Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File:                     w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier:          qnSR/oCLrMHVIQ8FFSiYY5jhopTD/+rCohgJlBmKQhg=
Subject key identifier:   54:66:46:B0:8D:48:5F:3E:E2:3C:A3:06:50:55:58:8C:56:1C:E8:7F
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer:       /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial:       0196BC36C6DAC0EA0D53DF46D5310A9ED717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number:          0B10
Signing time:             Sat 10 May 2025 22:00:28 +0000
Manifest this update:     Sat 10 May 2025 22:00:28 +0000
Manifest next update:     Sun 11 May 2025 22:00:28 +0000
Files and hashes:         1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
                          2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: QfaMhcI1G6lGBaYGZIqkFEdCSgkzMQk+1wFPqoHp7I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:36:c6:da:c0:ea:0d:53:df:46:d5:31:0a:9e:d7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
        Validity
            Not Before: May 10 22:00:28 2025 GMT
            Not After : May 11 22:00:28 2025 GMT
        Subject: CN=546646b08d485f3ee23ca3065055588c561ce87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:ae:9e:80:d7:17:98:c1:cf:bc:e6:4f:99:
                    82:11:7a:64:6a:d6:d9:54:df:d7:25:8d:43:af:0e:
                    75:74:7b:9d:6d:9a:ed:11:22:cb:45:89:a5:6f:a8:
                    e8:2e:a7:59:9f:90:1a:08:56:f8:08:a1:e1:25:e9:
                    bb:54:16:3e:96:0e:f8:5f:26:80:d2:b5:fd:0c:6b:
                    8c:0f:4a:93:75:f2:cb:e7:42:50:f2:ee:10:a5:9e:
                    f7:69:95:86:ae:8d:68:77:b0:8b:11:92:f6:dd:29:
                    dc:4d:f7:73:58:8d:84:7c:2b:ed:1d:eb:b6:8c:30:
                    45:2b:81:14:e5:8d:17:82:4d:1d:57:44:14:8c:da:
                    01:a0:e5:c2:e7:c1:0d:f8:34:a7:2c:33:98:dd:7b:
                    f3:89:dd:27:02:d8:c9:5f:49:a7:ba:c7:bf:43:63:
                    70:8f:d9:43:32:a5:94:9f:c8:a9:51:f9:1a:ba:e1:
                    0e:92:5d:34:5d:e3:84:d0:b4:9e:3d:99:51:ff:05:
                    6f:63:e3:c1:cc:42:2e:cb:6f:63:7c:8a:5c:0a:df:
                    81:82:e8:7d:90:4b:c9:9d:73:95:45:57:46:10:3e:
                    07:64:06:d3:ac:21:18:61:59:03:d1:a7:3c:4c:98:
                    d4:2e:80:ab:a1:89:fa:1b:4f:06:1b:5e:b9:b9:ba:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:46:B0:8D:48:5F:3E:E2:3C:A3:06:50:55:58:8C:56:1C:E8:7F
            X509v3 Authority Key Identifier:
                keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:d1:8a:c8:f6:d8:e8:6b:02:6a:62:4b:c9:65:fe:6f:62:
         d3:2a:c3:f1:ad:84:a6:ff:88:bf:c2:67:27:a4:b4:2d:3e:ad:
         bc:ef:b0:98:26:bb:98:41:51:3e:0c:29:b1:d3:b3:71:f0:92:
         65:3a:e6:14:fc:e1:8f:18:ef:4e:39:dc:74:c4:8c:1f:f5:d7:
         c2:59:c4:7e:54:05:10:93:f6:ea:2a:64:d0:9b:33:d0:66:c4:
         c6:9c:4d:bf:25:1a:1a:ec:df:7e:8d:87:9e:04:db:15:b7:c0:
         b8:cc:6a:59:c3:41:76:61:d9:f9:6e:95:98:42:8b:5b:ed:35:
         a4:1f:58:d8:5e:f4:42:85:13:f9:64:cf:2b:ed:eb:d8:3e:78:
         95:a2:e8:82:44:e4:dc:15:46:74:16:49:8b:74:59:b1:3e:b8:
         4d:66:86:c9:6e:73:b1:84:d9:f6:82:71:05:ac:51:9a:a6:c9:
         bb:5f:76:b2:16:70:46:bf:d1:bc:06:8f:74:a1:a8:c8:a7:c7:
         e1:b1:1b:1f:f9:9e:28:e8:52:64:12:bb:ae:88:cb:10:43:0c:
         d5:c6:05:0c:ab:3f:ae:ab:8c:75:1d:24:69:a9:27:d1:38:1b:
         d5:7a:03:6b:71:fe:09:a0:04:c4:88:c2:22:15:0f:35:4e:b3:
         70:3a:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:01:41 2025 by rpki-client