Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File:                     p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier:          p4WlWkZ1XmY1d5gJTM3Yhtsn1ePGPi5kFF3khA6Q/t4=
Subject key identifier:   4B:D7:61:0A:0F:89:73:13:3F:D6:FD:03:8B:A9:35:DA:28:2F:7F:FE
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer:       /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial:       01969E2C5B9DB8C8C3382816FC8AFAFFDC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number:          0B2B
Signing time:             Mon 05 May 2025 02:00:29 +0000
Manifest this update:     Mon 05 May 2025 02:00:29 +0000
Manifest next update:     Tue 06 May 2025 02:00:29 +0000
Files and hashes:         1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
                          2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
                          3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
                          4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: dr6lmUTfRJL6Lan99H6TVqICaC/NVQa+bs/jWV24y9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:5b:9d:b8:c8:c3:38:28:16:fc:8a:fa:ff:dc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
        Validity
            Not Before: May  5 02:00:29 2025 GMT
            Not After : May  6 02:00:29 2025 GMT
        Subject: CN=4bd7610a0f8973133fd6fd038ba935da282f7ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:35:27:49:fd:dc:43:0f:4e:ec:be:fa:26:
                    21:96:9a:a6:d6:91:f9:03:93:5c:9a:e6:a4:36:3a:
                    15:51:2c:e3:fa:04:dd:9f:52:09:c1:49:df:89:ea:
                    42:f3:f9:12:14:70:5a:07:93:3e:58:cd:bb:39:7f:
                    01:b5:0e:89:f3:4b:98:e5:51:75:c5:4a:c3:1b:fb:
                    19:96:f0:e6:7b:79:e5:f9:5b:6f:54:a1:72:a0:8d:
                    52:ab:b0:9f:7b:e3:7d:8b:8b:98:d8:93:11:24:e1:
                    8e:3a:02:a8:5a:76:29:12:10:87:43:33:e3:91:1b:
                    ad:da:d6:f5:6a:8b:10:ec:5b:31:99:73:bf:10:2f:
                    4b:fb:f8:9a:6d:b8:44:1b:da:3d:20:cf:43:fc:47:
                    8d:c5:64:44:bb:f1:31:c1:de:f0:20:8d:7e:84:73:
                    da:29:63:a7:43:a5:e5:4f:eb:0d:35:72:f2:42:c9:
                    3e:10:e7:45:79:4b:fd:2c:c7:ea:e4:9c:ca:5a:9e:
                    a3:8b:dc:44:55:e2:43:b5:20:2c:64:44:34:03:b1:
                    b2:0f:1d:28:d6:b9:22:79:61:1a:bc:6e:96:67:ab:
                    15:f0:3c:c7:88:c3:8c:ac:4f:1c:5b:fd:10:c3:27:
                    a6:1f:dc:84:53:9f:9e:68:84:d1:23:27:63:52:d9:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:61:0A:0F:89:73:13:3F:D6:FD:03:8B:A9:35:DA:28:2F:7F:FE
            X509v3 Authority Key Identifier:
                keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:ac:82:1f:45:c6:7d:8c:ea:0b:b8:78:2c:94:c5:8e:29:
         1a:b5:f8:c5:ab:3d:75:85:c5:98:ea:25:4e:2b:7f:30:a2:db:
         2e:2e:01:0b:d4:89:23:de:22:7d:07:c4:80:3b:9d:32:ca:32:
         e4:8c:8e:93:8d:3c:d2:45:40:ee:6a:cd:4e:a3:58:e6:2e:68:
         17:dc:15:9b:c6:5b:8a:2d:18:72:ad:cc:68:02:21:b3:84:93:
         19:6c:b5:68:cf:39:80:cd:77:a1:2c:3c:cd:0d:9f:f3:38:3a:
         ce:44:bf:cc:af:61:67:3e:3f:b5:8b:cd:ab:a3:f2:b9:a7:23:
         ac:cc:cc:53:df:ef:66:50:92:eb:02:af:00:dc:c0:d8:b3:e0:
         e3:9f:b6:2e:11:19:fe:2c:dc:8a:c3:d6:81:b8:d9:c6:dd:5c:
         4c:e2:92:db:21:ea:8c:80:47:cb:b9:f4:73:f9:d0:03:94:28:
         bf:41:6a:dc:bc:44:b4:17:a6:f7:ac:7e:1c:63:ae:53:b5:5c:
         46:06:93:b3:04:66:b8:9a:9a:83:ca:bc:72:a3:d7:92:21:4a:
         43:08:38:b2:81:05:ce:1a:df:33:25:2c:d7:9a:da:de:ee:9b:
         db:20:a3:45:b3:c8:ee:e7:e0:e1:40:5c:b9:c3:2f:4d:45:70:
         99:17:93:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLFuduMjDOCgW/Ir6/9x7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjAwZDFiZmZmZjNhNTNlOTRmODY3ZDc0M2QwMzFiOTIy
ZGI1YjEwHhcNMjUwNTA1MDIwMDI5WhcNMjUwNTA2MDIwMDI5WjAzMTEwLwYDVQQD
Eyg0YmQ3NjEwYTBmODk3MzEzM2ZkNmZkMDM4YmE5MzVkYTI4MmY3ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxog1J0n93EMPTuy++iYhlpqm1pH5
A5NcmuakNjoVUSzj+gTdn1IJwUnfiepC8/kSFHBaB5M+WM27OX8BtQ6J80uY5VF1
xUrDG/sZlvDme3nl+VtvVKFyoI1Sq7Cfe+N9i4uY2JMRJOGOOgKoWnYpEhCHQzPj
kRut2tb1aosQ7FsxmXO/EC9L+/iabbhEG9o9IM9D/EeNxWREu/Exwd7wII1+hHPa
KWOnQ6XlT+sNNXLyQsk+EOdFeUv9LMfq5JzKWp6ji9xEVeJDtSAsZEQ0A7GyDx0o
1rkieWEavG6WZ6sV8DzHiMOMrE8cW/0QwyemH9yEU5+eaITRIydjUtkxpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvXYQoPiXMTP9b9A4upNdooL3/+MB8GA1UdIwQY
MBaAFKfwDRv//zpT6U+GfXQ9AxuSLbWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTct
N2VlMDkwNTA0ZmJhLzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTctN2VlMDkwNTA0ZmJh
LzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEP2sgh9F
xn2M6gu4eCyUxY4pGrX4xas9dYXFmOolTit/MKLbLi4BC9SJI94ifQfEgDudMsoy
5IyOk4080kVA7mrNTqNY5i5oF9wVm8Zbii0Ycq3MaAIhs4STGWy1aM85gM13oSw8
zQ2f8zg6zkS/zK9hZz4/tYvNq6PyuacjrMzMU9/vZlCS6wKvANzA2LPg45+2LhEZ
/izcisPWgbjZxt1cTOKS2yHqjIBHy7n0c/nQA5Qov0Fq3LxEtBem96x+HGOuU7Vc
RgaTswRmuJqag8q8cqPXkiFKQwg4soEFzhrfMyUs15ra3u6b2yCjRbPI7ufg4UBc
ucMvTUVwmReTeQ==
-----END CERTIFICATE-----
Generated at Mon May 5 06:29:14 2025 by rpki-client