b6:a6:
         f9:a3:b8:cd:97:34:3f:24:cb:88:3d:40:3f:0e:9e:c5:60:73:
         fc:e9:17:28:3c:84:7d:f4:40:75:70:b0:74:47:b3:12:06:78:
         ca:e9:48:ec:b4:b2:28:b1:16:d8:3f:87:1d:6c:c8:93:ad:32:
         ba:45:ea:c0:62:43:26:93:1e:f6:07:13:5c:7b:26:05:de:73:
         b2:a6:e5:7d:b8:59:ac:9a:79:5e:53:a1:fe:a7:83:63:81:7e:
         77:da:5f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazamdw9S6CeZIIED0jyS/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjUwNTA5MDUwMDE3WhcNMjUwNTEwMDUwMDE3WjAzMTEwLwYDVQQD
Eyg3MTNkYzQ4ZWE0Mzk4OGEyZWM4MWU5ZjRhY2FjNzIwMjM4OWYwMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xB36ujDr/ggQZvlhiV2p/eD7UlG
YBA71teuVxoCuTiWvUF4LwEjwnUoH4/3aTRLYDDXj+mnksQqpow5aK3iPsTV+/Ru
jVfxGvfwNr5CL3SUcuHXRLsWUbcANfOO8yBAy8B9rC8OiEJLMVB/krf2ek2ds40Y
9loxjI1p04vrEENeNynsKuuMZl610HtEO0pdeMxOoLYfOTf+8Cx07liqiYzZkbTT
2d1HyDliRCrc95x905XXpSWB2F7wdAoAf3624dWWHHIZBW6DKltAm4N19a/DUQ5k
Xht3UeKaWF/S4ECDIK+Q5Mxeavr4iYkwpr8EoHho9WLygGqBTIQ+V5OMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE9xI6kOYii7IHp9KyscgI4nwOTMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl/ihwAd
9Kp4sexo864NPWD4FMZsayMkHJB9sxaG2qE+F1DGCs0aVtVoOQKCZoAAgG7vCurl
qSOqqJFkSPK/sIq/6r9NWMdNlXgIKup92ZwZKQhmgKhmeCsb9Vc8NqguNywHLrWg
o/4JEn9G38vc41WIadYrO9jql3dMY7hqc4Tvx4Dn0RRgWex7XCYlXoIJu6ML7s/O
VkfF5hNKSwcWjbam+aO4zZc0PyTLiD1APw6exWBz/OkXKDyEffRAdXCwdEezEgZ4
yulI7LSyKLEW2D+HHWzIk60yukXqwGJDJpMe9gcTXHsmBd5zsqblfbhZrJp5XlOh
/qeDY4F+d9pfwQ==
-----END CERTIFICATE-----
Generated at Fri May 9 11:18:12 2025 by rpki-client