Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File:                     0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier:          oLRNbUebbpzzTp4J2mx+caPWu9knl+lcXvbFvvBdzRw=
Subject key identifier:   02:19:E0:5D:E8:46:1B:E1:16:12:E6:E3:78:4F:1D:12:97:90:E8:4E
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer:       /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial:       01978C5A59916C3244646BEF957C20175C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number:          1464
Signing time:             Fri 20 Jun 2025 08:00:20 +0000
Manifest this update:     Fri 20 Jun 2025 08:00:20 +0000
Manifest next update:     Sat 21 Jun 2025 08:00:20 +0000
Files and hashes:         1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: Iv4MDkwaecrVXAyQkzpAMf+LpHGjBeUyQcx3Cs/695s=)
                          2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 04:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8c:5a:59:91:6c:32:44:64:6b:ef:95:7c:20:17:5c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
        Validity
            Not Before: Jun 20 08:00:20 2025 GMT
            Not After : Jun 21 08:00:20 2025 GMT
        Subject: CN=0219e05de8461be11612e6e3784f1d129790e84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:e4:30:d9:32:fc:03:5f:d8:7c:51:f7:43:
                    d2:5a:a2:71:e2:58:e2:dc:ba:51:a1:b0:5e:64:05:
                    04:13:c6:e6:94:fb:e1:a9:dc:23:2a:39:18:b9:7a:
                    4d:9f:19:b6:1c:56:85:e7:09:f1:5c:35:6a:7a:65:
                    ee:72:e5:80:34:3f:05:1b:9c:24:d2:5d:6e:eb:55:
                    32:6d:4f:e8:ef:dd:b0:9e:53:c2:78:cf:55:5e:38:
                    cb:d3:17:ce:ef:d4:2e:66:73:4d:09:d1:97:91:69:
                    51:36:3b:ee:5b:79:0e:d3:8e:a0:0b:b5:35:ee:6a:
                    db:5e:75:49:4b:ac:81:b9:d1:4a:2f:da:76:35:d9:
                    5f:16:e5:ae:e6:b3:b4:60:9c:3f:a8:fe:86:96:7b:
                    96:cc:c6:6d:e9:6e:30:a0:82:99:28:37:cb:c6:0f:
                    43:77:11:5e:eb:96:2f:a7:2c:0d:f5:5d:04:1e:19:
                    67:34:18:3d:6f:0b:f2:f5:39:6e:2c:49:41:2b:c9:
                    27:97:a3:2d:a2:53:31:dc:88:ba:54:eb:39:ff:00:
                    76:5f:63:f2:b3:04:63:30:e0:6f:c0:6e:74:d4:82:
                    b9:2a:a9:16:a4:95:21:b2:71:14:d4:fd:25:fc:3b:
                    5b:6a:a1:db:2e:3f:9e:ca:75:e2:4a:dd:05:fa:5b:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:E0:5D:E8:46:1B:E1:16:12:E6:E3:78:4F:1D:12:97:90:E8:4E
            X509v3 Authority Key Identifier:
                keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:8a:d0:89:6a:f2:5f:82:06:b1:42:ba:0d:35:00:ed:40:
         8c:2f:f6:67:ca:98:b1:9f:be:69:94:49:7e:39:3c:a1:ae:17:
         c1:5e:56:15:5e:6b:45:cc:70:c1:e6:03:d1:27:20:02:39:8a:
         65:b0:07:79:26:73:79:d2:2d:75:7c:2f:6e:a9:d0:97:66:d2:
         8b:ea:d8:cc:d2:4f:1f:c5:96:f8:d5:f0:08:a8:b7:5d:24:d1:
         5c:27:42:27:52:d8:68:d1:e9:87:62:63:91:0e:d4:34:9e:49:
         81:35:dc:b3:75:c3:54:56:43:40:1f:74:37:0f:a4:b2:b9:9e:
         f7:58:d3:af:e1:a4:1c:cf:04:16:17:7c:27:35:88:29:0e:47:
         c9:dd:19:e5:38:d2:2e:5e:b9:29:e0:27:57:56:1a:c4:c8:0b:
         04:ef:af:07:26:7a:6a:f2:ab:d6:17:2c:08:e2:13:a3:20:81:
         fc:16:90:9b:c7:59:bb:99:5d:d8:39:57:8b:42:c1:47:34:08:
         5d:3e:bd:05:35:80:68:7e:b4:26:33:65:9e:86:91:2d:55:c8:
         52:1a:ad:a0:3b:84:25:c2:79:28:94:be:b8:4c:0d:22:a4:e6:
         93:2e:71:c7:bb:3a:cd:49:9c:6c:f5:f5:27:0d:37:f0:21:e3:
         62:66:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:24:24 2025 by rpki-client