Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          1fu7YUUtJfEyepQVU2NWDjzZV75GJrv6iryFMJw33Lk=
Subject key identifier:   DF:DC:2E:34:25:43:93:AE:A0:26:02:48:DF:0E:CA:89:20:FE:46:B6
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       0196CCF34BAFE11C639118C84B1D0DC5C972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 04:00:18 +0000
Manifest this update:     Wed 14 May 2025 04:00:18 +0000
Manifest next update:     Thu 15 May 2025 04:00:18 +0000
Files and hashes:         1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: hoUyCO9ySJX2R5BlIxCseymxhwe0Ow+XJLaCX1Tw4Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:4b:af:e1:1c:63:91:18:c8:4b:1d:0d:c5:c9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: May 14 04:00:18 2025 GMT
            Not After : May 15 04:00:18 2025 GMT
        Subject: CN=dfdc2e34254393aea0260248df0eca8920fe46b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:d1:3b:f9:49:ad:c7:e9:88:8b:ca:27:fd:
                    0b:1d:1c:28:f8:0c:a5:8f:d4:8e:ba:e4:c6:8a:a6:
                    e3:7d:84:7c:a5:52:67:4d:23:40:f9:02:f9:ce:13:
                    d3:bc:5f:80:ee:a6:c6:e0:a7:ca:5c:4d:eb:90:28:
                    a0:20:de:e2:a4:b4:ba:3e:c2:f4:88:d5:17:e1:6f:
                    1f:55:fd:c2:47:77:0d:58:3a:78:ad:12:12:4d:7a:
                    bc:5b:8f:c4:77:ee:1a:da:c6:26:37:c1:49:e3:4d:
                    5c:6b:4b:68:3b:c7:58:e7:d6:75:47:dc:7e:a9:18:
                    ec:41:4c:dc:5c:ea:f4:a0:57:d6:de:f8:e8:e6:9d:
                    a3:89:f9:be:90:8e:53:50:57:90:a5:97:53:84:79:
                    1f:14:ec:9b:3a:76:64:14:7b:7f:b5:e8:50:8c:0a:
                    d6:15:ac:38:ea:63:9b:ef:e3:7b:2c:ed:38:72:0e:
                    83:e7:b6:b0:78:23:77:be:cd:b2:b2:72:12:2c:b3:
                    63:88:5a:5f:63:9e:ce:14:96:ad:8a:1d:f8:55:0a:
                    b1:8c:35:2a:34:e5:f1:a7:cc:2e:63:ea:23:5f:37:
                    86:d7:03:59:75:2c:30:c1:41:e0:c4:3d:15:ab:f8:
                    e6:fb:80:d3:0d:a7:f4:5a:5e:54:a3:1b:cb:72:38:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DC:2E:34:25:43:93:AE:A0:26:02:48:DF:0E:CA:89:20:FE:46:B6
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:01:3f:3e:9a:7e:d9:bd:85:f7:55:3b:dc:af:24:c5:42:
         f7:5e:f8:a8:9f:9e:ab:4e:9d:c4:28:a2:2d:1d:20:e8:8e:16:
         14:15:18:5e:5b:00:e1:9c:ad:fe:45:59:65:cc:1a:92:48:5c:
         4e:8d:9d:27:d8:38:b3:11:4b:b8:88:18:86:52:35:82:e9:a4:
         7b:c8:e7:af:fa:1e:a5:03:83:74:17:82:6c:31:60:94:f5:ff:
         ec:a8:c4:0f:b0:65:bb:81:c1:5f:17:23:23:49:48:36:59:7a:
         83:24:8c:cd:4f:f0:dd:e3:c2:6a:6b:a4:31:59:6c:18:bc:ee:
         8b:c7:2c:1e:96:a9:ea:b5:6c:a1:78:a7:8f:1e:78:4c:87:04:
         cc:c7:67:85:f7:60:54:3f:ba:41:32:75:83:55:78:2c:44:6c:
         3a:f9:20:1f:f3:67:9f:8a:25:ec:42:a3:37:75:d1:de:fc:ab:
         0f:07:a3:3f:09:bc:51:cb:05:35:66:80:0d:88:d5:c3:47:a4:
         c8:c7:ca:79:f9:fa:98:d9:2d:71:97:b1:42:fe:18:76:5d:58:
         49:2b:78:f7:11:7e:6f:f5:30:71:3c:ba:22:24:1d:84:80:0a:
         7c:db:d7:ac:6e:16:8e:1f:53:54:e9:ee:a6:28:93:fc:a8:77:
         e5:5d:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:27:16 2025 by rpki-client