Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File:                     Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier:          oaLwIds9iIHqh8rSE48IHORQ9scHl/cwfvWYp21aaXE=
Subject key identifier:   DA:1C:0B:24:9C:69:3C:3A:D3:E3:CF:CD:33:82:BD:12:29:E6:57:C5
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer:       /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial:       01976BF418706172502AEC3C8AC1118326A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number:          03BC
Signing time:             Sat 14 Jun 2025 01:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:48 +0000
Files and hashes:         1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: VZ0ZxRrjuSwm1eA0uXeK2SvaM0L6TpGArHLG3pe3ZA4=)
                          2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:18:70:61:72:50:2a:ec:3c:8a:c1:11:83:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
        Validity
            Not Before: Jun 14 01:00:48 2025 GMT
            Not After : Jun 15 01:00:48 2025 GMT
        Subject: CN=da1c0b249c693c3ad3e3cfcd3382bd1229e657c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:ff:79:c9:74:ed:18:8f:b3:0c:72:55:3c:
                    9f:d4:a9:ab:13:5c:95:a4:80:b3:ea:44:4e:23:2f:
                    00:ba:62:47:b7:b8:1e:60:08:dd:d9:e8:d2:26:e1:
                    65:2e:30:7a:8f:ff:b5:ce:d1:f9:c3:4f:64:9f:b6:
                    2f:7b:53:01:16:d3:ee:e2:e3:40:85:94:a0:73:55:
                    36:65:5f:c3:e5:22:da:68:a5:45:5f:59:1b:48:5d:
                    3e:94:41:ab:bb:50:d9:5f:fd:63:fc:5b:ab:c8:ed:
                    9b:66:40:84:b2:bd:7d:b9:62:8c:13:75:73:d6:37:
                    18:45:0b:33:b3:65:77:d9:26:aa:2f:80:b3:cf:a5:
                    1a:f2:fc:fb:7c:1d:34:a6:0a:a9:9e:fb:3b:c5:49:
                    16:4e:92:a5:80:35:cf:d4:42:03:8c:d0:56:96:76:
                    65:52:c9:ac:6d:cd:81:19:f4:06:b1:8d:ea:01:af:
                    9d:7e:67:54:42:89:a0:dc:82:77:8a:7a:bb:83:78:
                    a3:f2:ca:3a:49:67:53:92:3e:96:bc:29:bf:89:d6:
                    ab:a5:fe:21:96:45:80:c1:16:74:96:cb:ee:5d:fb:
                    79:bf:f1:9b:be:84:67:0c:03:53:b1:b7:f2:32:f6:
                    77:cf:51:5d:e0:d0:d6:8a:11:36:e5:0f:09:f8:72:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:0B:24:9C:69:3C:3A:D3:E3:CF:CD:33:82:BD:12:29:E6:57:C5
            X509v3 Authority Key Identifier:
                keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:b9:a2:d3:3c:b1:fc:a4:8c:f8:b4:a2:49:e9:f3:a2:1d:
         5b:8d:5c:50:1c:11:3b:09:82:f1:2f:c6:d5:f0:74:7f:47:cf:
         11:26:b9:f7:ba:d1:4c:4e:23:20:d0:9a:f3:de:9c:62:6c:89:
         a0:ca:7e:56:7f:03:9f:31:c8:6c:14:2a:82:7d:bd:c0:9d:e4:
         c0:ec:23:34:c5:a1:68:9f:f2:39:25:e1:6f:02:be:c3:cb:f9:
         f6:c6:e9:26:b2:a8:48:8a:61:88:0f:54:2d:70:40:09:f5:c2:
         7d:a4:e1:cb:a5:40:0d:35:e6:30:2c:85:f8:97:0a:1f:94:31:
         d8:78:87:0e:df:ab:88:51:5e:82:19:77:c5:c7:c4:2b:2c:07:
         f1:8c:2e:5d:d9:dd:ef:c4:75:ae:f4:35:41:5d:09:1f:50:80:
         41:00:0c:94:95:af:96:54:50:58:b5:35:2e:77:ff:03:1e:ab:
         0d:f3:e6:c1:98:e7:d0:b8:dc:63:f2:27:f2:c3:09:20:2a:79:
         ff:a1:fe:b1:07:a7:76:48:95:64:ff:72:c2:ba:bc:c4:f5:53:
         eb:e1:38:0f:5c:45:05:be:e3:d8:db:52:9f:31:8f:76:08:45:
         a6:0e:46:f3:29:75:e2:98:44:8e:06:cc:18:74:dc:25:ef:ba:
         15:3b:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:46 2025 by rpki-client