Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          tKE08siaDCYLYAhCtMjySWF0/Qcq4IQdJ/7mGBSBkDs=
Subject key identifier:   4D:99:0C:8D:53:4F:9F:CB:AA:18:C3:79:B8:A9:4F:79:D6:CC:BF:50
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       0196A12D69DD64351EF4165D10A28B6A23A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          1275
Signing time:             Mon 05 May 2025 16:00:29 +0000
Manifest this update:     Mon 05 May 2025 16:00:29 +0000
Manifest next update:     Tue 06 May 2025 16:00:29 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: jlEFLPLQGWIOVg0l7oCq44XhkrLJvgzRF4idG0c8H1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:69:dd:64:35:1e:f4:16:5d:10:a2:8b:6a:23:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: May  5 16:00:29 2025 GMT
            Not After : May  6 16:00:29 2025 GMT
        Subject: CN=4d990c8d534f9fcbaa18c379b8a94f79d6ccbf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:c5:04:af:c7:79:29:43:17:65:76:83:ff:
                    29:83:40:d9:d7:df:fc:5b:9b:06:19:66:7e:c8:d5:
                    57:57:ea:8a:3b:b5:cf:81:aa:33:50:c0:b4:f0:6a:
                    6d:33:82:68:00:13:0e:e5:65:d7:7a:56:6b:e5:9c:
                    f1:6b:c6:20:27:ff:78:31:fd:5d:62:e4:f8:a0:42:
                    b8:2a:5c:5d:99:f2:7f:67:8b:ec:2b:86:00:73:4b:
                    ff:4d:a5:d6:c0:6e:75:71:ef:e7:75:b0:01:e1:76:
                    ce:85:99:1c:b2:87:ae:7c:66:6f:69:4a:11:9d:2d:
                    bb:59:b6:97:40:f5:1e:66:fd:dd:ff:9f:0e:75:1a:
                    62:5a:b7:81:eb:a5:d6:bf:13:52:3d:ad:28:5e:79:
                    d0:2f:07:c4:b2:8d:e2:f2:72:ba:27:f4:a8:d3:ce:
                    ad:8e:b0:83:7b:e1:20:12:e3:aa:a0:53:f9:06:1d:
                    5c:a3:3c:2a:1b:89:37:ae:7d:8f:52:c0:75:fa:30:
                    2d:15:80:57:4a:f9:6b:1e:5d:1a:5d:cb:65:6f:60:
                    18:da:2a:a8:b9:15:8e:7d:af:45:10:0d:a6:85:85:
                    30:37:65:36:be:94:be:3d:3f:36:c3:29:cf:93:37:
                    69:58:11:6e:b5:3d:52:15:b4:c5:87:05:e2:ff:42:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:99:0C:8D:53:4F:9F:CB:AA:18:C3:79:B8:A9:4F:79:D6:CC:BF:50
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:72:5b:c4:a4:a7:da:16:ea:49:9d:5a:ae:c6:a3:e9:0b:
         82:71:c6:f7:64:2e:13:32:3d:ee:f7:ac:c4:23:de:77:5c:6b:
         d7:17:b6:e4:bd:31:06:f4:c5:69:22:ec:1e:03:63:60:0b:34:
         df:24:18:ab:d8:6b:b1:49:b2:61:0b:e5:4b:39:6f:81:e0:b6:
         0d:42:90:dc:c6:13:75:34:f3:73:69:f9:4f:ff:fa:aa:21:4f:
         7f:b3:02:85:2f:bd:63:97:13:ec:46:aa:00:ec:a1:42:4c:2e:
         f1:b5:d5:09:bf:d1:02:57:5e:5e:b5:32:bb:b9:5d:11:ab:c8:
         d1:85:d5:fa:8e:96:f8:bf:95:f3:94:55:a2:ba:19:3b:4b:93:
         10:3c:74:a3:4f:33:b9:8c:ca:73:1c:24:25:4f:93:c5:d5:4f:
         33:27:4a:8f:ee:3c:b8:62:6e:7a:d7:6b:2d:8e:f4:6e:1e:3e:
         01:8c:84:e9:7b:50:31:37:c2:00:13:15:a1:c3:e2:0d:0f:fd:
         85:ad:43:82:27:0b:31:22:05:5a:a0:92:74:c6:41:5b:77:9c:
         63:2b:97:00:cd:82:2a:1d:38:9c:5f:8d:13:2d:7e:bb:1e:c8:
         74:86:8d:54:83:bf:70:cf:0f:0f:d2:c2:4b:7a:41:02:ee:2c:
         e0:ba:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:13:03 2025 by rpki-client