Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          dQSD2aiqoPbwZD7rIXcgczabAW+fkeZaq3LNcqSwqls=
Subject key identifier:   7C:2E:04:7A:B6:D0:18:AC:FE:42:02:13:7D:06:78:58:DA:19:1E:6D
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       0197771C9769B2929B1EFB72542CA82A0868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          019B
Signing time:             Mon 16 Jun 2025 05:00:51 +0000
Manifest this update:     Mon 16 Jun 2025 05:00:51 +0000
Manifest next update:     Tue 17 Jun 2025 05:00:51 +0000
Files and hashes:         1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
                          2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
                          3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: SpzzeBXBsYtvUG2LCNd+vpQNxb0gUSX2ONnllBWjLHU=)
                          5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:1c:97:69:b2:92:9b:1e:fb:72:54:2c:a8:2a:08:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jun 16 05:00:51 2025 GMT
            Not After : Jun 17 05:00:51 2025 GMT
        Subject: CN=7c2e047ab6d018acfe4202137d067858da191e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:38:ee:f4:2b:9d:75:c8:1b:08:46:6d:1c:
                    23:9a:56:68:93:70:4b:e9:20:8c:6e:ad:8b:eb:01:
                    1b:c5:e7:c8:94:60:ce:49:4f:b6:e9:5c:16:cd:76:
                    f8:6e:49:ae:11:ad:58:dd:f1:56:6d:44:22:51:eb:
                    d0:87:5e:b5:30:f6:08:e1:12:71:08:22:dd:99:cd:
                    70:16:ef:87:ff:f4:83:58:ea:8d:fe:6f:8c:cc:7b:
                    bf:bf:a6:25:c1:02:9f:b4:35:1c:01:f7:78:65:af:
                    7d:a1:e9:46:5d:e3:3b:29:d4:f5:48:b3:44:9d:5b:
                    90:0f:9d:49:a3:b8:6d:c5:6d:ed:54:a0:78:df:0c:
                    a5:08:bc:e8:46:12:33:d1:cb:80:6a:bb:97:06:4d:
                    de:94:65:32:55:89:d7:89:bc:e1:b0:2a:a7:25:d3:
                    85:a0:7c:86:f3:83:b6:b7:a6:9d:0d:e4:93:b8:1e:
                    63:4f:b6:8a:9f:b9:4e:59:98:4e:f5:d8:f2:f8:6c:
                    3d:46:e7:67:c5:32:0c:80:bf:c6:ce:21:46:e5:b8:
                    27:77:1c:7b:a3:6b:c7:6f:91:50:8d:4a:97:45:78:
                    37:d7:28:7d:09:47:22:4b:e5:7b:69:83:d2:ed:68:
                    e6:b2:db:9a:de:01:48:8d:ac:c0:37:17:e3:47:84:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2E:04:7A:B6:D0:18:AC:FE:42:02:13:7D:06:78:58:DA:19:1E:6D
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:ad:ac:5a:2f:bf:72:5a:e4:33:99:11:56:ed:c1:e6:99:
         11:0d:7b:48:b9:b8:58:b3:71:67:61:1a:df:29:e7:15:5d:e0:
         fc:82:02:10:34:c4:5e:46:b3:70:24:a6:d0:83:18:e9:a9:1f:
         f5:7e:04:59:aa:fb:fc:21:b0:c2:be:86:b0:cb:63:d3:d2:3b:
         46:5a:52:7c:b8:bb:7f:d6:0a:3a:94:5f:7c:52:5d:76:09:1c:
         85:f2:7e:60:36:fa:5b:2b:80:f6:31:58:fc:35:d7:15:9e:97:
         55:66:e7:86:65:a8:72:c4:4a:b1:92:63:8e:81:a2:26:6f:b7:
         69:c6:ff:10:cc:84:33:5e:f7:ff:02:06:14:db:48:0b:e4:60:
         9b:21:2b:11:3f:46:cf:46:ad:ad:0e:73:77:78:2c:ee:21:4d:
         a6:14:b6:a6:09:47:f9:ca:18:90:30:b0:7a:b9:f3:97:77:45:
         4c:6d:8a:dd:ff:4e:4e:24:a2:02:f2:dc:de:de:3c:b7:90:2e:
         5e:97:b9:79:06:73:d7:02:c6:85:14:7b:33:19:8a:36:84:28:
         b1:06:00:f1:6a:6c:16:18:8c:86:fa:7d:ff:e4:62:d2:03:4c:
         38:39:b2:89:35:6c:25:b9:ba:7c:70:bc:50:9d:69:2b:90:93:
         34:bb:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:18:21 2025 by rpki-client