Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File:                     ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier:          7aQw2+i1XF1h75un3fbGmsbLB7E4bqjVo7rnj12l//s=
Subject key identifier:   0F:58:47:B6:DA:14:22:BB:2A:80:40:C7:DD:44:AE:A7:79:23:B0:7A
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer:       /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial:       019673B04A482E44C8611B95803784EA6EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number:          05F6
Signing time:             Sat 26 Apr 2025 20:00:55 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:55 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:55 +0000
Files and hashes:         1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: aiPWbeBvFT1ovAj1zsOhLGG/pZPi0rc/+mERBkl68h8=)
                          2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:4a:48:2e:44:c8:61:1b:95:80:37:84:ea:6e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
        Validity
            Not Before: Apr 26 20:00:55 2025 GMT
            Not After : Apr 27 20:00:55 2025 GMT
        Subject: CN=0f5847b6da1422bb2a8040c7dd44aea77923b07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:c4:5d:fd:a7:5a:48:16:f2:9c:94:08:ca:
                    9c:77:df:d7:f6:1c:16:4c:6f:6e:d0:dc:04:64:2b:
                    d9:d4:c4:b7:a1:eb:0a:cc:3b:5a:9f:e0:ad:e4:88:
                    e6:d7:9b:e1:52:ee:5d:67:75:b7:9c:ba:71:5f:71:
                    96:32:38:ad:6b:f8:73:a2:94:ba:e3:1d:92:22:38:
                    cd:2a:84:93:7b:f8:e7:eb:36:66:10:d9:d0:6e:e5:
                    66:a4:64:fc:b9:84:65:2f:ef:cc:95:b3:f5:c6:fe:
                    69:72:cb:c7:20:83:16:8a:7e:3b:e9:54:86:d9:ee:
                    f0:7f:18:12:9f:bb:6d:4f:5b:61:cf:f3:74:cc:11:
                    38:4b:b3:c4:bd:ac:47:7d:0a:1a:8a:e6:51:9f:b8:
                    5d:73:6c:da:4f:12:f5:25:df:d8:39:68:de:40:64:
                    ca:52:21:b6:4f:9e:28:c7:19:06:f7:1e:81:60:5c:
                    d4:b6:e4:9b:b1:a4:d0:54:03:f2:cb:0d:62:bd:e3:
                    40:07:7c:3e:53:71:42:10:04:84:ea:e5:3b:19:3c:
                    4b:7b:d8:e3:ca:93:e1:f0:6d:7b:c6:95:95:03:a6:
                    db:78:21:dc:75:25:4e:e3:02:fe:7d:92:80:a8:44:
                    fa:f2:40:9e:98:b0:22:91:ac:63:ed:4f:28:56:6e:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:47:B6:DA:14:22:BB:2A:80:40:C7:DD:44:AE:A7:79:23:B0:7A
            X509v3 Authority Key Identifier:
                keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:de:74:08:1c:74:34:9a:0c:84:78:da:69:aa:73:4a:84:
         0b:e3:71:8c:f8:a7:1f:09:96:0e:4c:44:04:a4:f2:c1:65:98:
         bb:e3:d7:57:43:17:a9:22:3c:3a:5c:7d:13:9d:3c:1f:8c:3e:
         bf:5b:fe:9a:5b:58:73:45:91:15:b1:64:62:5b:65:cc:05:8b:
         74:2f:8e:cf:42:bb:ed:be:67:87:5c:9f:40:72:ac:15:e9:de:
         3d:a3:68:b6:8c:3e:cd:23:c3:6b:89:72:f0:d2:59:8d:3b:7a:
         ef:8e:38:c9:c1:77:0b:1c:dd:e1:a0:b1:a9:f2:bd:b4:d8:42:
         61:64:f9:20:ba:5d:c3:05:b6:7a:fb:db:72:ae:4a:5a:4b:6e:
         8c:30:22:a5:1c:3c:e3:62:5c:27:20:8e:8e:be:9b:62:ab:5d:
         9b:40:c3:ee:fe:c1:08:10:41:6d:bf:20:9f:e8:8b:b9:31:be:
         bd:2c:98:e8:61:63:70:13:fa:52:2d:8d:00:dc:03:0c:f6:e6:
         5b:21:21:f6:1d:48:9b:4f:14:07:bf:cf:d5:0d:31:0f:0b:0f:
         24:8f:54:a3:c7:dd:34:0f:37:2f:68:30:77:26:0d:ab:72:6f:
         49:79:ff:95:ea:cf:0b:8f:bb:c6:f3:e4:5b:d5:88:e1:98:7d:
         c6:1c:60:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzsEpILkTIYRuVgDeE6m6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTg3MDBlYTljN2JlMmRmNTY4OGFmZmJlZGQ4YTRlNTUz
OTJkZTYwHhcNMjUwNDI2MjAwMDU1WhcNMjUwNDI3MjAwMDU1WjAzMTEwLwYDVQQD
EygwZjU4NDdiNmRhMTQyMmJiMmE4MDQwYzdkZDQ0YWVhNzc5MjNiMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyPEXf2nWkgW8pyUCMqcd9/X9hwW
TG9u0NwEZCvZ1MS3oesKzDtan+Ct5Ijm15vhUu5dZ3W3nLpxX3GWMjita/hzopS6
4x2SIjjNKoSTe/jn6zZmENnQbuVmpGT8uYRlL+/MlbP1xv5pcsvHIIMWin476VSG
2e7wfxgSn7ttT1thz/N0zBE4S7PEvaxHfQoaiuZRn7hdc2zaTxL1Jd/YOWjeQGTK
UiG2T54oxxkG9x6BYFzUtuSbsaTQVAPyyw1iveNAB3w+U3FCEASE6uU7GTxLe9jj
ypPh8G17xpWVA6bbeCHcdSVO4wL+fZKAqET68kCemLAikaxj7U8oVm4BeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9YR7baFCK7KoBAx91Erqd5I7B6MB8GA1UdIwQY
MBaAFDkYcA6px74t9WiK/77dik5VOS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWIt
MWM4YmUyNWViNjg2LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWItMWM4YmUyNWViNjg2
LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbbedAgc
dDSaDIR42mmqc0qEC+NxjPinHwmWDkxEBKTywWWYu+PXV0MXqSI8Olx9E508H4w+
v1v+mltYc0WRFbFkYltlzAWLdC+Oz0K77b5nh1yfQHKsFenePaNotow+zSPDa4ly
8NJZjTt67444ycF3Cxzd4aCxqfK9tNhCYWT5ILpdwwW2evvbcq5KWktujDAipRw8
42JcJyCOjr6bYqtdm0DD7v7BCBBBbb8gn+iLuTG+vSyY6GFjcBP6Ui2NANwDDPbm
WyEh9h1Im08UB7/P1Q0xDwsPJI9Uo8fdNA83L2gwdyYNq3JvSXn/lerPC4+7xvPk
W9WI4Zh9xhxgVw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:42 2025 by rpki-client