Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          n2oM4D6mP9VMhyzzNUzr74n2AiZEY91hRK5WRdOyJFk=
Subject key identifier:   E6:97:2D:B6:51:04:9A:3B:0B:D4:7E:C8:E9:FC:2B:E0:96:D2:9B:15
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       0197857CB3C26F81F79FC055D6FA0579E49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          159A
Signing time:             Thu 19 Jun 2025 00:00:31 +0000
Manifest this update:     Thu 19 Jun 2025 00:00:31 +0000
Manifest next update:     Fri 20 Jun 2025 00:00:31 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: pKnWGAlOZBySYVX1gPMowRJfvylXUG0BhtDduViXDdY=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:7c:b3:c2:6f:81:f7:9f:c0:55:d6:fa:05:79:e4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Jun 19 00:00:31 2025 GMT
            Not After : Jun 20 00:00:31 2025 GMT
        Subject: CN=e6972db651049a3b0bd47ec8e9fc2be096d29b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:5e:b4:69:76:ac:c6:9c:66:ed:84:a2:3a:
                    9a:f5:92:b6:52:5a:99:92:86:b5:ad:b5:bd:72:fd:
                    0c:66:29:a4:3c:23:5c:17:96:23:df:29:d9:24:7d:
                    4b:57:e5:14:63:ec:e7:c9:ed:a7:1c:8c:21:a8:77:
                    8d:3c:ea:ac:4f:fd:c7:7e:07:65:6e:32:b9:b2:f0:
                    ea:6f:60:50:4a:88:28:1e:9c:cd:65:cf:53:1c:17:
                    75:55:8d:c9:8f:af:f0:02:83:4d:f8:97:89:c4:32:
                    d3:38:ec:76:1e:4d:73:46:31:42:ff:fb:85:95:95:
                    70:06:1e:1d:93:0d:6b:40:11:ef:b4:b0:a8:48:d0:
                    8d:0f:21:c7:7c:73:84:43:02:9b:d7:61:d9:02:02:
                    03:1a:64:11:e6:56:db:ad:42:61:11:76:dc:a6:8b:
                    e0:4c:88:9e:38:9e:13:e5:49:02:9f:3f:ae:e5:33:
                    5f:f8:f8:2f:69:ac:90:cc:90:ad:80:4f:e5:fe:e0:
                    86:a6:1e:0e:9e:ac:5b:63:ab:ce:6e:0d:d1:35:a2:
                    b7:f2:cd:4f:78:11:ee:41:48:f7:f9:36:6a:e6:95:
                    a7:37:0b:1d:42:f3:cc:96:64:d7:e9:5f:c7:41:8c:
                    7b:84:5e:27:23:71:b4:d1:9b:5d:ae:fa:ac:01:9a:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:2D:B6:51:04:9A:3B:0B:D4:7E:C8:E9:FC:2B:E0:96:D2:9B:15
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:01:a1:fc:bd:b5:cf:09:76:11:7e:9c:35:ab:92:2e:1f:
         af:43:72:a7:61:71:d8:36:fe:e4:dc:68:09:de:cc:4b:b7:57:
         ee:5b:a7:cd:1f:0a:4e:f4:15:13:30:1d:be:cd:2f:e4:d3:e3:
         ea:52:a6:fd:88:71:57:dc:dd:41:9b:8a:e0:fc:f8:8f:58:7b:
         56:37:b1:25:2b:72:71:71:0c:ac:70:ee:2e:f2:74:3e:56:67:
         fd:fa:f7:af:0d:a8:08:20:fa:a2:c5:b6:f7:28:ac:22:8f:5e:
         a4:91:81:f8:93:39:76:ad:d9:59:a5:5a:31:df:be:bd:6f:03:
         7e:9a:59:b2:df:f4:0e:e4:4a:18:73:47:5d:b4:fe:8d:63:83:
         8c:58:82:74:f5:50:19:af:cb:88:49:6c:96:94:23:c4:5a:17:
         7f:52:40:3c:01:10:eb:e0:9f:45:a3:9e:1e:ef:ff:6b:20:86:
         d6:21:22:15:68:57:53:b0:40:d6:0c:d8:76:12:89:12:3e:35:
         8d:2a:8f:ec:e4:4a:cf:90:6e:6f:07:30:29:42:e9:b0:de:4c:
         8b:e3:0f:40:cb:04:72:18:9b:8f:d3:d0:03:6b:ea:a9:24:73:
         67:1f:95:a6:f1:7e:3e:4d:d5:9d:12:a6:08:ae:2b:26:7b:32:
         2a:11:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:58:21 2025 by rpki-client