Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File:                     Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier:          5EmoDCmly0ALT6C9UU3ujc3Rkum3l2TWgB3LIG+GGxI=
Subject key identifier:   85:42:B2:BD:EC:D0:EC:6B:3F:55:3A:1E:13:18:1E:69:D9:62:E5:A2
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer:       /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial:       0197711A30CF23C600B32BC67A213CA41FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number:          142F
Signing time:             Sun 15 Jun 2025 01:00:31 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:31 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:31 +0000
Files and hashes:         1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: S9IkbFW4ZUKLZph09c3mRi1arcHG/EzKFsEI1Wf4KiA=)
                          2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:30:cf:23:c6:00:b3:2b:c6:7a:21:3c:a4:1f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
        Validity
            Not Before: Jun 15 01:00:31 2025 GMT
            Not After : Jun 16 01:00:31 2025 GMT
        Subject: CN=8542b2bdecd0ec6b3f553a1e13181e69d962e5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:5b:3f:55:58:76:ed:4d:8f:d0:5d:d1:08:
                    b2:85:04:49:b6:e4:d8:78:24:2f:59:31:ce:fe:5f:
                    a0:2c:64:79:0d:27:c8:48:12:07:14:a9:8d:c4:d5:
                    30:5a:3a:f9:e9:b7:ca:d1:d8:56:0f:8e:83:34:01:
                    4c:50:3b:44:83:26:ad:00:f6:45:99:1a:fd:59:4a:
                    b3:42:4f:f3:e5:aa:e5:3f:83:fb:e0:7c:09:e1:92:
                    8e:0a:0e:56:d5:45:c2:b0:4d:79:23:dd:c7:34:7e:
                    88:2b:30:25:64:64:8f:f4:eb:e0:32:7f:bf:3b:22:
                    8d:2e:21:ef:87:3d:96:77:89:a3:96:48:1b:21:ca:
                    df:b7:d7:fd:e8:18:2b:6e:16:e3:13:d6:c7:5c:9b:
                    1e:73:6f:a0:f3:ae:06:e6:78:70:d1:f3:14:d4:a9:
                    2d:74:0f:df:3b:9e:e5:bd:2c:d1:64:e0:1a:35:59:
                    90:16:56:30:ab:9f:98:91:d1:ed:a9:40:5c:d3:ad:
                    a4:78:1d:e5:08:25:d0:19:48:6b:8d:2f:90:33:ca:
                    c7:44:3d:16:db:50:e2:9e:51:eb:7c:b3:38:c1:de:
                    36:88:8f:0c:3e:8c:b9:d8:36:b9:04:a8:92:09:1c:
                    c9:4e:a9:aa:26:4c:c8:56:12:70:58:9a:3d:dc:24:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:42:B2:BD:EC:D0:EC:6B:3F:55:3A:1E:13:18:1E:69:D9:62:E5:A2
            X509v3 Authority Key Identifier:
                keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:33:b8:06:43:fd:3f:cf:d1:9e:4a:1f:9e:61:30:65:9c:
         3b:7e:88:2c:2d:7e:86:0f:c3:8d:2d:66:52:54:af:41:06:d7:
         16:0b:1e:90:29:bf:a0:9e:8c:8c:47:99:fa:6d:59:00:e6:9b:
         6c:d2:b3:46:ca:fb:e1:8a:66:e8:b4:19:83:26:35:57:0e:ed:
         0d:d9:65:a0:82:2d:25:04:55:66:1a:7e:a1:ae:49:d1:d9:d6:
         9c:3e:73:05:7a:58:7c:0b:86:de:34:af:e2:b5:4f:00:6f:f4:
         76:d3:c3:5d:b6:6d:22:79:f9:16:04:ff:36:22:0e:04:b5:b4:
         ba:7e:9f:43:eb:44:b1:ab:4e:7d:b7:af:ac:db:4e:13:88:e7:
         0f:24:5f:4e:9b:52:33:6c:2c:13:e1:57:98:95:6a:df:bc:fc:
         b9:27:33:f2:3d:28:30:bb:05:e7:60:f8:d1:5b:92:b5:a9:ec:
         e7:d9:49:f0:fe:c0:2b:35:e7:7c:bb:2e:21:24:b2:b3:1a:31:
         72:17:40:9e:e9:99:99:5a:6e:36:29:f4:78:6e:f8:82:18:c6:
         9b:23:ab:c5:00:ea:e8:8a:3f:77:5d:1a:a8:54:39:1e:a0:a0:
         e0:0c:43:c4:f7:1b:c1:07:75:85:2d:e5:eb:6f:3d:44:ab:7f:
         db:f6:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:55:58 2025 by rpki-client