Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File:                     r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier:          GYOVu7RsnUIVvw4X0RPfNQOvW5mFreOpg4jB3ZOE+VA=
Subject key identifier:   0F:F7:CD:E7:2A:F5:A3:E7:ED:17:9D:50:96:FF:70:F4:E8:CF:F5:7A
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer:       /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial:       0196B3D8BC0B8A51D9B2CE749AB8A5410CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number:          1533
Signing time:             Fri 09 May 2025 07:00:47 +0000
Manifest this update:     Fri 09 May 2025 07:00:47 +0000
Manifest next update:     Sat 10 May 2025 07:00:47 +0000
Files and hashes:         1: 6OJY_cLGBp28NDNyp5KhfLaq0T4.roa (hash: Q7dSDBkkqsY0c5wjzpyUd8BOdypnvTRmRZWsgkhxLKs=)
                          2: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
                          3: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
                          4: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
                          5: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 9ijCbA3VTVkY9RPcmtTf8uBfOsUoKLOxz1IrOarDyWA=)
                          6: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:bc:0b:8a:51:d9:b2:ce:74:9a:b8:a5:41:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
        Validity
            Not Before: May  9 07:00:47 2025 GMT
            Not After : May 10 07:00:47 2025 GMT
        Subject: CN=0ff7cde72af5a3e7ed179d5096ff70f4e8cff57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:15:29:a6:d1:c0:c4:d8:49:79:3b:f2:70:
                    a6:00:44:9d:16:4b:a8:79:20:e5:32:41:a1:8d:4a:
                    7a:6f:e3:ac:16:2c:9a:cf:55:bd:09:4a:db:2d:24:
                    9c:c3:fc:e0:9a:42:b5:91:cb:21:b6:aa:86:ce:8c:
                    cd:30:60:7b:2e:9e:0b:b6:66:cd:9c:d4:44:26:c3:
                    94:c2:70:29:e5:fc:e9:f1:02:c0:3e:72:b6:f0:ee:
                    70:a8:5f:82:a9:f3:72:00:fe:3e:78:61:fb:17:6d:
                    87:06:5a:17:d3:13:e0:92:31:d5:df:9d:bc:57:43:
                    dc:6a:1f:27:3e:f3:ed:4b:de:2f:36:b7:58:95:19:
                    22:a4:8c:a6:a7:62:1d:ab:3f:80:94:71:0a:f2:94:
                    d1:ff:f2:5a:9a:1d:df:dc:1e:91:db:10:22:5c:d3:
                    69:0c:ca:ef:70:af:37:3d:f7:c0:a5:48:b5:b9:45:
                    82:d3:45:34:d6:66:92:1d:90:db:72:c2:70:67:61:
                    fb:3b:4a:c9:1e:fc:4f:4a:43:4a:44:08:1a:25:0a:
                    5e:2c:d4:2e:2f:c6:c8:cc:1f:39:dd:af:5a:3a:b1:
                    af:a3:82:11:d1:35:39:5b:4b:08:8e:63:86:d1:28:
                    d5:9b:de:48:c6:6b:87:7d:53:d1:c9:72:38:0d:ec:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:CD:E7:2A:F5:A3:E7:ED:17:9D:50:96:FF:70:F4:E8:CF:F5:7A
            X509v3 Authority Key Identifier:
                keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:53:7d:a7:25:dd:22:1e:5d:55:35:a6:90:62:6e:01:d7:
         b1:e5:a4:55:7b:e4:ad:fd:86:83:86:03:2c:28:09:34:7f:c1:
         93:04:71:19:f7:0f:a8:f9:b6:c7:8c:e1:27:ad:f5:b0:3b:ef:
         c5:5d:27:c1:96:c6:03:a4:1a:dc:35:2b:d6:d8:90:4e:2d:d9:
         3f:37:d9:7b:04:1a:cb:15:ef:5b:ea:6a:a1:b9:96:21:0e:9e:
         8c:45:57:61:60:77:e6:29:3e:a9:a4:70:96:f2:0e:b2:a6:31:
         c8:f1:2b:df:46:51:5f:56:fe:a3:3d:3c:e3:98:65:f0:86:e0:
         af:3c:79:09:6c:84:2a:90:17:66:32:8a:b6:c1:24:08:1b:9e:
         9f:49:a5:77:2d:fd:06:16:e2:c9:53:7a:1d:ed:5b:17:01:2e:
         2b:15:d9:d6:47:8d:4c:77:d4:7c:59:cd:dc:05:62:04:6c:dc:
         81:63:0c:90:fe:8e:96:e7:c7:38:c1:f9:71:36:a1:2d:41:a8:
         e1:ca:5c:56:df:33:b9:aa:fa:f2:a7:a2:f4:f8:49:70:11:e1:
         bf:86:dd:ac:b3:79:fd:3e:c9:fe:e8:fa:ac:12:c6:a0:85:72:
         b8:6b:3a:75:d0:a8:73:8b:95:4b:ad:30:d3:4a:d7:78:d8:f5:
         6b:20:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:24 2025 by rpki-client