Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File:                     haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier:          2KczvVhDoqGT8KBMsJWPdaaE1YQxJ/+cdUh+uIYOwB0=
Subject key identifier:   BA:1F:94:6A:36:66:CC:4F:E2:33:46:25:F2:82:A4:24:2E:FE:8E:8F
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer:       /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial:       0196AAD552A913D014F2675BEE450EFDAA43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number:          04AD
Signing time:             Wed 07 May 2025 13:00:28 +0000
Manifest this update:     Wed 07 May 2025 13:00:28 +0000
Manifest next update:     Thu 08 May 2025 13:00:28 +0000
Files and hashes:         1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
                          2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: UIpZyb+AQrhjCX8Ou+25XiCWOXVNbYv3z+MxXJBtN14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:52:a9:13:d0:14:f2:67:5b:ee:45:0e:fd:aa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
        Validity
            Not Before: May  7 13:00:28 2025 GMT
            Not After : May  8 13:00:28 2025 GMT
        Subject: CN=ba1f946a3666cc4fe2334625f282a4242efe8e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:6d:7f:8e:a2:d4:13:cd:db:ab:3f:4c:d2:
                    ad:36:5a:ec:5a:ac:23:e7:63:e4:04:eb:4b:ee:d4:
                    20:1f:6f:a1:3a:8e:21:d6:91:d5:a8:d4:f8:09:be:
                    78:da:b8:ec:cd:07:ad:ef:72:9c:9c:14:ea:b3:38:
                    c6:65:45:f4:a2:8a:cc:2e:d0:e2:93:65:16:b4:b6:
                    05:70:80:01:bd:4b:68:cb:54:6a:a8:15:04:98:e5:
                    b4:cb:03:76:50:e5:19:a1:d8:5b:0c:8b:90:7e:38:
                    b0:2a:65:f4:c2:2e:3b:ce:7e:06:e3:48:23:75:c0:
                    94:ea:32:fb:65:ef:0a:48:79:7b:15:e1:a6:92:c9:
                    8e:92:69:c4:09:05:9c:e9:ee:9a:87:1a:f5:49:a8:
                    8d:ee:40:46:81:bf:6f:4f:cf:b4:c0:fd:39:b2:a4:
                    bd:6d:50:56:88:f0:c3:37:26:68:e8:36:2f:21:47:
                    88:2e:4c:e2:98:b7:8f:74:3a:55:81:9e:88:c8:c9:
                    79:1d:05:2b:3c:79:8b:dc:dc:a6:bd:e6:87:ed:48:
                    4a:e5:f8:74:c4:be:48:56:94:ff:7e:9a:3f:07:89:
                    99:59:5b:50:e5:1b:36:80:64:c0:b3:7b:20:91:3d:
                    51:b9:56:a6:7a:e1:81:e5:51:18:75:f3:9b:5b:db:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:94:6A:36:66:CC:4F:E2:33:46:25:F2:82:A4:24:2E:FE:8E:8F
            X509v3 Authority Key Identifier:
                keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:7c:cb:45:fb:8a:21:21:35:09:77:cf:96:08:bb:35:1d:
         9a:42:a1:b0:9c:56:d8:41:33:8f:00:06:a1:45:c3:13:4e:d5:
         c3:70:de:00:6f:2d:0d:b9:03:71:40:41:e6:eb:aa:1a:1f:cb:
         ff:06:69:93:1f:3c:c1:9d:d7:2d:38:cf:47:b1:fa:2e:91:82:
         e7:f0:0c:2e:3b:9e:e2:70:52:72:38:38:f2:c6:d3:bc:2a:4f:
         69:a7:9c:6a:64:40:0b:0f:35:cf:82:c4:81:4c:3e:b2:83:2d:
         26:81:83:2e:56:ab:31:90:40:6b:55:16:b0:19:45:2d:30:d6:
         40:68:71:fd:25:2b:44:78:8a:25:b3:04:78:9b:50:96:26:a5:
         1b:b1:7a:61:2c:48:07:91:9d:a3:43:79:ca:a1:22:cb:f8:32:
         cd:c8:e7:24:e1:e0:bf:4c:d2:ff:35:d8:53:48:68:5d:05:8c:
         dd:88:d7:7e:e3:3d:ca:5e:16:2c:6f:dc:22:ca:6a:43:b0:c0:
         ae:95:46:98:ac:5e:86:4a:e6:da:98:5b:2c:02:11:cb:b2:b3:
         49:f6:d2:24:fc:e5:6e:ff:1e:0a:eb:1e:f0:bc:be:2f:16:11:
         74:66:62:84:4c:2d:ba:88:66:9b:a7:51:b6:51:3f:65:c7:56:
         b9:3f:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:03:48 2025 by rpki-client