Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File:                     oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier:          HDqroUI8JYf7crUjBJXta5674r5lPUH1CyK5qmHDu8I=
Subject key identifier:   AF:41:E4:27:78:4A:E9:F8:0A:17:59:E6:94:FC:50:11:90:B4:0F:B7
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer:       /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial:       0196DBF914ED4CDA915C74E36C4E8388B4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number:          1544
Signing time:             Sat 17 May 2025 02:00:56 +0000
Manifest this update:     Sat 17 May 2025 02:00:56 +0000
Manifest next update:     Sun 18 May 2025 02:00:56 +0000
Files and hashes:         1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
                          2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: fLWYzYIkPbWZRy/R8QS3JVPh9/laqaZh0QQRPVznZcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:f9:14:ed:4c:da:91:5c:74:e3:6c:4e:83:88:b4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
        Validity
            Not Before: May 17 02:00:56 2025 GMT
            Not After : May 18 02:00:56 2025 GMT
        Subject: CN=af41e427784ae9f80a1759e694fc501190b40fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:1c:11:1f:94:2c:87:a8:d0:0d:32:2c:ba:
                    b5:a2:ff:23:42:c7:41:a7:3f:9c:c4:61:ec:69:1c:
                    73:7a:eb:a3:11:2d:ec:1e:37:5c:e3:76:df:cc:f0:
                    dd:ac:ea:0b:6c:97:c8:6d:36:54:cd:ad:37:8d:a2:
                    27:d0:4a:a9:cd:8d:08:d2:21:40:22:22:0c:00:6e:
                    4b:0f:86:13:24:63:7a:be:da:0a:df:6a:34:aa:77:
                    54:c4:11:52:c7:86:03:c5:c2:13:ad:c3:f9:5d:f0:
                    50:66:43:4f:4a:16:69:b0:18:77:8c:1d:83:45:f0:
                    22:fc:bf:59:ab:3e:ee:1f:fb:47:ed:ea:aa:61:fa:
                    4d:8e:7d:e1:4f:d5:59:82:74:bb:2d:d1:49:eb:30:
                    03:01:a1:bc:b6:8e:a4:4f:24:30:37:40:93:1e:5c:
                    ca:0f:53:e9:74:67:79:ee:05:ce:5b:7a:bf:c3:8f:
                    71:b2:16:f0:08:54:c5:76:ea:e8:c7:0a:7f:51:d8:
                    69:42:af:da:86:21:42:49:d7:18:89:ab:5e:23:0e:
                    d1:f6:7f:20:93:af:d0:b1:d5:84:84:75:eb:6c:83:
                    9d:44:6c:2e:a0:96:d6:e4:13:bb:35:e8:06:57:50:
                    b1:48:2f:0b:7f:36:e3:4e:48:cc:03:a5:29:f3:f9:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:E4:27:78:4A:E9:F8:0A:17:59:E6:94:FC:50:11:90:B4:0F:B7
            X509v3 Authority Key Identifier:
                keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:87:88:d2:fc:dd:e8:68:17:49:aa:a7:db:ca:15:20:a0:c1:
         81:5a:b0:28:a1:7b:5e:b9:34:85:2e:ae:67:1d:27:51:5a:f9:
         27:0e:20:4f:8c:09:cc:a5:d6:aa:c5:e0:00:f2:ed:96:9b:66:
         d5:dc:86:f1:27:ee:76:8d:2f:f1:40:72:5c:0d:84:6d:38:9d:
         3e:00:17:0f:93:19:fd:ad:4d:a3:3e:d5:8f:2a:2e:26:ec:36:
         20:7e:fa:b0:84:29:6c:de:e3:27:42:17:c0:01:cd:bb:da:d0:
         68:62:87:fa:c2:98:0e:7b:ec:56:f3:4e:0e:26:02:97:17:f3:
         2d:79:8b:10:33:15:67:5a:73:f6:a1:7f:de:7c:4c:39:c8:64:
         e1:3a:c8:14:87:b6:f7:ba:8a:cc:05:c6:41:4e:c9:22:3d:33:
         de:c6:7c:c9:86:fe:7b:d0:e6:86:e8:fc:93:c6:b3:ff:8a:6b:
         92:18:b7:1f:40:52:22:7d:e4:bb:56:eb:ba:17:d5:99:08:8f:
         0e:85:61:87:fa:56:00:89:7e:6d:ac:65:c9:3d:e2:a4:94:b2:
         21:00:9d:1c:b2:3a:95:8f:11:e3:cd:f9:65:08:ea:1f:04:7b:
         f2:83:23:75:8a:83:e9:e5:80:fb:90:73:e8:ab:81:7d:dd:48:
         a7:39:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:22:28 2025 by rpki-client