Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File:                     OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier:          0wjq3HIlRHF9QqDzUmIsf+cih7hZBPt7fHtddW0Z/fw=
Subject key identifier:   C7:5A:77:8A:49:52:F7:C0:3B:4B:11:48:8A:A2:0C:85:03:7C:AA:B1
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer:       /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial:       0196C08174290B06AA7ECFB018E78EA190C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number:          153B
Signing time:             Sun 11 May 2025 18:00:31 +0000
Manifest this update:     Sun 11 May 2025 18:00:31 +0000
Manifest next update:     Mon 12 May 2025 18:00:31 +0000
Files and hashes:         1: 0xAthu916pMLSA6LAzNdYgS-VXE.roa (hash: AkpmQS7tFUygGvZU+BjPsGOPcILRyQ+KZnPhCEBla9M=)
                          2: 7jmf9BlNbV-fUUbiGDuTogUiPEo.roa (hash: TRehU0GSo0OYFjBdQZcn/8kKiD62iX7mi6y4Y4CJ6lY=)
                          3: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: oBp5UkGbBEif03TSxXKh7mVhAnP0pRlMvu8aRJoevtc=)
                          4: nF8H_i-63xsIqf6G91Sqghmhrmk.roa (hash: seOXQgoakN6MLHPcruniEufkAIlfgGYPYWwRtHa0PF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:74:29:0b:06:aa:7e:cf:b0:18:e7:8e:a1:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
        Validity
            Not Before: May 11 18:00:31 2025 GMT
            Not After : May 12 18:00:31 2025 GMT
        Subject: CN=c75a778a4952f7c03b4b11488aa20c85037caab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:2f:8c:5a:f0:c7:17:ed:3c:7f:57:f9:ad:
                    e5:6f:82:95:a1:3d:f2:12:13:49:24:68:07:e2:e6:
                    93:83:bc:cc:11:eb:9c:9a:81:d9:1e:54:be:20:51:
                    85:8e:c6:a1:13:4d:9a:70:73:6d:55:4b:6b:87:40:
                    15:d5:61:4f:3b:d9:90:e1:83:14:87:02:ed:2e:b8:
                    07:64:22:fa:f0:73:0a:54:46:20:28:f6:99:a4:a2:
                    50:21:8f:51:5e:23:55:81:2a:be:51:a0:e3:17:9a:
                    2d:cd:25:ed:b2:5f:66:17:12:2a:37:53:2a:ec:63:
                    72:12:32:cb:42:6f:ab:19:6b:01:92:c4:9f:94:89:
                    56:42:68:e3:f4:7d:8c:86:13:6b:75:d5:49:d5:f5:
                    b6:e0:91:ca:a8:6f:ff:da:e8:5d:6e:97:df:45:13:
                    f0:f1:f5:e0:1e:d7:f5:76:43:8b:2c:16:14:3d:60:
                    f6:3e:fd:04:62:f8:7a:33:f4:6f:cb:78:78:d6:a0:
                    09:8a:62:f4:f9:83:f4:40:02:35:4d:60:10:e1:47:
                    43:bf:4c:11:9f:a0:c0:02:e2:12:43:f0:19:3c:29:
                    e8:53:1f:ec:84:a5:0f:f4:79:59:2a:96:86:4d:8b:
                    3d:38:33:09:e9:25:ed:cd:c6:dd:72:ec:7d:6e:04:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5A:77:8A:49:52:F7:C0:3B:4B:11:48:8A:A2:0C:85:03:7C:AA:B1
            X509v3 Authority Key Identifier:
                keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:97:ab:4f:91:af:b8:b4:2a:62:5e:5f:94:11:f4:0c:97:0c:
         bd:2e:a5:66:91:41:33:e3:72:05:4c:8d:cf:0b:d3:85:1b:db:
         6d:47:87:f2:5f:42:e9:6c:00:9b:f5:d0:89:97:3f:5f:f8:68:
         c5:cc:15:59:19:74:60:22:45:ea:08:5d:fb:80:cc:57:98:ec:
         cb:ba:a9:1e:84:37:41:e1:d8:ee:b3:19:71:ff:63:e6:48:a2:
         bc:e3:cc:e5:01:57:e7:86:5a:5a:e8:0d:a2:5d:5d:78:33:46:
         68:14:bf:b1:61:c6:b8:ac:3d:51:1d:15:07:11:7a:97:b5:68:
         0d:12:f6:48:3c:65:34:b2:c7:a8:d2:2d:7b:d0:64:d5:fa:bb:
         30:be:d7:72:14:d7:b7:5c:a7:c7:1c:3c:66:b7:e4:7c:fd:76:
         d5:8f:c5:53:7e:9b:4c:57:d9:90:79:19:a7:c9:4a:80:da:66:
         7c:6e:51:f0:65:3a:1e:f6:bd:52:be:ce:d3:a6:5a:56:fa:a3:
         66:3c:ae:f6:77:7a:0a:f1:cd:7a:04:c8:a7:58:7f:67:9c:e1:
         a1:54:76:f4:06:95:8e:77:7c:49:25:ca:ac:3b:80:63:6d:2e:
         d9:4e:f2:b2:b4:76:4e:49:a9:c9:ce:08:e2:bc:7c:c4:90:f1:
         eb:bf:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:17:31 2025 by rpki-client