Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File:                     OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier:          1JFj2MjIi4xX2AvumTFmFscBqFMP7OfaYOFz25kPOls=
Subject key identifier:   EE:C1:BC:F5:1D:09:DB:36:B8:75:C0:55:46:B7:72:6B:00:B4:FA:08
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer:       /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial:       019770ACB445BE1B3BDD9E5032F9809A7169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number:          017F
Signing time:             Sat 14 Jun 2025 23:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:55 +0000
Files and hashes:         1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
                          2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: ejCVTmqk+8TfEcAyHLI4b7XmKzcUDa+o+tniPtBtM8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:b4:45:be:1b:3b:dd:9e:50:32:f9:80:9a:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
        Validity
            Not Before: Jun 14 23:00:55 2025 GMT
            Not After : Jun 15 23:00:55 2025 GMT
        Subject: CN=eec1bcf51d09db36b875c05546b7726b00b4fa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:a6:e3:71:6c:12:84:77:32:91:53:d7:69:
                    65:a5:94:4f:8e:bd:11:97:7a:74:f7:af:6c:39:5f:
                    de:46:14:c9:dd:27:af:d2:09:bd:05:72:3c:cd:6d:
                    c4:ad:3d:63:64:93:5a:e9:bd:19:46:ab:40:bb:c0:
                    df:68:e7:df:98:99:8e:9a:b9:41:df:a7:c7:a8:26:
                    3c:ba:41:eb:ee:42:fd:c8:5a:b6:13:d6:a1:b0:82:
                    69:b0:ff:fb:5c:15:cc:aa:5d:f5:2e:9c:c8:69:66:
                    82:33:b9:42:7e:32:3f:dd:02:41:b9:c3:e1:7a:d1:
                    37:d1:45:68:0d:0c:03:42:a1:f5:92:ab:0a:99:91:
                    04:24:09:2f:6f:b8:74:df:5f:f2:0b:19:b6:6d:fd:
                    c1:cd:fa:ed:d7:05:6f:19:8e:46:7b:df:19:2c:9a:
                    82:0f:3d:17:a6:fd:7e:0b:7a:10:19:0f:11:96:36:
                    60:f0:92:16:16:9e:dd:f0:f0:f4:93:e1:9b:6a:41:
                    71:e1:49:bd:2d:32:72:d9:20:b0:81:66:97:87:fd:
                    83:bf:54:27:3c:94:f3:82:10:db:23:32:b4:b9:12:
                    2e:6c:99:51:b3:d3:4f:a4:68:5d:07:f6:fd:a1:38:
                    06:ca:a7:4b:7e:f9:15:4e:24:1b:d7:a3:7e:43:0b:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:BC:F5:1D:09:DB:36:B8:75:C0:55:46:B7:72:6B:00:B4:FA:08
            X509v3 Authority Key Identifier:
                keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:d6:55:be:47:3b:b2:ba:3f:f4:8f:6e:fe:da:b4:7e:f3:
         18:27:79:c5:c7:4e:a7:5f:96:3a:1c:95:99:be:71:65:df:52:
         7e:95:65:01:94:4b:42:c4:8a:d2:9b:5a:52:f0:8e:b0:b5:36:
         f0:2e:8c:0a:0a:69:4b:0e:e0:eb:a7:aa:86:9a:79:c5:dd:16:
         5a:19:bd:d9:62:0b:43:a8:c3:02:fb:78:b2:a4:ea:e0:ea:e5:
         b7:e3:e0:d6:cb:17:f4:b3:d9:2b:f9:70:52:15:a2:96:c8:8b:
         5a:20:25:24:2b:27:c3:06:93:db:69:dd:e7:f7:e0:7f:e1:65:
         6f:c2:09:85:79:3f:bb:fb:0e:cb:80:04:d2:79:e5:9e:d1:57:
         1e:ed:db:d6:0e:b0:6c:52:b5:b7:96:d2:7d:05:0d:2e:95:7c:
         3c:7f:ce:b4:bb:8f:fc:7f:ad:45:6d:4c:4f:3e:20:1d:a7:25:
         01:49:8d:81:7c:d7:17:bf:ed:b1:3f:f2:6a:dd:1f:44:0d:18:
         f2:50:23:12:7d:5f:6b:4c:29:47:ac:48:f4:99:e7:5e:d1:7e:
         37:a2:f2:5e:d9:1c:89:3c:69:f1:2f:08:dc:85:a3:b9:2f:b9:
         b8:26:08:29:85:b9:a7:e0:dd:3e:de:95:6c:ed:a5:2c:d0:ae:
         a6:04:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:48 2025 by rpki-client