Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File:                     oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier:          RDvvp/wuB7Nn7ojIMzFi4MD5F5lgAStkzFc6ktrTr8s=
Subject key identifier:   13:B9:B5:97:DE:3F:D2:FD:51:9A:E6:6E:51:86:00:56:76:87:7E:29
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer:       /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial:       0197771CA69F79555E175A306B3750DED4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number:          053F
Signing time:             Mon 16 Jun 2025 05:00:55 +0000
Manifest this update:     Mon 16 Jun 2025 05:00:55 +0000
Manifest next update:     Tue 17 Jun 2025 05:00:55 +0000
Files and hashes:         1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
                          2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: Vd71NJL6VMBlZNM5hBRA8qxlbO9nV8Bd9cB6Pft8yZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:1c:a6:9f:79:55:5e:17:5a:30:6b:37:50:de:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
        Validity
            Not Before: Jun 16 05:00:55 2025 GMT
            Not After : Jun 17 05:00:55 2025 GMT
        Subject: CN=13b9b597de3fd2fd519ae66e5186005676877e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:13:d8:71:c3:cc:43:0a:3b:ba:ef:50:d5:
                    65:7a:bb:60:f9:07:2a:25:d1:8d:22:b2:67:96:4b:
                    4e:57:ab:e3:14:99:98:16:88:57:2d:5b:78:67:af:
                    08:8d:98:52:4f:af:81:2a:0c:ea:85:9b:24:df:76:
                    3c:1e:8c:79:5e:f5:37:13:c0:b6:b3:4a:e6:d2:1d:
                    7d:73:ae:a8:25:98:10:3a:4f:e2:08:d2:f3:3b:ec:
                    bf:9a:bf:98:5f:e7:08:77:1c:7f:e1:cf:05:49:9f:
                    60:e5:b8:d8:e0:d9:f5:52:c0:cf:e6:ac:e9:fe:7a:
                    6b:33:69:8c:de:e5:2a:66:a9:d0:5b:b1:e6:e4:8b:
                    4f:ae:20:00:33:75:84:bc:5a:bf:01:df:0d:29:b5:
                    b3:ba:61:bf:fb:4d:ed:c0:bf:46:73:dc:ac:e2:93:
                    46:3d:89:55:5f:71:6e:94:30:b2:cd:80:c7:39:86:
                    41:53:5f:75:48:53:27:56:13:df:05:73:ba:97:23:
                    c8:6e:c0:cd:e1:15:f8:c8:d4:fa:9f:1e:94:90:d2:
                    ae:94:16:5f:be:64:2a:7b:20:27:ce:16:96:74:0c:
                    0a:ec:aa:c4:38:13:73:0e:da:98:94:8a:00:37:97:
                    7a:9f:61:64:50:15:d9:11:0e:0c:e4:e1:e0:64:dd:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:B5:97:DE:3F:D2:FD:51:9A:E6:6E:51:86:00:56:76:87:7E:29
            X509v3 Authority Key Identifier:
                keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:3c:07:b9:44:9b:c4:b6:4a:52:02:ff:df:f7:2f:76:a3:
         bd:47:b7:53:13:c2:20:bb:3f:c4:b0:52:6d:83:69:6d:13:35:
         6c:c5:87:3b:40:7e:8a:12:31:a0:5c:06:cb:4a:b4:67:b5:56:
         f8:2b:ca:ac:6a:a9:d5:66:8d:36:87:b6:8a:02:58:1e:ef:91:
         29:db:c2:6b:00:ef:14:0a:6d:dc:b1:b0:ca:7f:7d:f1:31:a5:
         64:ff:1e:89:1f:b3:38:ff:e9:b5:41:0d:3e:25:44:ac:61:b1:
         33:03:33:12:1c:a5:15:85:89:fe:99:40:27:58:45:eb:6e:dc:
         4d:67:5a:18:b2:3c:3e:33:35:89:05:44:c4:ef:f3:44:61:be:
         81:42:46:8f:7f:a6:03:7d:08:a0:61:0e:0c:02:45:c6:ea:de:
         93:a9:d3:0c:ab:ba:8c:fd:43:0d:4e:68:05:21:e1:3a:89:d4:
         43:01:d6:ea:f5:bf:ae:56:ae:35:c5:61:a3:e9:73:b5:40:db:
         09:ff:73:0c:b4:16:86:48:1c:5b:b5:9c:78:56:6c:09:fa:71:
         33:90:bf:93:87:ca:96:87:7d:31:d9:ae:d3:7c:a2:28:41:f0:
         c8:17:b1:18:6a:b3:a8:65:29:c4:e3:78:bf:40:32:e7:c9:55:
         6b:cc:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:00:58 2025 by rpki-client