Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
File:                     OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft (raw, json)
Hash identifier:          p7d2/eLLWNIFITK2W7DxtANe3idZJLD3SW2ZPNmVt5M=
Subject key identifier:   D4:FF:2C:9B:81:65:44:DF:FF:90:65:33:A5:8A:93:F2:2E:72:C1:0A
Authority key identifier: 38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
Certificate issuer:       /CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Certificate serial:       0196C2A70CD3D977CBD7CC5468415A538689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
Manifest number:          4C
Signing time:             Mon 12 May 2025 04:00:49 +0000
Manifest this update:     Mon 12 May 2025 04:00:49 +0000
Manifest next update:     Tue 13 May 2025 04:00:49 +0000
Files and hashes:         1: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl (hash: igjCwQQSbG2G7WIiKBWsCnJVhyUFU9O+AGYijW3iKVE=)
                          2: Sd24d28V76HUXI5tJozId-LBxGU.roa (hash: sz6vCalE+qZ8AG41dIYIziT32WF467U+LgWfS31nXaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:0c:d3:d9:77:cb:d7:cc:54:68:41:5a:53:86:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
        Validity
            Not Before: May 12 04:00:49 2025 GMT
            Not After : May 13 04:00:49 2025 GMT
        Subject: CN=d4ff2c9b816544dfff906533a58a93f22e72c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:db:c9:06:94:06:fe:3b:1d:9d:bf:6b:b7:
                    3d:26:b7:d6:ac:c7:8a:1f:b0:d6:09:0f:25:eb:8a:
                    b5:19:c6:75:1d:0a:64:d8:d0:e7:af:dc:fd:58:ab:
                    80:04:ff:75:6f:a3:ad:c5:f8:34:a9:a6:34:a0:51:
                    d0:ec:46:ae:3e:82:ac:42:5b:45:60:c4:49:f1:4e:
                    85:43:a4:a5:d5:df:b6:34:a1:bc:3c:99:06:fb:a0:
                    b4:bc:42:ac:ae:cd:cb:10:76:a6:55:93:9c:d5:f0:
                    4a:3b:83:ae:17:5a:77:6e:bb:fb:07:66:35:1d:ff:
                    dd:e6:88:82:2d:e1:e0:c7:f7:c0:b5:71:c4:1b:52:
                    7a:f5:10:48:06:2c:af:6a:4c:0a:e7:ae:c5:11:40:
                    2b:e1:31:7d:8c:16:d2:7e:ce:d0:17:07:79:62:e7:
                    73:aa:24:c6:09:6a:f9:46:ca:ea:c5:7c:cd:2a:54:
                    47:53:13:24:5a:b9:7a:30:63:c4:2b:62:65:bd:1e:
                    96:fb:a1:5e:67:a0:48:53:ba:88:d8:0d:62:7b:5b:
                    7c:0d:87:59:3f:94:22:2d:c1:3c:d8:65:7c:f5:05:
                    d5:80:30:5e:96:78:4a:33:60:ca:a7:7d:a2:f8:31:
                    cb:41:4d:9f:11:1c:e9:3a:61:b8:b8:5f:c7:42:d2:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:2C:9B:81:65:44:DF:FF:90:65:33:A5:8A:93:F2:2E:72:C1:0A
            X509v3 Authority Key Identifier:
