Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          lppU+5dcL0GJ+k4Jr0IDlwbtV4mefS8o6cACZSuxd9M=
Subject key identifier:   90:D2:01:7D:05:40:49:C6:08:10:69:B3:BA:D8:70:2B:48:7E:32:23
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       0196B6A2FC565A85A9FA4C80992307540ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          11F3
Signing time:             Fri 09 May 2025 20:00:56 +0000
Manifest this update:     Fri 09 May 2025 20:00:56 +0000
Manifest next update:     Sat 10 May 2025 20:00:56 +0000
Files and hashes:         1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=)
                          2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=)
                          3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: kopmMXwlP+cKdc/4VrB9wJf4P6OW664by3KkgGtvb4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a2:fc:56:5a:85:a9:fa:4c:80:99:23:07:54:0a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: May  9 20:00:56 2025 GMT
            Not After : May 10 20:00:56 2025 GMT
        Subject: CN=90d2017d054049c6081069b3bad8702b487e3223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:e5:c9:bc:78:e9:39:e4:73:9a:26:9f:b3:
                    1d:57:eb:99:88:2f:ae:09:e7:4c:35:3a:cd:8d:bb:
                    ab:3a:d8:19:5e:a8:3b:60:ef:7b:ea:0e:f7:a9:3f:
                    90:c9:ee:18:63:5c:7d:35:a2:02:2d:38:cd:ec:90:
                    39:a4:52:04:7e:93:f2:23:6a:4a:03:60:d7:c9:b8:
                    a6:55:4f:54:6d:1b:6c:90:99:21:29:5e:f8:3e:55:
                    58:ce:3d:81:8e:d8:f2:c4:18:d6:f2:a4:a5:32:32:
                    10:fc:23:8a:ad:da:39:e2:f2:b0:77:9c:dd:6b:e8:
                    0b:49:a1:b4:db:84:ba:16:51:3d:b8:da:3f:5f:9f:
                    16:cb:f7:9e:a3:de:c0:1f:2e:d6:9b:df:90:de:55:
                    90:35:bd:90:22:f0:89:fb:1e:bd:8b:7c:9b:5e:41:
                    43:47:f6:bb:13:f2:8a:86:5d:44:e3:62:44:fa:62:
                    a4:d0:5a:31:f6:49:7f:45:b6:7a:9b:ba:46:8a:ab:
                    4f:20:e5:0e:43:98:91:94:43:94:e9:49:1f:83:de:
                    a8:8c:35:25:af:66:64:8a:1c:9d:48:78:1f:f8:ef:
                    72:ae:74:e2:dd:7b:f5:7e:9d:52:d4:45:7d:d1:ea:
                    6a:22:92:95:f4:cb:f2:3e:c7:5f:3e:75:dd:35:6c:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:01:7D:05:40:49:C6:08:10:69:B3:BA:D8:70:2B:48:7E:32:23
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:34:86:9a:e0:d2:b1:a2:69:8f:f1:41:bf:3b:70:32:28:
         fd:89:53:ac:ec:00:4b:33:fb:84:5b:06:c3:77:3f:7f:87:df:
         5e:e0:b2:6f:45:81:4d:06:ff:d2:57:ca:8b:20:96:67:01:85:
         35:14:91:a9:9e:00:29:1c:95:49:dc:c9:a4:6c:c9:0d:b0:e9:
         9b:24:cd:7c:fe:d0:86:5b:51:8f:a9:29:4f:f2:fd:90:95:65:
         33:d7:17:00:75:cb:31:43:23:80:4f:22:e8:46:c1:8e:48:49:
         6c:7b:82:02:31:26:21:84:ac:5d:c2:66:72:53:5f:72:f5:ee:
         b6:e8:b2:ae:da:99:af:d0:31:bd:be:92:28:87:43:b1:91:a4:
         a3:cb:77:a8:bd:97:51:e6:1a:e9:ca:76:03:42:d9:a7:3a:3d:
         b0:55:5e:e5:9f:dc:f3:eb:4c:78:d2:60:f9:bb:ff:4b:db:00:
         a3:b1:39:a5:26:4b:2f:37:d2:ac:95:d2:d9:7d:85:fb:04:a3:
         78:7e:f1:2e:3a:35:fe:c9:2c:51:bb:59:b4:ff:c9:3c:de:3d:
         cb:ce:4e:ec:f7:09:91:e6:a6:c1:2c:62:81:89:5e:86:f9:dd:
         95:51:21:b1:e1:6c:98:a7:a0:a6:f4:16:0d:f3:dd:16:db:b3:
         97:ee:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:57:40 2025 by rpki-client