Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File:                     OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier:          0upB7tThCy0duQgIZRQDz4Y2FJ/2TyKrzpcESbcNmiU=
Subject key identifier:   05:6D:22:C6:2F:7B:0D:80:D6:F4:44:10:B1:FD:CF:FF:8D:1E:DE:B8
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer:       /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial:       019677FB50D4EC50E0DF1E62BE971398A0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number:          1477
Signing time:             Sun 27 Apr 2025 16:01:21 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:21 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:21 +0000
Files and hashes:         1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
                          2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: qaXfK3vvEAQ5fOvII8zIkLhi/uXBdnsMaUIqXZCe0Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:50:d4:ec:50:e0:df:1e:62:be:97:13:98:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
        Validity
            Not Before: Apr 27 16:01:21 2025 GMT
            Not After : Apr 28 16:01:21 2025 GMT
        Subject: CN=056d22c62f7b0d80d6f44410b1fdcfff8d1edeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:d3:d3:6b:0b:23:3f:98:66:fd:38:5a:a2:
                    db:de:67:fd:59:1c:f4:fb:39:de:99:c6:ec:3b:ab:
                    81:bf:70:5f:b8:c3:19:34:94:4a:a4:8f:cd:9b:0c:
                    e0:88:7c:9b:21:db:35:fc:90:e7:91:64:e7:b4:46:
                    d5:ed:6c:81:06:51:2c:ef:00:b7:bf:2e:a6:fa:57:
                    ff:13:06:a4:1b:0e:65:c8:37:0e:d3:db:f5:18:38:
                    8a:2b:be:8b:d7:8b:82:91:59:b0:06:4c:70:8b:90:
                    a0:e4:2d:cf:cd:da:80:2b:0c:81:8e:0d:f7:a0:df:
                    b2:66:32:44:7f:67:56:41:06:da:5b:a9:5c:6a:84:
                    ba:12:1a:c9:8c:dc:5e:a2:73:fa:ae:9e:45:b9:3b:
                    ba:15:25:b9:b8:3e:77:54:7b:20:7c:3d:db:a7:8d:
                    b3:e7:df:b0:b3:db:8b:90:d7:b0:63:5a:78:43:bb:
                    4c:d6:5f:24:36:02:7b:8f:07:4a:1e:60:3a:43:c8:
                    be:af:80:24:f6:ab:80:69:02:23:a2:e5:7d:51:3f:
                    5d:c6:fe:a0:2a:5b:24:21:d2:7d:2d:3b:5c:cc:01:
                    74:49:04:96:0f:f2:71:b9:92:06:5a:b2:58:48:98:
                    6b:ad:ec:33:66:a2:a6:71:59:a1:6f:6f:cf:48:ab:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6D:22:C6:2F:7B:0D:80:D6:F4:44:10:B1:FD:CF:FF:8D:1E:DE:B8
            X509v3 Authority Key Identifier:
                keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c3:8a:99:c4:6f:51:21:aa:ef:db:d7:b3:6a:2c:af:63:58:
         7b:dc:1a:7d:e0:d4:4c:55:b3:4b:97:1c:58:ac:08:90:b4:36:
         31:08:d8:66:da:40:02:bb:84:04:17:5d:35:70:d1:85:ac:e7:
         5c:87:b5:d0:11:28:ad:eb:e4:40:7d:77:3c:63:3c:f2:6c:91:
         81:16:21:aa:a5:c8:24:a8:cb:e2:87:3d:a4:94:1f:1d:d3:d8:
         30:6b:25:d5:6f:ab:33:d3:b7:e4:42:53:25:8c:55:48:33:fe:
         c8:c8:16:af:bd:1f:0c:4f:25:23:1d:d6:2e:bd:93:37:19:78:
         1c:9a:2c:a2:dc:6d:31:d2:7a:7e:c3:2a:73:7e:d5:80:69:75:
         fa:e2:90:8d:3e:55:68:33:bb:35:5c:15:68:db:ca:f1:b2:5f:
         45:b2:de:4c:d7:fb:53:23:15:f5:6f:c9:66:45:ba:9c:cd:33:
         2b:bd:ff:dc:d9:5c:c8:cf:e0:c5:bc:90:f6:8c:af:75:85:8c:
         05:c2:b0:03:b9:b9:6c:ce:65:84:c5:18:73:25:45:ad:99:69:
         c8:71:d7:23:5e:25:98:7a:05:fa:9d:73:69:af:22:b8:eb:30:
         6a:74:37:0e:bc:d2:4f:ba:40:d0:34:06:6a:d3:b6:6c:4c:66:
         ee:ee:15:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+1DU7FDg3x5ivpcTmKDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OGY3MTA2YmVkMTBmZTdmZmM2NWJiZDY0YWRiZWRjOWRi
ZDUyNWUwHhcNMjUwNDI3MTYwMTIxWhcNMjUwNDI4MTYwMTIxWjAzMTEwLwYDVQQD
EygwNTZkMjJjNjJmN2IwZDgwZDZmNDQ0MTBiMWZkY2ZmZjhkMWVkZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUPT02sLIz+YZv04WqLb3mf9WRz0
+znemcbsO6uBv3BfuMMZNJRKpI/NmwzgiHybIds1/JDnkWTntEbV7WyBBlEs7wC3
vy6m+lf/EwakGw5lyDcO09v1GDiKK76L14uCkVmwBkxwi5Cg5C3PzdqAKwyBjg33
oN+yZjJEf2dWQQbaW6lcaoS6EhrJjNxeonP6rp5FuTu6FSW5uD53VHsgfD3bp42z
59+ws9uLkNewY1p4Q7tM1l8kNgJ7jwdKHmA6Q8i+r4Ak9quAaQIjouV9UT9dxv6g
KlskIdJ9LTtczAF0SQSWD/JxuZIGWrJYSJhrrewzZqKmcVmhb2/PSKvD6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVtIsYvew2A1vREELH9z/+NHt64MB8GA1UdIwQY
MBaAFDmPcQa+0Q/n/8ZbvWStvtydvVJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMt
ZTA4MWE1YjQxNDMyLzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMtZTA4MWE1YjQxNDMy
LzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8OKmcRv
USGq79vXs2osr2NYe9wafeDUTFWzS5ccWKwIkLQ2MQjYZtpAAruEBBddNXDRhazn
XIe10BEorevkQH13PGM88myRgRYhqqXIJKjL4oc9pJQfHdPYMGsl1W+rM9O35EJT
JYxVSDP+yMgWr70fDE8lIx3WLr2TNxl4HJosotxtMdJ6fsMqc37VgGl1+uKQjT5V
aDO7NVwVaNvK8bJfRbLeTNf7UyMV9W/JZkW6nM0zK73/3NlcyM/gxbyQ9oyvdYWM
BcKwA7m5bM5lhMUYcyVFrZlpyHHXI14lmHoF+p1zaa8iuOswanQ3DrzST7pA0DQG
atO2bExm7u4VsA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:23 2025 by rpki-client