Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          5KSZfV9m9nTgTk3IQh2T+uIa1ptk7QJ1DMxUvElyE00=
Subject key identifier:   87:7C:5F:04:5F:3A:BF:0A:F1:80:B7:B6:27:6F:63:85:FF:8E:9B:35
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       0196C238D4DD92AED16B2319E2FA6435D483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          0F6E
Signing time:             Mon 12 May 2025 02:00:26 +0000
Manifest this update:     Mon 12 May 2025 02:00:26 +0000
Manifest next update:     Tue 13 May 2025 02:00:26 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: MSDFh59+RTpnmmjJ9JmVB01VTrMtQRWQiMUv48N1Lt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:d4:dd:92:ae:d1:6b:23:19:e2:fa:64:35:d4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: May 12 02:00:26 2025 GMT
            Not After : May 13 02:00:26 2025 GMT
        Subject: CN=877c5f045f3abf0af180b7b6276f6385ff8e9b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:40:99:da:b8:01:4d:9c:a5:75:53:b0:3d:
                    48:55:16:ba:0e:be:ac:0e:df:3c:63:d8:12:c7:da:
                    4b:31:96:c4:26:a3:96:98:c7:b7:1d:b1:2c:06:38:
                    57:fc:c7:d5:2d:33:c9:95:e1:e0:4f:e3:a7:31:8e:
                    41:69:85:43:b5:db:29:48:dc:27:0c:ed:21:ce:be:
                    bc:7c:07:1a:40:b1:68:f5:fa:17:da:fd:1e:65:55:
                    db:9e:7e:c0:83:0b:59:4e:7f:0c:43:18:37:00:29:
                    c2:7e:75:59:bf:ec:42:e5:1b:5e:60:b4:eb:aa:f1:
                    cc:99:f4:50:86:dd:cc:cf:4d:5a:99:4e:35:0f:39:
                    4a:2b:de:df:37:57:bd:c7:1a:6d:74:54:52:50:7e:
                    31:4e:12:2c:c6:a1:29:af:80:6a:96:64:6d:d2:e4:
                    12:cd:66:8c:c3:f0:bb:0f:98:aa:a7:89:ae:44:b6:
                    f6:d1:2d:29:db:cc:94:56:cf:ac:68:9e:75:15:18:
                    bd:85:5a:43:fd:12:c4:ad:78:cd:52:ff:87:1e:21:
                    1b:33:f9:69:4c:10:2a:08:f8:a0:d1:b4:86:c1:c4:
                    52:e6:f7:95:32:12:cd:d9:e6:25:ad:3b:a7:2a:8a:
                    5f:9f:69:02:bb:9a:bb:d1:44:36:c2:08:53:c8:c1:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:5F:04:5F:3A:BF:0A:F1:80:B7:B6:27:6F:63:85:FF:8E:9B:35
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:1a:14:06:16:b9:1d:1b:65:14:13:3a:48:79:84:93:16:
         6f:d5:07:9a:ff:70:cc:48:cf:42:8f:f0:52:5e:65:3f:53:ec:
         4b:62:d1:b3:1c:af:30:04:a7:a9:88:9c:85:2b:63:95:22:f7:
         c7:a4:33:45:6e:51:2e:50:97:2b:90:5c:73:24:e9:fa:16:d3:
         b6:6b:98:10:74:fd:92:1b:a1:b9:21:7f:de:86:b2:fb:2f:63:
         2c:72:a9:dd:15:e2:82:96:46:ea:47:4e:f6:5f:f4:5b:53:99:
         77:a3:02:e0:c6:2c:1c:14:fd:9f:b9:7b:db:fd:26:24:c3:7d:
         e8:d1:46:22:4a:9a:4d:df:5e:9e:49:0c:7b:3d:bd:89:46:46:
         f2:5a:86:c7:96:09:fd:d5:72:04:08:5c:ef:1c:ca:10:dc:3d:
         c8:74:d4:2d:0d:32:7c:fd:f9:86:9e:e6:1b:63:c9:4e:1e:5f:
         b9:fd:f3:85:6b:6f:4e:fc:35:dd:42:fe:22:40:ad:61:dd:94:
         2b:31:63:68:42:1c:f9:4d:25:12:10:0b:5e:e7:de:b7:cc:72:
         96:5e:90:b8:2a:18:09:e0:05:ca:3b:73:42:ce:aa:af:31:ec:
         25:e7:6d:fb:1c:a2:be:e2:20:d0:51:08:0a:4c:bb:19:c7:56:
         26:e0:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:41:24 2025 by rpki-client