Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File:                     sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier:          7Hu6AaOQkbsi5MSvVllucH/tvLiPXBT7QYJlC0oNFiI=
Subject key identifier:   DD:C3:02:47:0C:B5:FE:2B:E0:82:C9:1F:AA:14:B3:F7:6A:39:80:2C
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer:       /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial:       01976EF4DD94F3C6BBEC06D6963FF5117C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number:          097F
Signing time:             Sat 14 Jun 2025 15:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:30 +0000
Files and hashes:         1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
                          2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: LXG4dbNrO3/R4ISqgIzw+x+UUegzOeQQwrLgkjCnxkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:dd:94:f3:c6:bb:ec:06:d6:96:3f:f5:11:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
        Validity
            Not Before: Jun 14 15:00:30 2025 GMT
            Not After : Jun 15 15:00:30 2025 GMT
        Subject: CN=ddc302470cb5fe2be082c91faa14b3f76a39802c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:a2:6b:02:0a:53:2c:a3:ec:bc:cb:8f:e9:
                    73:cf:95:60:7f:62:17:61:4f:ea:31:0c:e0:8d:e5:
                    f9:66:65:cf:f3:bb:1a:25:71:bb:f6:59:61:ce:00:
                    85:bd:b6:0b:c8:3f:24:fe:56:86:c7:72:d5:ae:54:
                    a5:50:1c:ad:1b:36:33:ea:96:76:b7:c6:f9:31:cd:
                    7a:84:f8:a0:3f:23:af:c7:82:72:0d:b6:a1:8c:2e:
                    87:91:22:63:2a:11:81:7c:b7:2a:24:f9:45:ff:a3:
                    58:9e:45:08:91:3a:f4:ec:08:35:45:80:25:df:fc:
                    bd:05:96:83:1d:e4:93:fa:3f:9d:6e:f8:8e:46:46:
                    94:6b:c8:39:d1:34:12:01:d6:56:5d:02:6a:2a:1a:
                    91:a3:67:49:82:7a:0b:dd:e1:83:39:b8:3d:b5:55:
                    55:b0:d6:1a:cb:16:cf:e7:83:ba:2c:ab:80:3a:ff:
                    b4:62:e0:a8:b1:80:b0:18:12:d5:90:cf:c9:3b:9e:
                    1e:59:dc:10:da:6b:c9:7d:4b:1b:ce:f7:eb:9c:a0:
                    7d:06:c6:ff:61:2e:1e:ac:3e:fa:dc:27:11:34:96:
                    46:0b:03:1a:c0:42:49:20:c2:8f:f2:73:6b:43:ba:
                    59:09:c5:37:3d:b1:7e:01:3f:f3:bd:47:1e:fc:15:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:02:47:0C:B5:FE:2B:E0:82:C9:1F:AA:14:B3:F7:6A:39:80:2C
            X509v3 Authority Key Identifier:
                keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:10:99:f9:d1:c3:1d:2f:2d:f6:72:4c:98:2f:78:79:5a:9a:
         11:f3:70:e3:05:9b:87:c5:33:f7:cd:5f:2f:c0:64:2b:9e:73:
         ef:56:e9:17:e8:7d:40:03:a1:35:f3:7f:bd:51:9f:1d:d4:df:
         de:fe:f3:14:d9:4c:7b:27:2b:5d:97:bb:d0:c1:49:e5:33:79:
         6b:bc:02:db:40:ca:69:a0:a6:d9:1b:a2:dc:42:14:ce:70:b5:
         c8:8f:23:cb:3b:14:51:eb:72:86:22:2f:3e:7b:59:72:bc:f8:
         d2:74:7a:26:da:2a:d5:7c:51:22:e0:cb:4b:76:66:29:40:60:
         17:09:5b:09:92:57:ff:53:6d:89:9b:2b:f7:37:74:e8:d6:d3:
         dc:43:99:28:19:0d:07:a6:6c:2b:8c:e0:2f:fa:4b:fa:c5:ae:
         59:53:bf:67:dd:9f:1e:2c:8b:cf:13:df:e6:bf:05:9b:9f:1f:
         42:a3:45:5a:ce:8e:0e:57:ad:43:d4:d5:4e:4a:8d:3a:9a:d7:
         d4:70:20:b1:a7:19:40:ca:83:da:05:28:c4:0c:d3:a4:7a:c7:
         69:02:d9:f4:e3:10:7a:c6:d0:10:71:b6:d3:c9:cf:0d:cc:6f:
         db:59:66:19:9f:f5:52:10:3e:15:04:03:d6:a3:53:b8:9a:22:
         cc:d1:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:49 2025 by rpki-client