Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File:                     mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier:          LDQGFdL0IungURgPGhSZJpjaPova0CNQtamDrt9aGFA=
Subject key identifier:   CF:51:88:E7:5D:82:19:2A:FE:05:B8:20:28:0B:E9:F5:F0:74:BD:D9
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer:       /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial:       0196AEB22256070A2BCAEB620501FDA2DB4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number:          027F
Signing time:             Thu 08 May 2025 07:00:31 +0000
Manifest this update:     Thu 08 May 2025 07:00:31 +0000
Manifest next update:     Fri 09 May 2025 07:00:31 +0000
Files and hashes:         1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
                          2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
                          3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: 7yq5hAvM+tDhGdP6ShhPlhbxYxy7QIKTYoEap4tYG/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:22:56:07:0a:2b:ca:eb:62:05:01:fd:a2:db:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
        Validity
            Not Before: May  8 07:00:31 2025 GMT
            Not After : May  9 07:00:31 2025 GMT
        Subject: CN=cf5188e75d82192afe05b820280be9f5f074bdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:21:91:7b:cd:ef:3f:7e:d1:bc:77:bf:d8:
                    e6:46:81:f9:c2:aa:0a:d0:84:37:5c:8d:5f:0a:84:
                    bc:27:69:a9:42:43:70:f1:f0:3e:3f:f8:48:00:3a:
                    27:8c:fa:fa:7c:d5:97:5b:32:2e:4f:57:ec:07:45:
                    b3:f4:34:ee:73:77:a8:49:a3:96:80:70:c6:dc:13:
                    6d:15:49:82:a8:db:e8:8a:c2:5d:d2:ff:8f:02:fb:
                    05:57:c0:62:9b:4a:01:d5:e4:1d:b0:04:dd:be:25:
                    cf:38:cb:65:d9:68:44:be:fc:27:78:10:0b:c8:23:
                    11:f5:9e:93:49:30:9a:bb:0f:e1:42:51:2a:86:3e:
                    a0:b3:15:a5:e0:c9:01:91:31:9e:f7:ab:dc:71:8b:
                    95:ea:30:97:73:43:dd:aa:e4:c6:79:c3:ca:62:a8:
                    63:d1:42:8f:f5:db:2c:be:3f:e5:cb:1a:56:a7:fa:
                    15:c8:17:23:23:16:3d:b6:01:e5:cf:97:cd:41:87:
                    94:7a:f7:be:de:45:3c:f6:1c:ee:53:76:be:f7:73:
                    9a:18:d4:e5:32:9b:32:a7:ad:4a:09:70:c3:9a:8d:
                    73:f7:0e:e9:73:41:b9:1e:7d:a3:20:03:da:ef:06:
                    b4:04:6b:bb:48:ea:e8:c3:3f:f8:25:9a:0b:33:c1:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:88:E7:5D:82:19:2A:FE:05:B8:20:28:0B:E9:F5:F0:74:BD:D9
            X509v3 Authority Key Identifier:
                keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:39:1e:7f:25:21:47:81:20:14:05:d7:d2:c9:f3:47:fd:
         a8:2f:b4:01:98:b4:2f:8e:8f:33:77:2e:20:30:2c:52:2f:e5:
         aa:b4:35:75:fa:16:4c:4b:cd:e0:6d:39:4a:c4:49:6d:44:81:
         55:44:1a:08:3b:e7:11:6b:7a:78:5a:2f:c7:30:21:ac:2a:d9:
         4e:db:4a:1d:5a:91:b8:b4:83:5a:79:d2:6b:c7:f7:5b:92:58:
         4a:9a:cb:85:30:1f:85:66:04:a0:80:ff:1c:52:9b:40:c4:7d:
         b5:96:19:dc:da:22:d5:b4:4b:05:7c:33:89:53:b8:20:72:bc:
         85:55:b2:94:56:e4:42:3f:6a:54:84:73:dc:30:69:65:03:32:
         82:98:ac:34:41:fa:6b:18:f6:5d:14:0a:69:22:0c:c1:48:9b:
         e4:a5:41:fd:04:75:6f:78:b9:be:b0:58:97:ca:94:43:33:40:
         79:5d:6d:80:4a:43:86:73:13:26:d1:b5:93:b7:ba:94:83:c7:
         82:fa:e6:f0:6d:0d:20:c3:b9:07:75:c2:38:a4:4d:48:bd:95:
         8e:8b:82:7b:40:41:a8:bb:58:75:a1:d1:5c:80:16:bf:42:76:
         d7:58:e3:c5:fa:57:7c:7d:25:0a:53:e1:35:d7:54:93:5a:b6:
         04:15:3c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZausiJWBworyutiBQH9ottKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjUwNTA4MDcwMDMxWhcNMjUwNTA5MDcwMDMxWjAzMTEwLwYDVQQD
EyhjZjUxODhlNzVkODIxOTJhZmUwNWI4MjAyODBiZTlmNWYwNzRiZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBghkXvN7z9+0bx3v9jmRoH5wqoK
0IQ3XI1fCoS8J2mpQkNw8fA+P/hIADonjPr6fNWXWzIuT1fsB0Wz9DTuc3eoSaOW
gHDG3BNtFUmCqNvoisJd0v+PAvsFV8Bim0oB1eQdsATdviXPOMtl2WhEvvwneBAL
yCMR9Z6TSTCauw/hQlEqhj6gsxWl4MkBkTGe96vccYuV6jCXc0PdquTGecPKYqhj
0UKP9dssvj/lyxpWp/oVyBcjIxY9tgHlz5fNQYeUeve+3kU89hzuU3a+93OaGNTl
Mpsyp61KCXDDmo1z9w7pc0G5Hn2jIAPa7wa0BGu7SOrowz/4JZoLM8GJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9RiOddghkq/gW4ICgL6fXwdL3ZMB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcA5Hn8l
IUeBIBQF19LJ80f9qC+0AZi0L46PM3cuIDAsUi/lqrQ1dfoWTEvN4G05SsRJbUSB
VUQaCDvnEWt6eFovxzAhrCrZTttKHVqRuLSDWnnSa8f3W5JYSprLhTAfhWYEoID/
HFKbQMR9tZYZ3Noi1bRLBXwziVO4IHK8hVWylFbkQj9qVIRz3DBpZQMygpisNEH6
axj2XRQKaSIMwUib5KVB/QR1b3i5vrBYl8qUQzNAeV1tgEpDhnMTJtG1k7e6lIPH
gvrm8G0NIMO5B3XCOKRNSL2VjouCe0BBqLtYdaHRXIAWv0J211jjxfpXfH0lClPh
NddUk1q2BBU85Q==
-----END CERTIFICATE-----
Generated at Thu May 8 11:19:42 2025 by rpki-client