Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File:                     g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier:          jOGjrMWKFTih4Is2TZDe5dlX+lKBBuh72g0TSuqddwk=
Subject key identifier:   D4:12:A0:A4:42:33:D9:C8:1C:3A:CA:3F:B5:9E:67:C5:C6:D4:FC:EF
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer:       /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial:       019771880A2AF0BE29B02AB574A971544C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number:          0EAA
Signing time:             Sun 15 Jun 2025 03:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:30 +0000
Files and hashes:         1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
                          2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: a4EscC46ibtdQQI9A3a2/jbeOcvCWW57u8mGMndzGGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:0a:2a:f0:be:29:b0:2a:b5:74:a9:71:54:4c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
        Validity
            Not Before: Jun 15 03:00:30 2025 GMT
            Not After : Jun 16 03:00:30 2025 GMT
        Subject: CN=d412a0a44233d9c81c3aca3fb59e67c5c6d4fcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:3c:2b:83:7f:17:3a:d1:18:64:a6:47:81:
                    59:4e:d9:89:bc:61:3a:cc:6f:db:76:8a:b3:5d:83:
                    51:fc:05:ea:25:68:f1:1e:fe:c6:9b:a4:a1:25:e1:
                    3a:b5:d9:7b:8e:9a:23:da:c3:2f:07:0a:ea:c6:60:
                    e4:b4:08:11:e4:b2:7d:5a:71:f5:d7:21:f8:3d:a5:
                    84:52:a4:a8:15:08:b9:9d:f9:18:05:3b:a6:5d:e4:
                    54:6a:78:cf:51:dd:7f:15:aa:e1:f4:00:10:85:45:
                    07:0b:67:cb:57:54:a8:89:05:fa:56:33:db:a3:68:
                    31:82:f0:68:4c:d9:66:5e:bb:ec:01:cc:38:73:d6:
                    8d:7a:50:96:06:e7:69:38:d9:43:8d:0f:c0:a9:fe:
                    ab:01:ad:03:d5:74:9f:89:e3:7c:92:b7:05:cf:9b:
                    20:b9:8f:d0:a4:02:27:35:82:41:0a:1c:13:96:1d:
                    38:c4:ab:19:32:a1:85:76:bb:f0:63:f3:8f:d8:d7:
                    a9:0d:6d:39:89:00:7b:ca:e1:04:59:62:8f:75:be:
                    af:82:38:23:64:44:24:91:d5:9a:27:4f:cf:7d:ed:
                    e0:71:2e:ba:d2:db:63:11:cb:43:28:61:80:35:7a:
                    1c:5e:bb:03:39:98:6e:7c:40:75:08:15:31:70:ec:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:12:A0:A4:42:33:D9:C8:1C:3A:CA:3F:B5:9E:67:C5:C6:D4:FC:EF
            X509v3 Authority Key Identifier:
                keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:5b:d9:88:6a:3d:c5:32:36:d9:0b:69:81:65:00:7a:21:
         62:7a:03:24:f6:67:8d:59:e6:85:d0:9f:de:fc:8e:90:3f:b0:
         1d:df:c9:81:e2:30:3c:c3:56:c4:bb:ea:c3:e5:9c:ac:cc:52:
         4b:d1:66:ab:8b:27:4a:35:b5:be:60:27:6d:d0:01:40:45:c2:
         20:63:b6:95:19:86:ea:cf:54:e3:47:ee:77:49:ae:a2:05:29:
         bd:91:e2:1b:dd:f9:83:b3:3d:1d:bc:a7:4b:25:e7:c4:93:ab:
         44:3b:fa:02:00:a3:75:45:01:6a:d5:7b:01:ba:a6:e8:84:4b:
         4f:bb:05:f1:ba:67:f9:ae:c8:04:8e:90:90:c5:92:6f:01:cf:
         46:c3:6b:87:32:6d:09:60:32:e7:63:16:56:c1:28:f2:aa:34:
         01:03:85:3b:6a:32:cb:93:db:b7:c9:bf:28:97:47:ff:7b:f0:
         32:13:29:8c:ae:48:17:d7:03:2b:cd:73:ad:02:ab:da:cd:b9:
         c9:f0:90:7d:8e:bb:cf:06:a4:86:10:0e:07:dd:8e:f4:b3:f7:
         29:cd:65:70:e6:c7:aa:8c:6e:48:8a:23:46:35:12:fb:01:9e:
         9d:50:bc:c3:aa:24:26:ed:6e:d7:85:c7:64:68:8b:e9:c4:b9:
         33:f6:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:29 2025 by rpki-client