Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File:                     k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier:          pTjZ0yaSSG4LN+LIu4Pzf/JBut2hfQZBHJCJh5JEK3Y=
Subject key identifier:   13:D3:88:E7:AD:E7:BB:7E:48:C4:37:DD:CC:2F:EB:52:5B:30:C2:AE
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer:       /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial:       0196BF6FAAA79C87068246C1601AF888DBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number:          0694
Signing time:             Sun 11 May 2025 13:01:28 +0000
Manifest this update:     Sun 11 May 2025 13:01:28 +0000
Manifest next update:     Mon 12 May 2025 13:01:28 +0000
Files and hashes:         1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
                          2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: 8rczqc7xGt4p4qqSbtEgUU/oSWO4fpHlyHv1P9Oho/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:aa:a7:9c:87:06:82:46:c1:60:1a:f8:88:db:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
        Validity
            Not Before: May 11 13:01:28 2025 GMT
            Not After : May 12 13:01:28 2025 GMT
        Subject: CN=13d388e7ade7bb7e48c437ddcc2feb525b30c2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:58:95:51:74:a0:97:90:e1:56:d5:f7:31:
                    10:03:5b:ab:31:24:b7:6f:9b:9b:e8:5b:d7:6c:43:
                    bc:52:cb:9d:d5:91:fc:5a:b1:bc:26:32:12:0e:3e:
                    d5:34:fb:a7:f8:7d:75:25:2f:b6:0f:28:a2:aa:9b:
                    ed:c1:3a:c5:74:a8:ac:6a:b0:7d:67:7f:5e:27:d5:
                    01:ae:5e:cd:d8:48:44:00:07:ee:37:29:11:58:b3:
                    59:5f:10:81:bb:81:60:9d:36:a1:17:bb:a3:f3:98:
                    1e:f8:4c:d9:a5:3a:46:85:ca:68:3a:34:56:79:8b:
                    1a:25:53:85:f9:24:a9:31:60:a6:b0:91:93:92:17:
                    3c:cb:bc:5d:4f:8c:df:de:85:60:4e:b3:ec:74:ef:
                    a0:f1:db:54:f4:e1:8d:8f:cf:c7:c7:3a:67:53:30:
                    0e:d2:a6:c1:a0:03:23:9f:68:bf:b5:c6:f5:93:6f:
                    6a:c5:ee:77:fa:a1:e4:b0:eb:5e:06:31:50:52:34:
                    a4:b6:0a:d8:f1:80:37:c4:6d:46:1b:65:72:a8:ca:
                    39:65:8c:a3:30:f8:25:ab:d8:5c:82:c6:a0:52:f7:
                    79:ed:ec:1d:a5:8d:d0:94:6b:43:26:d2:43:48:03:
                    91:d0:58:93:a5:7c:56:50:a4:a0:c5:3c:d8:57:2c:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:88:E7:AD:E7:BB:7E:48:C4:37:DD:CC:2F:EB:52:5B:30:C2:AE
            X509v3 Authority Key Identifier:
                keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4f:6e:97:43:df:1d:0a:6a:1b:03:f3:62:d0:ff:8a:ef:67:
         d8:dd:e8:8d:28:48:49:d3:a6:fb:e3:4b:24:78:a1:5e:01:df:
         55:47:28:5d:75:d9:86:c9:8d:1d:3a:bc:44:02:1b:4d:04:73:
         bd:bc:18:10:e1:ba:ca:b1:7f:5b:b6:81:e4:d9:98:ce:10:99:
         c3:65:a2:4a:b4:fd:25:77:83:b6:f0:47:8d:86:6f:5a:27:da:
         e0:18:57:55:2e:40:0f:d9:1d:da:77:9c:00:9f:65:45:52:6f:
         f6:4f:33:af:a8:d5:51:23:f3:05:f5:25:b1:fe:89:6e:6f:a5:
         85:8c:f2:65:42:9a:8e:4a:75:9d:74:d0:9c:a5:c1:d9:19:6b:
         80:4e:61:60:bb:5c:a6:d0:21:94:7e:3d:da:22:5e:2a:a1:90:
         90:2e:0e:56:0e:0b:80:e1:42:1e:cc:33:fb:2c:f5:78:87:02:
         4a:11:89:51:af:98:76:2e:1d:24:9d:72:fc:c5:8e:dc:f3:2a:
         f7:b6:ac:18:b4:9b:2d:c1:bd:99:22:42:73:aa:99:64:76:37:
         67:b0:27:09:bd:0b:4a:43:d2:38:e1:e3:b1:0d:2d:0d:1c:61:
         6d:c2:99:c3:3c:b2:b9:bd:8b:fb:39:02:0e:05:7d:0f:a2:30:
         08:5f:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:37:35 2025 by rpki-client