Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File:                     obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier:          vTe66F7z5DtNyzsS3as2xZ3FtwIeXIU1ocEQ9g3FEqE=
Subject key identifier:   9F:DD:85:39:30:D6:52:2F:07:25:E7:81:F8:B4:22:FF:67:88:A0:FD
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer:       /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial:       0197820DDE06136A30E3645DB67F0456C327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number:          102F
Signing time:             Wed 18 Jun 2025 08:00:36 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:36 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:36 +0000
Files and hashes:         1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
                          2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: pfivLK7HcDaqwBb0Fxp7gfdWKnFt09xTdQMD1N31kcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0d:de:06:13:6a:30:e3:64:5d:b6:7f:04:56:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
        Validity
            Not Before: Jun 18 08:00:36 2025 GMT
            Not After : Jun 19 08:00:36 2025 GMT
        Subject: CN=9fdd853930d6522f0725e781f8b422ff6788a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:54:4e:00:d3:12:62:b6:ab:cf:c2:76:31:
                    68:67:2e:c2:8f:a1:00:6e:33:f4:d5:4f:c7:a5:77:
                    b1:08:5f:b0:34:e1:98:ee:5d:ef:e0:4b:b2:e7:6f:
                    b4:7f:90:12:5d:0a:5b:db:9a:07:98:0a:55:65:ce:
                    90:c4:61:1c:eb:a3:dd:ff:ae:b3:4d:bf:9d:10:91:
                    41:9b:b0:e6:f1:66:e2:3c:d9:d7:af:5e:c7:d9:2a:
                    94:b4:a8:36:b9:69:c4:29:d3:f7:4d:84:56:c9:3d:
                    07:32:89:11:e9:46:86:cc:44:af:6d:7a:70:02:44:
                    f1:d0:67:70:af:ba:f5:de:6d:31:72:e6:e1:b8:26:
                    75:30:da:21:b5:0a:ab:1b:28:df:81:8b:bf:23:4f:
                    b1:9a:02:86:b6:b4:d9:72:33:17:8e:35:eb:b9:aa:
                    d2:51:8a:08:25:e9:aa:c6:4a:59:65:fe:72:9b:f2:
                    26:6b:5c:eb:3e:dd:62:d7:0e:e6:18:04:00:8b:46:
                    e4:ad:e5:9e:79:08:86:58:0f:5f:05:1b:69:00:34:
                    5e:3d:a6:e1:2a:18:1d:c2:14:16:64:cc:c3:61:fb:
                    af:07:ef:07:da:79:52:5b:3e:c3:84:ef:29:17:73:
                    f3:a3:e8:ee:dc:fa:86:7e:13:2e:45:c3:ef:21:1c:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:85:39:30:D6:52:2F:07:25:E7:81:F8:B4:22:FF:67:88:A0:FD
            X509v3 Authority Key Identifier:
                keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:a6:b9:05:04:bc:7d:58:95:a7:e8:bf:ba:bd:73:82:4b:2b:
         d0:f4:0f:bf:4c:c7:a2:19:ae:f9:56:df:95:74:63:f0:7d:86:
         53:62:40:fd:77:2d:f2:e8:9a:10:5f:64:32:5f:b7:04:6a:09:
         f7:ba:09:0c:fb:31:3a:b3:c8:c4:13:d6:b0:4d:76:17:16:99:
         fb:8e:c9:88:03:b7:65:7d:74:ab:d4:49:53:21:81:f6:e9:d6:
         3a:02:13:5f:9d:91:68:c5:bd:33:87:67:4d:be:c5:5c:15:73:
         84:72:b3:e3:94:cf:87:b7:52:ba:34:8a:dd:33:74:32:f6:ec:
         db:10:21:83:e6:94:01:85:35:8c:34:7a:b5:e7:87:7c:d2:db:
         88:7b:2c:9e:99:4f:a3:5d:ec:7a:b0:ac:bb:9d:1c:78:8b:71:
         60:b5:59:4c:71:33:39:5c:36:2b:70:f8:53:6e:bb:43:b3:fd:
         78:27:44:9d:85:17:78:82:d3:56:04:d5:ec:f6:80:91:71:3d:
         ef:93:e9:99:3d:83:f6:a5:72:a2:c0:aa:8f:a0:31:89:61:89:
         e8:4d:a9:ad:b9:9c:d6:49:1d:c2:1b:af:f7:cf:a9:20:ca:15:
         a9:31:c8:c1:7f:c1:5c:ad:70:85:13:20:92:e4:4e:3f:09:ae:
         62:4b:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:17:46 2025 by rpki-client