Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File:                     OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier:          K1P6y3BbMeS1ek5/57dl1+VHPSmz1/9DKdBJu2fDPAE=
Subject key identifier:   BD:B9:00:51:CD:1D:B0:FA:9D:48:71:65:1C:91:DD:1B:C9:68:CC:22
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer:       /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial:       0196D39A25F9E2BFDB5D86937CEE0D446323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number:          0C9C
Signing time:             Thu 15 May 2025 11:00:16 +0000
Manifest this update:     Thu 15 May 2025 11:00:16 +0000
Manifest next update:     Fri 16 May 2025 11:00:16 +0000
Files and hashes:         1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: I1BBd3aJUNA/5AC8+8Xl8BKkdUdQIf8x2jFfKJ+mgXQ=)
                          2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:9a:25:f9:e2:bf:db:5d:86:93:7c:ee:0d:44:63:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
        Validity
            Not Before: May 15 11:00:16 2025 GMT
            Not After : May 16 11:00:16 2025 GMT
        Subject: CN=bdb90051cd1db0fa9d4871651c91dd1bc968cc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:a8:89:4a:d3:8e:d1:9d:28:f9:dd:78:1a:
                    93:38:71:cb:04:c0:da:77:cf:1a:59:27:0f:2e:5a:
                    e2:6e:0b:37:b6:8a:84:70:3e:99:fb:61:52:35:f0:
                    7e:3b:48:cc:22:50:2f:00:8a:5b:7e:63:61:94:f4:
                    98:41:64:8d:a6:e1:8f:dd:5c:e9:82:15:57:f4:7b:
                    12:e8:28:6f:16:b4:53:d5:e0:d0:f5:30:f8:36:fd:
                    2e:9b:c8:bc:e8:c0:57:ea:d6:d0:af:e7:ed:ef:b7:
                    56:81:5e:c6:06:be:af:b7:27:b2:1d:4e:07:67:27:
                    2f:65:4a:5c:20:f3:6e:2a:0c:c2:67:29:df:0a:c6:
                    da:11:dc:b8:86:78:24:be:f2:47:34:80:cb:90:f3:
                    08:b5:8e:77:aa:fa:83:75:d0:02:08:35:09:d5:48:
                    d4:2b:e6:54:59:d0:ab:9a:2e:9a:75:a3:4d:d1:eb:
                    bc:de:4a:2a:81:8e:05:d0:b7:5c:2f:d8:94:0a:91:
                    42:15:c3:8e:66:4f:52:bf:aa:76:72:8d:cc:16:c9:
                    ca:bb:d7:8a:59:6c:ec:1f:e7:fc:18:54:46:f3:88:
                    83:1e:98:5c:41:1f:76:b9:aa:b0:04:0d:60:1a:67:
                    7a:6b:11:ce:10:16:2d:15:8c:cc:a6:65:cc:8c:5e:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:00:51:CD:1D:B0:FA:9D:48:71:65:1C:91:DD:1B:C9:68:CC:22
            X509v3 Authority Key Identifier:
                keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:86:17:90:41:0d:76:48:1b:9d:3c:e3:86:7f:2b:6b:ff:f1:
         9f:a3:5a:e0:a6:48:9a:52:6c:e8:43:fa:74:62:0a:88:4f:ef:
         ac:ad:22:f8:6e:34:09:90:f0:a2:e0:bb:95:b8:cb:b1:d2:ce:
         25:82:0f:b6:97:8c:ed:b7:df:d2:72:7c:9e:f6:98:3f:de:49:
         d8:11:f1:c0:d9:27:55:2d:7f:59:29:a4:e7:c8:a9:d7:bc:9c:
         90:48:5f:df:31:51:a4:9a:86:3b:d1:f1:a7:a5:29:de:24:22:
         00:70:75:df:b2:50:b0:28:ce:d5:cd:45:49:5f:ad:e8:9d:12:
         31:77:99:d8:07:50:80:b5:ca:55:fb:4f:5b:ac:49:b7:d3:02:
         30:1a:22:24:9b:1e:8d:51:80:54:02:02:6d:07:21:49:b2:41:
         a7:db:88:55:00:26:d5:e3:9d:88:ee:2d:6e:69:56:73:de:e9:
         1f:b2:d3:cc:19:1b:44:f0:a4:60:98:60:d0:75:a8:38:e9:05:
         51:61:78:6b:19:d5:9a:44:c9:b4:8c:bf:1d:ff:d8:58:8b:cb:
         f8:8a:18:d0:54:40:82:22:41:8c:b3:67:33:20:8c:63:22:fb:
         91:13:5e:1c:74:d5:e8:dd:0d:db:15:5e:25:d8:39:e9:80:eb:
         ce:87:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:48:25 2025 by rpki-client