Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          9X7hlcagBNHhz7uZw4mtXByfyRRsVoR/fjlgl8PlTT8=
Subject key identifier:   07:39:56:D6:4D:18:BA:4F:FD:FA:38:71:10:12:53:A1:4E:B9:79:EF
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       019677C39443DE31BA921A181CA28E10DB98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          09DA
Signing time:             Sun 27 Apr 2025 15:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:28 +0000
Files and hashes:         1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: TkBWERa6o8AjgFuwOwJvrEUycS0XQKfZeGK04KCXUG8=)
                          2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:94:43:de:31:ba:92:1a:18:1c:a2:8e:10:db:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: Apr 27 15:00:28 2025 GMT
            Not After : Apr 28 15:00:28 2025 GMT
        Subject: CN=073956d64d18ba4ffdfa3871101253a14eb979ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:cb:22:e8:9d:df:08:dc:47:0d:31:74:22:
                    ff:25:7a:6d:68:ba:ca:b0:ec:7b:38:90:08:e5:4a:
                    5a:f9:47:8c:10:6a:3f:e0:40:9f:e8:0e:86:46:bd:
                    0e:f8:3c:a4:5c:3f:72:10:97:34:05:0d:21:8e:c8:
                    5e:24:b6:46:36:ff:20:0b:e1:60:72:ab:d1:80:d1:
                    58:5a:ae:cc:a5:5a:b0:3b:ec:8d:cc:20:91:c2:17:
                    d5:3c:bb:2a:1e:aa:7c:b9:93:5a:a1:a1:18:7c:d1:
                    d8:e2:b3:e3:45:03:e2:2f:1c:55:b5:81:ff:57:42:
                    91:d7:d9:73:84:3c:97:ef:94:c1:45:23:03:06:3a:
                    28:40:a9:ff:a3:0a:72:18:38:0c:11:91:af:a7:bc:
                    2a:d8:9f:1f:e5:9f:39:8e:96:b1:4a:72:6c:30:b6:
                    bb:4b:14:20:91:ef:d4:67:b7:06:82:29:3f:97:b7:
                    c0:10:44:65:fc:28:c1:26:12:ef:fc:db:d4:a0:95:
                    a8:0f:a7:50:27:c6:61:07:59:71:8b:f3:03:2f:89:
                    12:02:21:36:c4:f8:7e:d3:06:b7:49:82:fb:72:74:
                    ea:25:75:d5:d0:ba:94:62:d4:92:9f:34:93:17:a4:
                    31:b2:d1:22:be:a2:c9:b2:ac:c0:db:cf:b7:5b:92:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:56:D6:4D:18:BA:4F:FD:FA:38:71:10:12:53:A1:4E:B9:79:EF
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:25:2c:a0:3f:61:39:08:d4:26:97:56:e9:45:4a:bf:38:
         38:7f:73:9d:84:92:e0:15:d2:92:a1:24:84:2e:b9:62:ec:a0:
         54:06:bc:32:7d:f3:4a:45:c1:b6:57:23:05:55:3f:b3:29:c4:
         92:0b:2a:3d:f8:b3:1b:ba:83:d5:46:17:a9:ed:a4:e0:82:aa:
         6b:0a:01:4e:05:51:84:18:78:53:61:aa:a7:1d:4d:c7:83:26:
         ee:57:1a:01:3e:52:ed:19:75:cc:a4:e3:a6:e2:1d:b2:ae:45:
         d5:3e:a4:b1:1b:a3:9c:21:c8:9b:b0:6f:5b:67:2f:4d:8a:ce:
         2d:74:13:2a:01:7a:4e:e8:43:75:25:ff:98:81:e5:06:94:a4:
         7b:aa:2b:e3:d8:94:99:09:66:be:06:58:47:28:b1:c0:f0:2f:
         a9:df:b3:8b:18:d3:4c:a7:95:13:ff:bf:72:5c:38:95:41:38:
         7d:9f:46:31:8a:b4:86:b6:ff:3f:af:5c:12:88:74:7e:1c:c8:
         6e:6a:00:72:ed:6a:56:a9:f7:5c:e0:8b:8b:0f:24:8d:17:0e:
         77:35:08:47:9f:e1:17:8a:6b:4d:21:96:52:15:0b:55:2d:17:
         77:bc:f4:0e:65:05:5b:a4:45:03:64:0a:e6:f1:68:a4:b6:c2:
         d7:1b:9f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w5RD3jG6khoYHKKOENuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx
NWE1MzcwHhcNMjUwNDI3MTUwMDI4WhcNMjUwNDI4MTUwMDI4WjAzMTEwLwYDVQQD
EygwNzM5NTZkNjRkMThiYTRmZmRmYTM4NzExMDEyNTNhMTRlYjk3OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbnLIuid3wjcRw0xdCL/JXptaLrK
sOx7OJAI5Upa+UeMEGo/4ECf6A6GRr0O+DykXD9yEJc0BQ0hjsheJLZGNv8gC+Fg
cqvRgNFYWq7MpVqwO+yNzCCRwhfVPLsqHqp8uZNaoaEYfNHY4rPjRQPiLxxVtYH/
V0KR19lzhDyX75TBRSMDBjooQKn/owpyGDgMEZGvp7wq2J8f5Z85jpaxSnJsMLa7
SxQgke/UZ7cGgik/l7fAEERl/CjBJhLv/NvUoJWoD6dQJ8ZhB1lxi/MDL4kSAiE2
xPh+0wa3SYL7cnTqJXXV0LqUYtSSnzSTF6QxstEivqLJsqzA28+3W5La5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc5VtZNGLpP/fo4cRASU6FOuXnvMB8GA1UdIwQY
MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It
MzU5ZTRlNGQ5MTc1LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1
LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceYlLKA/
YTkI1CaXVulFSr84OH9znYSS4BXSkqEkhC65YuygVAa8Mn3zSkXBtlcjBVU/synE
kgsqPfizG7qD1UYXqe2k4IKqawoBTgVRhBh4U2Gqpx1Nx4Mm7lcaAT5S7Rl1zKTj
puIdsq5F1T6ksRujnCHIm7BvW2cvTYrOLXQTKgF6TuhDdSX/mIHlBpSke6or49iU
mQlmvgZYRyixwPAvqd+zixjTTKeVE/+/clw4lUE4fZ9GMYq0hrb/P69cEoh0fhzI
bmoAcu1qVqn3XOCLiw8kjRcOdzUIR5/hF4prTSGWUhULVS0Xd7z0DmUFW6RFA2QK
5vFopLbC1xufGg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:13 2025 by rpki-client