Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          pKpJwEcbHsJl5+EsCqIVei5XF8uj1TPryo+nzcdIfB0=
Subject key identifier:   E7:B5:D5:0D:61:4A:76:64:80:02:AB:CB:50:55:C2:40:4B:AD:A3:08
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       0196D363C45B2920E1E014EF274A77B09FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0A1F
Signing time:             Thu 15 May 2025 10:00:52 +0000
Manifest this update:     Thu 15 May 2025 10:00:52 +0000
Manifest next update:     Fri 16 May 2025 10:00:52 +0000
Files and hashes:         1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: jENbyTKNwYTplWtrpWNYgo7IxRg1M9huyzcK12pWq80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:63:c4:5b:29:20:e1:e0:14:ef:27:4a:77:b0:9f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: May 15 10:00:52 2025 GMT
            Not After : May 16 10:00:52 2025 GMT
        Subject: CN=e7b5d50d614a76648002abcb5055c2404bada308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:0c:fa:44:47:cf:e6:bd:4a:7b:e2:6e:91:
                    26:4e:cc:2e:a2:80:8c:15:b0:2a:41:87:5e:f0:65:
                    80:29:ad:fe:97:f2:7b:71:84:a2:e0:c7:9c:1c:a0:
                    e0:9f:51:69:bd:99:95:43:98:88:f8:b8:26:7b:78:
                    59:12:da:61:0a:6a:13:ae:50:3b:51:c8:e5:47:a3:
                    d0:ac:70:4c:d3:43:a0:cf:14:e6:0e:81:9d:44:83:
                    b1:a3:a5:b2:42:c5:7b:a3:ea:17:71:8b:bf:b5:2c:
                    88:37:9e:55:d4:f4:fc:97:15:31:0b:76:ec:a0:f4:
                    a5:f2:ef:f5:a0:bc:4a:30:33:cc:cb:7d:d3:f2:65:
                    44:4d:6d:70:f9:46:1f:86:02:c3:77:ee:c7:ab:ed:
                    97:78:18:71:67:d0:1b:c5:35:fc:b1:9b:70:1d:e4:
                    71:96:85:cd:43:51:b6:5e:1a:8e:6c:f1:40:a4:c9:
                    0c:43:53:d8:e8:ec:b0:8b:89:4e:e5:eb:d4:f9:7c:
                    58:b9:e0:1b:90:83:80:3e:2f:9d:4a:ec:eb:9b:7c:
                    79:29:28:57:dc:f6:2a:31:7f:95:66:30:bd:2a:60:
                    7f:ce:54:0d:90:01:c5:03:8d:13:fc:1d:9b:4b:43:
                    23:bc:57:ca:e5:ca:ac:ae:f5:ab:84:34:8e:7e:b8:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:D5:0D:61:4A:76:64:80:02:AB:CB:50:55:C2:40:4B:AD:A3:08
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:bc:58:bb:d1:49:cb:ca:7d:3c:66:c1:69:6b:d4:2f:85:
         d0:21:ff:32:0f:d8:a9:dd:1f:59:79:53:a4:31:c1:94:dc:df:
         a2:9f:eb:b1:88:7c:45:76:e8:63:c1:8b:82:1d:74:1a:3d:47:
         33:f8:69:fe:03:39:8d:ee:14:52:f3:0a:fe:8d:09:af:0e:c8:
         e7:70:7a:9e:0b:14:8d:6c:60:b5:37:c9:26:21:d6:47:07:92:
         b9:10:8f:9e:33:79:66:d5:77:26:53:bf:62:56:ae:d0:49:b8:
         b3:f4:7c:c0:01:ed:d8:cc:19:1a:79:53:04:ad:af:f0:09:1f:
         aa:51:b9:3e:ea:75:93:c0:12:62:4c:99:97:1a:4e:4b:d2:3f:
         a8:ed:6f:a4:b9:0f:15:55:05:70:54:55:14:5e:bf:c7:84:8e:
         02:6c:ce:cb:17:25:54:73:2b:af:44:07:f2:c1:62:0b:d4:c3:
         86:e0:2f:63:74:b8:9f:06:57:8b:8b:4a:89:00:84:15:80:3f:
         42:13:d4:7e:ae:6d:f3:de:7b:0b:83:35:b9:50:6e:8a:1f:64:
         50:4c:a2:2e:54:45:bc:55:4f:fd:a8:59:64:01:75:2a:5d:c8:
         e7:a5:61:ba:6e:38:82:3a:ff:d2:e1:8d:3a:fa:cc:da:55:26:
         f9:c6:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:16:29 2025 by rpki-client