                keyid:38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d7:33:9a:6b:c0:0a:fe:78:1b:07:71:49:41:f3:7b:f7:84:
         1c:3f:48:11:81:42:91:c4:49:73:4c:39:04:06:70:5b:c7:f8:
         e6:ac:64:44:8a:c4:30:e9:f4:97:b9:63:c4:d8:f4:5c:1b:c0:
         7e:b7:18:10:8b:7d:ce:1d:d6:47:01:6c:5b:a5:7e:05:3f:57:
         c0:e3:16:5b:e9:22:c7:06:24:f0:a3:2f:c4:bb:13:74:e4:e7:
         1a:b9:23:84:5b:6c:fa:4b:56:e2:4f:5e:af:12:5d:ca:5f:6e:
         f6:e3:d5:b2:bc:1d:18:54:58:0a:18:55:27:e1:52:28:2d:db:
         56:b8:23:12:1b:cf:c5:e4:3b:2c:28:28:c6:04:0d:09:f6:34:
         ae:b4:37:93:60:4c:fc:ea:e6:24:ac:ae:17:fc:38:e4:f6:56:
         d1:ea:04:8c:b3:29:64:c3:d1:f8:ab:13:5f:45:df:f3:7a:84:
         01:a2:c0:2b:5a:ac:67:d8:19:16:48:4d:85:2b:da:73:e1:a2:
         40:ad:2e:9d:4f:2c:dc:a1:51:6a:59:0a:ae:12:3e:5d:5c:cd:
         cf:7f:56:80:58:cb:11:23:6a:61:ea:3c:84:ab:9e:97:e6:fe:
         e3:19:c4:78:d6:df:0c:70:98:ca:69:f2:96:fa:1b:8b:88:be:
         2d:b3:fe:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpwzT2XfL18xUaEFaU4aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDBmMTRjNzgzMDM0NDU2NWQ5OTJhYWVkNGYwNmNlNWIz
YTNmZWMwHhcNMjUwNTEyMDQwMDQ5WhcNMjUwNTEzMDQwMDQ5WjAzMTEwLwYDVQQD
EyhkNGZmMmM5YjgxNjU0NGRmZmY5MDY1MzNhNThhOTNmMjJlNzJjMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbTbyQaUBv47HZ2/a7c9JrfWrMeK
H7DWCQ8l64q1GcZ1HQpk2NDnr9z9WKuABP91b6Otxfg0qaY0oFHQ7EauPoKsQltF
YMRJ8U6FQ6Sl1d+2NKG8PJkG+6C0vEKsrs3LEHamVZOc1fBKO4OuF1p3brv7B2Y1
Hf/d5oiCLeHgx/fAtXHEG1J69RBIBiyvakwK567FEUAr4TF9jBbSfs7QFwd5Yudz
qiTGCWr5RsrqxXzNKlRHUxMkWrl6MGPEK2JlvR6W+6FeZ6BIU7qI2A1ie1t8DYdZ
P5QiLcE82GV89QXVgDBelnhKM2DKp32i+DHLQU2fERzpOmG4uF/HQtKupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT/LJuBZUTf/5BlM6WKk/IucsEKMB8GA1UdIwQY
MBaAFDhA8Ux4MDRFZdmSqu1PBs5bOj/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VEeFRIZ3dORVZsMlpLcTdVOEd6bHM2UC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wMGNlMzEtMjkyNS00NzIyLWJhNDUt
Yzg1M2QxMGIxYmNkLzEvT0VEeFRIZ3dORVZsMlpLcTdVOEd6bHM2UC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wMGNlMzEtMjkyNS00NzIyLWJhNDUtYzg1M2QxMGIxYmNk
LzEvT0VEeFRIZ3dORVZsMlpLcTdVOEd6bHM2UC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNczmmvA
Cv54GwdxSUHze/eEHD9IEYFCkcRJc0w5BAZwW8f45qxkRIrEMOn0l7ljxNj0XBvA
frcYEIt9zh3WRwFsW6V+BT9XwOMWW+kixwYk8KMvxLsTdOTnGrkjhFts+ktW4k9e
rxJdyl9u9uPVsrwdGFRYChhVJ+FSKC3bVrgjEhvPxeQ7LCgoxgQNCfY0rrQ3k2BM
/OrmJKyuF/w45PZW0eoEjLMpZMPR+KsTX0Xf83qEAaLAK1qsZ9gZFkhNhSvac+Gi
QK0unU8s3KFRalkKrhI+XVzNz39WgFjLESNqYeo8hKuel+b+4xnEeNbfDHCYymny
lvobi4i+LbP+uA==
-----END CERTIFICATE-----
Generated at Mon May 12 08:20:40 2025 by rpki-client