Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File:                     ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier:          wEvfPLT+/0lYJYwtUyvrTdPA/jx/OmUaa5CXfuFE7iw=
Subject key identifier:   31:8E:40:65:D8:03:A5:81:13:E4:3F:37:65:12:71:33:00:AE:14:C6
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer:       /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial:       019676B10D8E64F614117CF63E0203056EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number:          09DA
Signing time:             Sun 27 Apr 2025 10:00:36 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:36 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:36 +0000
Files and hashes:         1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
                          2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: Cs8Jaci98xhllpB+17T1LifIL9xei57DgeswAMPAbEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:0d:8e:64:f6:14:11:7c:f6:3e:02:03:05:6e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
        Validity
            Not Before: Apr 27 10:00:36 2025 GMT
            Not After : Apr 28 10:00:36 2025 GMT
        Subject: CN=318e4065d803a58113e43f376512713300ae14c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:a8:7f:4f:db:95:41:56:8d:32:dd:8d:4b:
                    d6:7f:bb:a2:8b:8b:af:28:89:b1:56:99:d1:c4:98:
                    f7:d3:4c:af:50:d5:ab:18:2f:39:53:bc:0a:31:21:
                    53:cb:01:47:ab:5f:27:67:d9:d0:8d:8d:ab:30:76:
                    34:99:7a:15:ef:ac:0d:70:58:e3:b4:53:ee:a5:9f:
                    a3:d4:7a:fd:95:31:3d:81:cc:e3:9c:18:7f:6b:d6:
                    f0:62:fb:11:ec:e7:9e:b3:0f:87:c2:c5:61:bd:84:
                    29:4f:86:33:b1:f5:14:fb:03:6e:9f:40:6a:01:4f:
                    15:c1:68:ae:97:a5:71:16:a1:2b:68:55:66:fb:76:
                    b4:6f:69:a7:35:6b:af:9d:7b:af:01:79:a9:ed:05:
                    d0:3d:ef:50:84:91:3a:a1:ae:d0:f8:fb:b4:e3:75:
                    d5:c3:c7:26:ab:2c:5c:ab:6b:56:b5:57:37:50:26:
                    44:35:c0:ec:c3:45:16:af:5d:1c:1b:5a:ff:8b:96:
                    8d:ba:05:92:eb:9b:31:ab:37:91:42:29:d0:5c:57:
                    70:88:89:98:64:d9:d9:13:18:ca:c7:bb:ab:19:ae:
                    ad:ec:09:96:5e:59:56:a0:93:b0:4a:2c:59:d7:41:
                    0f:2c:c4:86:87:1b:16:30:e1:35:2d:45:22:ec:b0:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:40:65:D8:03:A5:81:13:E4:3F:37:65:12:71:33:00:AE:14:C6
            X509v3 Authority Key Identifier:
                keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:66:4c:5c:30:2c:09:59:ae:24:c6:6d:00:c4:b8:20:e1:
         05:b8:de:2d:1c:fc:77:72:10:74:84:6a:bd:0e:af:37:3f:85:
         fb:29:72:8f:14:6b:89:64:d2:88:aa:21:02:0a:32:ef:55:63:
         6c:d5:d5:ca:c3:72:34:82:4d:e8:8e:d0:ba:3f:39:cf:90:81:
         50:81:86:50:6d:43:ef:7f:8b:97:a3:62:8d:3c:08:6e:ea:fa:
         fa:80:ad:0f:d2:26:86:4f:0d:a1:85:71:9f:11:6e:47:4a:98:
         3a:fa:1d:6b:ba:23:c7:a5:aa:a1:95:69:2a:b1:52:e0:8b:0a:
         28:90:b1:63:52:16:bc:8d:a4:c6:0c:bc:1a:9c:78:ef:b6:a8:
         b4:b3:13:5d:af:f0:6c:05:60:8c:fa:e6:74:ee:04:98:a6:0a:
         02:b3:61:62:21:f8:82:5c:12:ba:6c:81:2b:f5:af:23:3c:30:
         c5:1b:20:08:b5:db:46:b5:d2:6e:15:63:ca:b7:aa:a4:3f:42:
         c8:fd:39:9a:f1:48:53:43:bf:31:73:51:1a:06:7b:70:ba:b8:
         a9:86:64:7a:0a:b3:55:43:33:d1:a1:59:51:5e:25:80:1d:ec:
         8c:77:43:ec:13:51:78:2a:0e:5a:b9:62:64:f8:db:fe:13:48:
         ba:83:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:01:59 2025 by rpki-client