Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          7+fMZaHJOzugh272kHmwdK0wDnZKKDHxIO68rJ4rGLo=
Subject key identifier:   C1:5F:99:F6:09:D4:90:A5:90:59:B8:AC:F7:95:88:04:9E:0E:F5:63
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       0197707581B72DFC258FBC7996A994CFFFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          159A
Signing time:             Sat 14 Jun 2025 22:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:38 +0000
Files and hashes:         1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
                          2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
                          3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
                          4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: TCxk/071MF10nqCq/UkAf31pP8pEykpbeODrq7w7ygw=)
                          5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
                          6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
                          7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
                          8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
                          9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:81:b7:2d:fc:25:8f:bc:79:96:a9:94:cf:ff:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jun 14 22:00:38 2025 GMT
            Not After : Jun 15 22:00:38 2025 GMT
        Subject: CN=c15f99f609d490a59059b8acf79588049e0ef563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:7a:3a:2a:a6:37:0b:10:09:fe:9c:35:87:
                    86:0b:f4:89:39:65:3e:93:b1:d8:76:42:59:42:09:
                    03:da:ac:78:5f:41:ee:01:89:ee:de:85:66:b4:e3:
                    e9:a8:95:03:91:0c:ad:50:7f:b7:83:9e:79:66:0a:
                    71:39:50:aa:0a:af:74:4c:1b:14:ba:f6:e6:7c:91:
                    f4:4b:b4:98:a0:93:eb:fd:c3:a0:f1:ea:c0:1b:ab:
                    a6:0d:17:ba:aa:eb:ef:3e:7d:ef:7a:d6:ba:06:f1:
                    ef:3f:c1:69:ce:3a:11:bd:0c:82:78:d1:0c:fd:38:
                    da:4c:ca:89:1f:8b:0d:10:ed:d1:c4:3c:11:fd:d7:
                    a5:74:f6:03:e0:f8:f5:f1:97:b0:a0:2f:d6:b2:e5:
                    cf:e3:96:14:0a:d4:5a:31:85:4b:df:99:62:86:29:
                    31:23:e0:3d:53:c1:d2:87:40:3d:c1:87:fb:ef:f6:
                    83:1d:f1:fb:cc:d4:81:79:a7:10:34:24:cd:46:d2:
                    50:df:52:bf:75:07:c1:4c:d3:2d:55:b9:33:e0:e5:
                    23:7b:c9:3d:ad:1e:b5:9b:e3:14:17:63:c9:ea:b4:
                    c1:f1:11:23:10:37:53:3b:a0:6b:e0:41:3c:53:b1:
                    14:6e:58:97:ff:1a:6f:97:e0:fe:da:0b:eb:41:8c:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5F:99:F6:09:D4:90:A5:90:59:B8:AC:F7:95:88:04:9E:0E:F5:63
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ee:be:62:fa:f6:f8:a3:0a:39:ae:d6:30:c3:bf:98:8e:ff:
         0f:96:12:e9:01:fa:de:68:3b:cd:a3:e0:b8:1e:40:80:05:ae:
         45:fb:5d:c1:86:6c:5f:fc:7c:7f:3d:fc:4e:94:2e:34:ee:99:
         0b:f8:51:5c:b6:72:b5:a8:96:05:6d:dd:03:eb:9d:f5:10:14:
         47:81:6b:42:7e:8d:f2:76:9c:95:8c:06:1a:3a:8a:aa:f7:54:
         19:6e:7f:3f:27:e1:03:98:51:aa:1a:5f:6e:66:5f:80:c4:68:
         44:56:f7:d1:f5:3e:2d:43:49:0c:cb:ff:9e:8d:be:a5:87:a9:
         2b:2c:6a:3d:69:c8:bf:f7:c0:4e:c7:60:71:ec:32:44:37:e6:
         01:3c:ad:ff:c6:fa:6a:70:18:ec:5e:0d:da:bf:02:d7:0a:66:
         4f:da:e3:c8:b1:d9:6e:a0:e9:4c:e7:0b:b4:6c:c0:70:26:4e:
         3a:3a:b6:83:89:5d:84:1e:10:f9:c3:aa:88:88:9b:64:c9:cb:
         22:c2:0a:fc:68:44:df:8f:77:de:70:80:27:b1:69:f2:fd:14:
         d8:82:2b:db:25:26:34:22:79:59:24:cf:e5:0c:c6:e3:99:0a:
         56:b1:6d:d0:ca:7d:fd:66:dd:e1:7b:1b:24:df:d8:6d:03:5f:
         69:fd:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:35 2025 by rpki-client