Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File:                     OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier:          u8HiMZo+zvNkYWRox9azPOgT0sZ+eKk4PQKqm2ZPZJY=
Subject key identifier:   C9:59:13:3D:0A:65:F0:A2:E3:E6:EB:1A:6A:8A:07:AF:71:86:0C:26
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer:       /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial:       019692CD1E1841DD32C641E2FF2451E13F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number:          1530
Signing time:             Fri 02 May 2025 21:00:38 +0000
Manifest this update:     Fri 02 May 2025 21:00:38 +0000
Manifest next update:     Sat 03 May 2025 21:00:38 +0000
Files and hashes:         1: 41o_KDQT0UQR0-pEGq6ZFFoyGEY.roa (hash: mkyU9FNe+9kldpNCWIBTUaB1xImUCSbnmtoOt1trV1c=)
                          2: EfAbE-x7JWikVYwPPlQe_vVwMQg.roa (hash: 7jN/LfmMAw7O2spCMvO+jNeJ92v1x2ZZaE7vPy60zYA=)
                          3: JKilfZrkJhllQ19r3NByhgoqTDg.roa (hash: TyGhUzaYqQpVckTL9iipsY4ZDEots8Yo4CEp0B079m4=)
                          4: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: pfJ2nrcotGNOLzl6GJkaUClHZ8HjuTDrYJ+4LZ6EVaI=)
                          5: SHIdIo5QDACoW0nIIu5f5RtYZ_Y.roa (hash: Wl9sZv7NXkEqjqOeUmOOqdDlFgYyfsqwHN90exWSc1U=)
                          6: UxDrDzP2TNEJomhvUm5pptefxgA.roa (hash: /MVrUvLgefyKi9OhWDKlnZN9gJaxVmd7pmpH+GNvKAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:cd:1e:18:41:dd:32:c6:41:e2:ff:24:51:e1:3f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
        Validity
            Not Before: May  2 21:00:38 2025 GMT
            Not After : May  3 21:00:38 2025 GMT
        Subject: CN=c959133d0a65f0a2e3e6eb1a6a8a07af71860c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:f2:51:ee:c3:10:80:fb:b5:c8:ab:86:a5:
                    c4:72:1b:e6:80:6d:97:9d:70:dd:c1:00:65:73:ee:
                    66:92:91:42:ce:f1:f2:af:74:92:c7:6a:3f:c0:6d:
                    95:7e:fb:43:5b:6f:aa:f8:bf:55:f1:5f:80:45:18:
                    2d:45:33:b6:13:91:d6:f2:f5:7f:66:82:5c:28:92:
                    59:d1:98:d3:d4:ac:18:4e:27:6f:f6:62:37:8a:01:
                    e8:11:84:d1:36:c4:37:8c:2a:0c:66:68:1d:0d:0c:
                    fd:cd:f3:a3:3f:a3:29:41:20:ad:74:3d:29:e1:26:
                    81:0c:dc:3e:21:96:9d:f7:a6:f0:6e:09:a9:21:43:
                    ad:70:32:52:6f:8f:4c:40:b2:0e:87:22:43:ba:3f:
                    35:29:d9:6f:85:13:40:d1:10:03:5a:af:53:d2:2e:
                    5f:fa:8a:42:dc:c0:e0:cf:a9:ba:6f:7a:b4:c6:b4:
                    e9:8a:04:0c:ad:de:ef:f2:1a:1d:65:26:aa:f2:0b:
                    35:57:49:25:ba:db:e5:fc:32:89:72:ae:83:78:ce:
                    86:d2:c8:20:ef:07:a8:09:83:74:2d:a4:9f:22:3a:
                    31:9d:42:1c:4a:d6:c8:2b:4e:c2:98:d3:5b:d6:39:
                    6a:8d:65:26:6f:c8:a6:56:a9:3d:f7:de:c1:72:a0:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:13:3D:0A:65:F0:A2:E3:E6:EB:1A:6A:8A:07:AF:71:86:0C:26
            X509v3 Authority Key Identifier:
                keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:14:a8:ab:77:f0:2c:53:9e:81:aa:f9:0d:ec:8e:b4:47:
         b3:ee:62:1d:4d:1b:36:11:80:aa:25:d1:f3:80:7c:6b:a1:a4:
         34:7f:dc:2c:8b:35:98:dc:ee:f0:04:cc:f2:9e:a5:c3:03:9a:
         51:2c:dd:2f:39:e4:73:54:74:8f:e7:60:45:bf:bf:be:30:07:
         bd:f3:23:2e:8e:af:2e:14:b7:41:e6:e5:d3:d7:86:84:ae:c1:
         d9:ca:17:9f:db:09:72:60:a8:4b:ed:bb:b1:08:9b:bc:51:01:
         e7:25:3e:13:77:5b:e9:d3:e2:fd:ee:71:47:7e:8c:e6:7b:3e:
         d3:ec:a0:e8:89:9b:03:3a:b5:b8:b2:35:95:1d:c6:71:56:22:
         9f:24:77:f7:9b:11:95:92:c7:6f:95:51:84:8b:dd:47:81:70:
         04:6c:0a:6b:8b:ad:4f:fa:00:66:b0:f0:35:b6:28:ec:37:23:
         85:22:31:4d:95:f3:23:f5:9d:33:2b:bf:55:e2:eb:a5:cb:38:
         00:55:2c:47:38:00:c4:fd:03:ce:4c:00:7a:6e:9d:9a:d7:28:
         d7:2a:c9:84:79:76:0f:a6:97:35:74:61:99:c5:3d:83:86:c9:
         f8:b6:05:70:e1:2b:48:51:12:a3:17:99:bb:b0:74:9c:17:e6:
         fa:46:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:44:08 2025 by rpki-client