Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          bgqOiNovo1c4Pp9rg2hht2HlINZp3AkyymfdkZFtNVs=
Subject key identifier:   81:0F:22:3D:8D:41:DC:40:3C:D1:4C:39:68:79:5B:33:13:6E:E0:41
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       0196B823C7B4ABF0BBC39F9013C35EA2BFCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          0686
Signing time:             Sat 10 May 2025 03:01:14 +0000
Manifest this update:     Sat 10 May 2025 03:01:14 +0000
Manifest next update:     Sun 11 May 2025 03:01:14 +0000
Files and hashes:         1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: M/hc+60Pbsc1Qkgs7ToUY+BxXXjgGKgC6PBcLERmhRM=)
                          2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:c7:b4:ab:f0:bb:c3:9f:90:13:c3:5e:a2:bf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: May 10 03:01:14 2025 GMT
            Not After : May 11 03:01:14 2025 GMT
        Subject: CN=810f223d8d41dc403cd14c3968795b33136ee041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:3a:69:89:51:84:61:4d:84:50:ca:72:e6:
                    72:5b:41:29:d3:7f:93:f6:53:95:ec:82:f3:f5:25:
                    c6:de:9b:21:12:5e:03:15:6e:3e:ba:7c:29:8a:83:
                    f3:35:de:07:cb:59:c0:64:e9:7b:7d:67:b0:a1:19:
                    c7:63:a7:3c:09:7d:e0:98:ce:14:17:e6:9a:0a:39:
                    3d:34:f0:36:d8:7d:01:70:ad:93:40:fc:ff:be:0e:
                    ed:df:2b:0f:21:bf:93:f2:04:ee:5e:e9:c1:b1:16:
                    8a:f3:56:78:36:e7:f4:40:fa:25:b1:39:ac:d1:a3:
                    c7:15:40:af:1d:f9:4d:2b:ef:5a:e7:23:50:54:15:
                    23:94:31:5a:40:0c:6a:b2:7a:8c:11:c9:b2:ad:e5:
                    62:4e:19:bf:9b:f8:d8:ed:31:57:ac:8e:24:1a:49:
                    c6:c9:1f:6a:a5:08:10:65:30:af:e7:fd:46:14:bb:
                    01:15:e0:2f:e2:b1:e8:ed:0e:e6:93:4a:d1:54:c1:
                    d4:e0:c3:04:7f:a3:6a:85:3b:71:c2:0e:59:50:e6:
                    94:a7:9a:0a:e2:30:ce:7b:1b:a3:19:8b:27:df:bc:
                    eb:1e:89:8c:30:34:a6:52:9e:4b:9d:c6:58:63:d3:
                    9d:ef:4a:18:4f:f4:d8:d7:c7:7a:d9:b5:02:80:19:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:22:3D:8D:41:DC:40:3C:D1:4C:39:68:79:5B:33:13:6E:E0:41
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:22:39:55:20:41:f4:18:a6:7f:8a:fe:fd:61:7d:8d:cb:
         b8:48:13:7a:e1:c4:1d:f3:e4:6c:ff:85:60:48:00:6f:f9:a1:
         04:b7:e9:e2:a8:03:81:34:dc:c3:a0:72:3d:7f:fb:91:e3:af:
         71:35:a3:b7:29:de:16:f1:ee:63:33:d7:2b:83:cc:26:dd:e5:
         cf:14:a6:68:95:74:fa:d1:f1:55:72:ed:71:a0:d8:19:d1:b6:
         98:a3:79:ec:e1:cb:a6:ad:cc:4b:c9:40:89:0f:ec:77:cb:91:
         02:f9:a5:76:56:29:7d:02:1e:c0:d9:d0:42:ab:f5:95:a0:6e:
         cc:f7:69:23:43:7d:5e:e5:fc:22:72:c6:f1:91:48:a8:76:74:
         ce:3d:6b:37:fe:6a:72:32:db:13:af:2f:4c:66:38:25:da:27:
         06:ea:84:92:de:14:63:c7:c1:fa:b4:43:b9:09:05:79:9a:47:
         63:65:b0:e7:3b:ce:a8:3c:43:1a:d8:c4:94:8a:f7:11:53:6e:
         d1:18:74:92:bc:84:46:0d:d7:64:d3:26:92:3f:33:23:23:e9:
         7a:b2:b6:fd:6f:7a:cd:10:64:50:3c:63:ab:3a:57:64:bf:2d:
         45:9e:47:f1:f4:ec:31:16:bc:5d:c1:1d:e4:86:cf:75:1e:93:
         e0:cf:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:15:40 2025 by rpki-client