Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File:                     b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier:          D+wymjFg8uenyGcdFihZWjwKaPdt5Kk28f5sdE77Nak=
Subject key identifier:   73:5B:AD:F4:6F:FB:42:21:EE:69:28:8B:A5:1F:6D:36:11:7B:3A:50
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer:       /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial:       01977188052719BFC1C27A6A1063A5CD608D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number:          05C2
Signing time:             Sun 15 Jun 2025 03:00:28 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:28 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:28 +0000
Files and hashes:         1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
                          2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: LZts5WBqp0/nyxyhk66dtdP/M9nLNlM+5AYEfyVkcII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:05:27:19:bf:c1:c2:7a:6a:10:63:a5:cd:60:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
        Validity
            Not Before: Jun 15 03:00:28 2025 GMT
            Not After : Jun 16 03:00:28 2025 GMT
        Subject: CN=735badf46ffb4221ee69288ba51f6d36117b3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:0d:d1:c9:b7:32:0e:11:39:4c:64:fb:63:
                    11:f9:98:7e:be:97:d7:64:b9:63:e9:b8:ee:6a:a8:
                    48:49:0a:f0:d2:cf:2e:f0:6c:0f:b6:81:4e:c8:fc:
                    96:1f:9f:3a:00:99:93:bf:7e:e9:32:de:10:cd:d8:
                    95:72:c2:17:bf:29:21:3b:97:23:0a:69:5a:86:2a:
                    61:1a:01:81:bf:b1:40:7a:d3:8c:ce:fe:19:a2:a5:
                    fe:c6:70:9c:b6:c6:30:2e:c4:d8:0a:3a:bd:1e:9b:
                    b3:dc:4c:93:79:69:7e:10:97:21:1a:5b:95:ba:99:
                    d4:80:f8:a8:f9:08:04:6b:c7:88:f3:b0:70:14:71:
                    61:fc:be:12:a0:5c:df:7f:e2:c3:99:ee:b6:f8:04:
                    94:43:93:9d:89:64:35:9f:df:49:ae:64:0a:8a:27:
                    a1:cf:4c:a8:df:0f:3d:65:86:77:9c:73:2a:7c:a4:
                    5e:d3:eb:46:10:15:ae:bf:6e:2b:d2:36:ea:a2:eb:
                    95:ad:cc:96:14:b6:7c:f7:cc:0c:63:68:8a:73:bd:
                    8e:ff:e2:f3:bc:34:d1:ec:6c:22:37:28:ff:d2:42:
                    48:19:c8:c6:1e:1d:16:89:38:6d:1c:70:9a:fb:f0:
                    10:33:82:8c:d6:4d:9a:68:1b:cc:22:bf:07:03:b0:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:AD:F4:6F:FB:42:21:EE:69:28:8B:A5:1F:6D:36:11:7B:3A:50
            X509v3 Authority Key Identifier:
                keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:4b:40:0b:34:e8:99:33:3a:f4:be:87:8c:1d:32:ef:34:
         fd:62:17:b7:5e:e1:23:6e:15:52:76:9c:14:1d:69:09:a4:05:
         cb:98:4a:99:fb:de:76:b5:e1:3b:75:2a:43:43:4d:f9:8d:f8:
         d5:1e:0a:5e:af:5b:c4:d8:84:25:3a:a7:04:66:04:e7:46:38:
         de:30:d3:d6:7a:88:c7:59:a1:00:97:4a:32:74:40:a8:83:40:
         95:13:78:17:0a:78:a8:ad:5d:53:04:8b:78:ba:4c:7b:1e:77:
         8e:09:6f:23:1d:8a:de:59:05:3e:f7:09:09:25:59:52:44:5e:
         22:5f:03:b6:64:b3:52:70:54:45:b5:76:0d:49:7a:10:5d:ee:
         28:1e:30:b8:cf:09:20:7b:0e:db:54:f3:7b:04:45:0c:ab:e0:
         29:77:eb:90:cf:dc:54:3f:ec:2d:29:89:f0:09:36:51:a8:79:
         53:af:0a:2b:34:c5:39:8d:3f:89:fd:e8:b8:e4:54:bc:a2:57:
         56:16:d9:31:d2:f0:e0:b7:bc:80:84:a7:6d:30:c1:c4:6e:62:
         af:d8:f4:11:b3:02:97:ff:9e:d8:3c:0b:c1:03:1c:af:05:c4:
         4d:14:62:d5:ed:96:aa:80:cb:05:98:4d:75:8a:09:38:36:2d:
         85:ee:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:16 2025 by rpki-client