Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File:                     OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier:          8hU60HumgC0YYDZ8jSL+g/zVjK8uMVZJTccp0Kzn5So=
Subject key identifier:   E5:11:C0:9F:9D:C1:33:B3:6A:6E:09:FD:36:FA:A1:31:CA:02:22:A8
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer:       /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial:       0196C1CB168CB00C28588DA772D4A36EB4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 00:00:34 +0000
Manifest this update:     Mon 12 May 2025 00:00:34 +0000
Manifest next update:     Tue 13 May 2025 00:00:34 +0000
Files and hashes:         1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: UrVNcQYMwE0E+Xn9VPfEN5othYR1aZA7OvxrOfGK2ok=)
                          2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
                          3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:16:8c:b0:0c:28:58:8d:a7:72:d4:a3:6e:b4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
        Validity
            Not Before: May 12 00:00:34 2025 GMT
            Not After : May 13 00:00:34 2025 GMT
        Subject: CN=e511c09f9dc133b36a6e09fd36faa131ca0222a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:c5:86:25:46:4b:24:c7:3b:a3:17:b4:e0:
                    ca:61:b6:d2:30:17:20:b5:ad:c4:84:ae:9a:ee:0d:
                    56:07:12:6c:c8:d0:7e:c8:10:30:bd:88:5a:ca:5f:
                    2d:68:f9:03:cf:94:e4:bd:f0:88:83:76:3e:4b:59:
                    43:c6:d9:b4:2e:e3:f9:0f:c4:9f:52:be:64:85:40:
                    9f:70:4d:81:8e:20:08:5b:59:0b:16:c4:f4:d9:3e:
                    1b:4e:86:8c:e5:82:e4:a1:fc:f1:cb:d0:8a:4f:db:
                    8e:8d:19:79:83:b6:11:b8:1b:45:97:72:5b:be:f8:
                    07:bc:10:71:a8:a6:c6:a1:01:13:97:58:e2:97:cd:
                    38:5b:a3:36:c3:aa:b1:14:94:50:8b:1b:5f:d4:8c:
                    71:38:7c:3b:70:11:af:29:d9:3e:af:a5:52:6f:77:
                    e7:6d:f0:ff:4c:70:66:5d:02:13:e5:de:14:1d:0f:
                    9b:3e:db:0d:8d:fd:b7:c6:62:ca:dc:79:81:a9:4f:
                    fb:dc:7f:93:5b:95:e2:ff:c2:9f:e4:fd:8b:32:d7:
                    7d:38:79:cd:71:94:45:2b:72:cc:17:3d:36:dc:21:
                    78:74:c1:47:ed:91:cc:44:6c:19:ed:4a:58:b2:5d:
                    39:83:00:aa:28:ab:b2:0f:c0:33:88:66:87:ba:d4:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:C0:9F:9D:C1:33:B3:6A:6E:09:FD:36:FA:A1:31:CA:02:22:A8
            X509v3 Authority Key Identifier:
                keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:36:8f:3a:80:ff:1b:74:79:0a:3c:90:64:07:2c:4b:4f:72:
         df:46:a4:e4:1b:b5:f3:dd:c9:f5:9e:37:f9:5e:25:e6:4f:69:
         4e:3d:65:73:78:e3:61:b1:87:6d:d0:77:95:d7:93:4d:e5:35:
         01:3e:f6:e0:44:ba:c7:20:bb:aa:85:9c:cb:59:23:0e:ea:68:
         90:ac:1b:87:9d:ce:6f:27:c1:93:9e:8a:af:4a:c6:87:64:ae:
         80:d8:af:a2:70:b4:ae:f4:4c:e9:78:3a:50:8a:1b:cb:14:d7:
         6b:23:43:16:3a:51:8a:24:e1:c1:79:d0:b8:f5:7b:38:a7:f6:
         36:23:9c:20:ab:e8:84:6c:8b:38:b8:a6:d8:02:b1:d1:d9:39:
         1f:ec:aa:44:9e:9d:8a:9a:1c:2a:fd:cf:11:26:28:3a:8e:b9:
         21:3f:a8:3a:65:f1:35:eb:db:2b:a6:a7:b9:cb:62:3a:91:5c:
         71:8a:dc:ed:de:97:05:b9:d1:99:a6:de:21:47:1f:cf:3b:a2:
         24:fd:9f:53:d4:c2:ee:8e:6d:c4:15:8d:81:ee:83:ec:07:b6:
         b7:96:2e:76:04:e6:5c:37:7a:4f:40:6c:fe:04:f5:ba:52:29:
         97:79:11:6a:fb:fb:61:96:fd:9d:61:ad:10:c5:b2:f7:8e:03:
         eb:38:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:02:33 2025 by rpki-client