Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File:                     ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier:          oYzVa0pwkaOI8rZ0VBGJ99sCUXE2kBfUNFT7VMYPqxQ=
Subject key identifier:   38:67:D7:F7:B9:6B:F4:64:0E:14:59:F6:F0:32:4F:0F:76:0A:0E:C0
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer:       /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial:       0196B8910AAD5B648591E7503472FA9F6448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 05:00:35 +0000
Manifest this update:     Sat 10 May 2025 05:00:35 +0000
Manifest next update:     Sun 11 May 2025 05:00:35 +0000
Files and hashes:         1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
                          2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
                          3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
                          4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: GWrx6kXlObIdIe+khmXF2asrrflNc03rbkHs3s/Dx68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:0a:ad:5b:64:85:91:e7:50:34:72:fa:9f:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
        Validity
            Not Before: May 10 05:00:35 2025 GMT
            Not After : May 11 05:00:35 2025 GMT
        Subject: CN=3867d7f7b96bf4640e1459f6f0324f0f760a0ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:61:eb:1c:fc:88:08:9f:e8:ac:bf:10:c9:07:
                    91:ab:3f:7d:fa:0d:bf:91:59:87:81:e3:5f:2e:f5:
                    a8:46:2f:0f:d5:8b:db:ee:11:2f:48:cc:f2:87:62:
                    c5:51:19:d9:09:9d:91:4e:2b:8d:be:2b:b8:b9:46:
                    28:49:73:40:75:df:aa:b8:c3:da:5a:b2:e5:90:40:
                    b7:21:92:da:29:a2:74:d9:ff:a7:96:17:dc:27:18:
                    8f:78:1c:de:91:29:7d:60:be:e9:06:93:87:4a:82:
                    b3:40:53:37:fa:26:8a:61:73:87:da:d1:75:df:a4:
                    05:42:e3:6f:b1:19:92:aa:3c:31:db:81:88:9c:75:
                    2e:4d:a0:f4:dd:78:44:7a:4d:9d:a2:29:3a:9b:f3:
                    3a:49:65:5b:48:92:eb:57:a4:ef:29:1d:c8:d7:66:
                    68:86:0b:e3:0b:b1:3c:01:6b:83:d6:35:1b:93:dc:
                    96:7f:40:68:ec:f5:20:e7:2c:90:1e:f3:8b:5e:a1:
                    7c:a1:aa:f0:a2:2c:d5:09:33:91:a2:d1:6f:72:9a:
                    11:d1:29:cf:52:41:0c:34:9d:09:0f:d6:2b:40:5c:
                    d2:f2:f2:76:e1:8d:d9:37:5b:ac:21:69:2b:5d:14:
                    94:7f:fb:68:43:d5:df:5b:08:32:89:5b:38:52:f5:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:D7:F7:B9:6B:F4:64:0E:14:59:F6:F0:32:4F:0F:76:0A:0E:C0
            X509v3 Authority Key Identifier:
                keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:0f:bc:38:14:5e:c9:4e:55:c8:79:94:a7:fb:0e:2b:a0:
         5b:ad:01:94:dd:50:06:fd:e2:9c:fd:4f:d5:c3:2a:2d:a7:be:
         96:a9:3b:29:bb:1f:e1:4c:9a:d0:dd:87:ab:1c:90:80:03:b1:
         ce:3f:db:aa:c1:a7:66:a4:44:05:53:34:e1:2c:f4:76:ef:0b:
         ea:ed:f4:20:aa:eb:8c:e2:dc:cf:18:58:91:69:f0:15:ac:4b:
         8d:20:e4:31:18:f4:b0:0d:d5:cd:2e:ea:81:34:a7:6b:12:14:
         c8:e5:19:c1:60:54:3f:dc:4f:81:5a:0a:5f:e7:e2:e8:e5:46:
         43:62:2c:29:ac:bb:74:6f:c8:f3:ad:f5:a8:f3:a3:ac:cb:54:
         17:9c:bc:37:75:7d:48:31:ce:9e:60:08:eb:57:ac:c3:4e:a6:
         7f:7f:10:c6:c3:64:aa:22:db:03:ca:25:4f:e5:4c:f7:14:87:
         58:ab:5c:1f:6a:08:28:b3:95:ae:a4:14:f6:b0:e9:da:81:f4:
         67:ba:11:59:84:95:cf:21:e2:8f:ad:2a:cc:3e:38:bf:ae:e5:
         3c:95:1c:c1:ae:e4:c6:52:5b:93:19:82:4c:ed:4c:35:b1:51:
         52:a2:b6:38:90:18:68:bb:4e:cb:92:ea:32:23:04:dc:55:b1:
         f6:c0:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:16 2025 by rpki-client