Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          uoxE5kbEWqfrkAkdWjjAIHb5DvtkhfGvYKb6EHNRXvg=
Subject key identifier:   CD:E9:9A:F6:E6:AF:2E:D0:BB:00:69:E1:7F:79:A4:D3:BC:9D:1C:A3
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       01976C2B0E17C6B0BA4A9CE1009F82ED38CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          0FC6
Signing time:             Sat 14 Jun 2025 02:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:50 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: TZZGYVgH2JUGArBszy1IIUh7sWxNjDA4lhrV+cREQQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:0e:17:c6:b0:ba:4a:9c:e1:00:9f:82:ed:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: Jun 14 02:00:50 2025 GMT
            Not After : Jun 15 02:00:50 2025 GMT
        Subject: CN=cde99af6e6af2ed0bb0069e17f79a4d3bc9d1ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:3c:57:52:aa:ec:41:a2:c0:38:fe:4c:7c:
                    0a:9b:7a:1a:c5:1d:f2:75:c8:3d:c9:8f:e5:f3:0b:
                    77:25:f1:a6:6e:9b:62:81:20:21:eb:19:ce:30:bf:
                    3d:b2:6e:ad:71:a9:be:de:9e:0f:bb:f7:e7:d1:c6:
                    24:a4:f5:1c:d7:df:0e:3b:5f:fe:50:e4:bd:e1:b7:
                    5c:b5:45:78:0f:39:50:85:b0:45:c7:4f:38:c9:71:
                    1c:20:63:fb:e7:f4:fc:07:a6:53:31:1a:17:92:a1:
                    47:08:56:de:86:a4:22:81:ea:cb:a5:7a:ec:58:23:
                    c0:f8:e8:e5:b9:98:b6:6a:e5:4c:d5:b0:06:26:e0:
                    3f:eb:79:ec:5b:f4:85:4a:54:cf:ae:99:34:32:fd:
                    ea:b0:5a:64:f0:db:a4:ea:ba:9c:4e:a7:21:f5:c3:
                    9c:ab:6d:93:18:46:7e:cd:8b:09:b8:61:f2:b4:8f:
                    c1:6a:33:84:1f:66:cb:a9:85:42:26:a9:13:2b:30:
                    ab:dd:90:45:fd:5e:43:03:54:b6:de:7b:4a:24:dd:
                    f3:3b:47:ba:aa:f0:67:7a:9e:99:60:5e:97:7e:e5:
                    ee:db:0c:35:d8:8b:05:a3:21:c6:ce:f3:92:44:59:
                    3a:ee:db:d0:b5:9f:1d:79:e3:1c:90:28:cf:57:46:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:9A:F6:E6:AF:2E:D0:BB:00:69:E1:7F:79:A4:D3:BC:9D:1C:A3
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:62:8b:59:83:06:22:46:ee:b8:20:9d:46:76:25:01:0d:a8:
         13:70:42:b4:6b:2c:94:ef:a2:c9:6c:10:a3:eb:5f:76:ec:cf:
         e0:c2:b5:73:0e:48:0e:f4:57:94:94:b4:e6:9e:c9:68:a7:8c:
         21:b4:a0:32:98:a0:6d:82:0d:d5:1e:d6:b9:dd:17:32:12:de:
         34:db:32:33:9a:26:9a:8d:ca:90:aa:c2:11:51:71:ed:31:63:
         d1:2e:f4:65:b6:52:9e:d5:1d:39:dd:5a:e8:05:e0:a3:f0:a0:
         bd:9f:fe:7a:20:64:98:e2:60:6f:c1:f3:a5:d3:15:fd:d2:f5:
         2e:86:9e:0a:51:6d:ad:3c:3b:ba:e9:5d:f2:63:3f:bd:f6:a8:
         b8:48:dc:66:7d:b2:0c:48:be:ec:ce:94:da:fa:df:6c:90:80:
         70:6e:33:34:89:81:35:41:83:67:01:1a:18:f4:ad:8d:0a:a3:
         5d:31:32:ba:3d:bc:bb:a9:3f:b2:3a:e3:49:69:c2:a4:b1:a0:
         a5:79:ad:fa:8b:8b:15:c7:be:5c:c3:ed:51:f8:b7:cf:3a:78:
         25:dc:16:80:a2:d6:19:cf:7c:12:65:c8:d4:7f:32:87:78:56:
         44:c8:b6:a1:fe:cb:81:d3:7e:20:1c:86:38:32:9f:d2:7d:2a:
         8a:c5:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:09:44 2025 by rpki-client