Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          OZ4I4z116S4lreGp5y7UpNOsPMOLK0wpzZ2BiiGDSws=
Subject key identifier:   3F:BD:8A:B8:2D:9C:C6:62:5D:BD:0D:B4:8D:3D:5F:ED:FD:12:78:F2
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       0196BDB78AD5DE4C346F6F95033FDC6CAD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0F10
Signing time:             Sun 11 May 2025 05:00:44 +0000
Manifest this update:     Sun 11 May 2025 05:00:44 +0000
Manifest next update:     Mon 12 May 2025 05:00:44 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          3: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          4: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: YO/az+WX67sywPxZaUdcTlRY003T09BccBIQbuli8mE=)
                          6: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:8a:d5:de:4c:34:6f:6f:95:03:3f:dc:6c:ad:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: May 11 05:00:44 2025 GMT
            Not After : May 12 05:00:44 2025 GMT
        Subject: CN=3fbd8ab82d9cc6625dbd0db48d3d5fedfd1278f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:f8:18:bb:32:fb:e7:2c:e9:2c:72:88:8e:
                    0f:87:d0:b4:23:7b:81:ac:91:bf:f2:96:05:1f:b0:
                    03:4f:a5:e2:cc:b3:65:b2:0c:55:55:a2:f4:05:0f:
                    49:19:2a:75:eb:68:30:e8:6b:90:6f:cb:f1:ef:2c:
                    c7:56:da:3b:15:1b:ee:62:f2:6e:47:4f:f0:24:c9:
                    1b:66:ab:a1:f6:e3:6f:1e:70:2b:57:d0:b0:4d:c5:
                    b5:d3:3b:56:ea:b3:9c:67:fd:91:fe:b1:0b:dc:06:
                    c6:15:33:40:8a:5a:bb:79:35:a3:b3:f9:a9:97:c3:
                    21:b9:e2:c1:6f:35:8d:b2:8b:f5:5a:9e:10:f3:64:
                    f1:f7:63:3a:e1:55:eb:ab:fc:18:06:7d:1a:4e:0c:
                    8c:eb:b4:e8:46:f2:1a:56:8c:51:45:46:34:b4:bf:
                    ab:dc:fb:41:19:37:62:d2:cd:1a:80:2e:7d:97:04:
                    7a:f9:b7:c2:5e:20:a1:ff:12:81:1a:ba:15:00:14:
                    8b:e4:1b:bd:50:9e:9a:88:41:17:0a:2d:61:59:0a:
                    d4:3d:91:0d:2c:6f:ce:c3:dd:a7:17:6c:11:75:8b:
                    82:3e:8b:c0:bb:45:52:2c:83:00:db:6c:de:74:6b:
                    20:6d:d9:21:79:c0:6d:a3:66:2d:7d:d3:17:79:3b:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:8A:B8:2D:9C:C6:62:5D:BD:0D:B4:8D:3D:5F:ED:FD:12:78:F2
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8b:0f:86:c6:9c:13:ce:c5:b8:10:54:87:af:69:1f:da:1f:
         ca:5e:0f:09:6c:ad:36:84:53:68:49:f0:e8:06:55:0f:c4:69:
         95:cc:4c:3a:79:64:8a:0d:21:0a:7a:3b:fe:06:c4:73:c3:b6:
         c1:48:21:6b:7d:36:e7:31:9b:6d:4b:68:ae:db:42:eb:ab:52:
         2a:e5:29:9e:d9:e5:40:75:14:71:4d:79:e9:f4:60:c2:8b:40:
         b1:dc:2c:58:9e:3c:d6:71:d3:fa:7f:16:43:18:89:96:38:cc:
         30:de:5b:c0:6d:02:51:5f:e6:d3:a7:9e:05:13:cf:4d:e0:55:
         f9:10:b2:c3:cf:6f:27:7c:65:df:ef:69:5b:c4:96:d1:e9:de:
         ed:b0:5d:0a:9a:82:0c:0f:57:25:76:b9:78:10:86:fc:69:ab:
         63:57:27:6c:fd:4c:9d:2e:30:b9:83:a4:e6:7e:bc:54:e4:3b:
         bf:93:b2:ab:2b:f9:3e:ab:fc:02:fe:ce:44:39:81:ac:db:16:
         22:d0:36:31:a1:22:d2:1d:8a:c1:26:d1:79:81:98:dc:67:79:
         81:d1:c1:d3:90:db:36:9e:5e:8f:e7:47:fb:9f:7f:6d:50:ab:
         83:11:c1:a2:3f:35:e2:46:4a:b4:b6:cd:8d:bc:78:f2:cb:be:
         3f:dc:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:17:23 2025 by rpki-client