Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          R+UgNcfe8pajv0oBa1tL//5yg7rhfLk2X+gUjEjlL4o=
Subject key identifier:   AC:9C:AD:C5:76:A5:89:D1:49:D7:D3:D7:6D:6B:0E:D1:78:1B:15:F2
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       01977E314C54FB27FBD2331B03BA15B26019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          159D
Signing time:             Tue 17 Jun 2025 14:00:49 +0000
Manifest this update:     Tue 17 Jun 2025 14:00:49 +0000
Manifest next update:     Wed 18 Jun 2025 14:00:49 +0000
Files and hashes:         1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
                          2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: dYolvuWuq4gsbgTIfOiY4QIfvU2EJ62U52fStrpZivo=)
                          3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
                          4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:31:4c:54:fb:27:fb:d2:33:1b:03:ba:15:b2:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: Jun 17 14:00:49 2025 GMT
            Not After : Jun 18 14:00:49 2025 GMT
        Subject: CN=ac9cadc576a589d149d7d3d76d6b0ed1781b15f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:03:af:e9:1f:cb:55:27:04:2c:6f:58:7c:
                    cf:39:84:a0:8e:4e:f0:c5:ae:89:42:46:9a:ae:40:
                    4b:26:af:51:00:4a:03:b0:8e:14:0a:cc:0b:36:eb:
                    a7:f3:1e:24:c5:e0:98:85:e3:22:30:87:a6:ce:ae:
                    95:0f:a0:70:54:eb:d0:34:7b:25:28:71:99:4d:ff:
                    cd:66:77:3b:32:ab:01:12:8d:e4:bf:3c:d5:f2:2f:
                    43:b8:f5:e7:bb:a6:10:de:5c:8a:03:30:83:5c:97:
                    27:98:82:b5:7d:aa:ce:ee:64:dd:34:cd:93:23:6d:
                    aa:41:a7:f3:34:d4:b8:a0:df:bb:98:bd:28:96:3f:
                    f3:d8:34:9c:3e:50:bb:b7:db:26:f0:c8:88:3d:4c:
                    50:8d:27:39:cc:3d:de:55:3c:83:13:29:fe:56:f0:
                    c2:fa:a3:8d:7c:6a:7b:fa:0a:4c:39:29:08:81:e9:
                    17:5e:ca:18:c1:e9:3d:7b:0f:ea:c4:58:f0:eb:35:
                    90:0a:fc:52:f5:b0:2f:15:6b:3e:10:d9:6c:85:c9:
                    6c:cc:04:26:3f:8f:23:b7:a3:a6:8f:92:38:bb:7e:
                    f7:a4:b5:05:d6:38:f3:83:80:d8:98:8f:a9:0d:ea:
                    52:bd:68:ea:0c:c3:b7:03:56:c1:ae:ae:65:52:b8:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:AD:C5:76:A5:89:D1:49:D7:D3:D7:6D:6B:0E:D1:78:1B:15:F2
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3e:8e:0d:d3:40:ab:52:79:f1:10:c0:b9:4e:ca:5d:4c:91:
         0d:dd:1b:fb:a0:e7:88:79:3f:54:4d:6d:d4:54:e2:9b:26:a6:
         ab:49:12:f5:cf:57:6a:5b:10:aa:76:3e:5a:88:d5:43:26:fd:
         88:e1:05:12:6c:69:ad:e3:6a:a4:02:cf:41:52:f2:e3:f7:9c:
         32:c9:4c:04:9b:a9:1b:68:5f:fe:2c:b7:89:37:36:2b:91:ce:
         92:54:6b:62:0e:d4:68:54:78:89:81:e8:b8:9b:04:1e:8f:62:
         49:25:8d:03:da:aa:a7:2e:77:90:30:f5:e0:f5:64:05:e7:73:
         6e:2a:94:ce:cf:ec:eb:cb:ea:39:87:67:cb:e1:a1:73:91:27:
         fa:7f:c9:d0:f0:2d:ba:9f:2d:4f:c6:cb:f6:c6:55:a3:ba:d3:
         11:ce:f1:56:fc:d3:83:42:2e:15:02:32:21:9c:10:2d:5a:95:
         1f:40:dc:21:50:78:85:5c:74:21:f2:8a:96:6c:34:d3:85:df:
         f9:d9:e3:c4:a6:1d:e2:dd:ef:0a:fd:c7:c8:11:57:4a:c1:65:
         a8:f2:2d:f7:d8:09:b0:69:cc:78:08:0b:be:01:1e:dd:57:da:
         c5:cd:65:25:76:e8:40:d5:1b:12:6c:7e:5b:e6:3c:30:57:70:
         95:52:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:06:56 2025 by rpki-client