Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          7mwPXVE/eYJIJVULpEO8r5u4W7xCHka2GUFxWFh+HeI=
Subject key identifier:   82:F0:87:8E:9F:0F:37:88:6A:23:64:AD:D7:5A:FE:3F:D6:B3:FD:76
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       019777C131EFA15B46CA99AA1989B49DE5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0E56
Signing time:             Mon 16 Jun 2025 08:00:39 +0000
Manifest this update:     Mon 16 Jun 2025 08:00:39 +0000
Manifest next update:     Tue 17 Jun 2025 08:00:39 +0000
Files and hashes:         1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
                          2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
                          3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
                          4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: vSOgoKyFehpGad+PKvyTDYn75BVoCUskkxCwoewWAJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:31:ef:a1:5b:46:ca:99:aa:19:89:b4:9d:e5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Jun 16 08:00:39 2025 GMT
            Not After : Jun 17 08:00:39 2025 GMT
        Subject: CN=82f0878e9f0f37886a2364add75afe3fd6b3fd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:df:81:23:51:28:ce:1d:94:17:5d:dd:92:
                    0c:bb:58:48:76:35:07:7c:48:be:cb:b9:68:dc:9c:
                    ca:4e:87:e5:20:c2:99:2b:54:c9:0b:16:4b:59:99:
                    f7:e8:0f:36:80:b3:d7:05:be:16:2a:73:e6:2f:ba:
                    91:91:f5:29:a3:b5:b5:63:60:eb:fb:bb:e9:e1:83:
                    59:2a:78:c5:e1:80:7d:a3:27:f4:7f:13:ba:00:57:
                    6a:e3:cc:f2:4d:60:ad:89:5d:7c:3a:b7:ff:42:c4:
                    6e:b8:0b:af:0d:55:9c:7a:5c:aa:84:4b:2a:93:ae:
                    03:e7:a5:c8:80:87:51:57:f2:b2:15:d7:23:01:5e:
                    b5:09:35:3f:31:e3:08:9b:ae:e2:db:c1:b7:a9:1a:
                    f2:8b:cb:c5:5b:8a:80:7a:9b:4e:98:00:d7:9f:33:
                    63:71:dc:3f:92:30:55:37:fd:fb:cf:01:ca:70:b0:
                    ea:22:f0:36:5d:3a:b5:59:11:0c:7b:43:eb:79:71:
                    ff:1b:1b:89:79:bf:71:bb:46:6c:78:40:bf:8b:c3:
                    fd:1b:aa:44:a7:41:d3:80:6a:54:0a:8a:5b:c7:7b:
                    b9:7b:96:14:48:3b:4d:4a:13:cc:9f:96:dc:df:42:
                    ff:36:2b:98:f8:14:23:85:ba:d9:c4:6b:93:8b:3f:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F0:87:8E:9F:0F:37:88:6A:23:64:AD:D7:5A:FE:3F:D6:B3:FD:76
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:69:3f:50:29:e1:e8:cf:20:10:48:bf:79:48:2c:db:49:5a:
         d7:cc:6c:37:e3:a4:8a:19:0f:59:81:e3:94:27:f3:4b:45:26:
         87:0a:6f:a8:41:3b:14:58:74:89:a5:76:26:8b:d9:ce:2e:a0:
         f1:1b:ba:ae:01:09:eb:60:2f:93:11:54:5e:2f:89:70:13:a8:
         c7:44:d0:4a:56:9e:c6:bc:68:a2:9c:70:9a:e4:10:28:88:44:
         86:c6:21:5b:a0:06:82:9d:66:60:92:d4:27:1a:e8:5b:12:6c:
         e0:f8:f9:7b:a9:57:4f:ef:94:6a:b6:b9:3b:21:58:7e:97:a8:
         63:25:31:94:57:dc:4a:ad:46:b2:01:67:f6:3b:15:39:b3:f2:
         bb:f8:3f:ba:2b:33:45:e0:dc:db:1f:99:9a:ee:45:83:04:be:
         72:c1:dd:7d:44:e8:c2:c2:c6:6e:fe:82:4a:cd:99:52:76:3b:
         ad:38:bc:d6:55:5f:27:02:bb:e3:a9:10:66:d3:72:77:47:b6:
         2d:a9:cd:1b:17:cb:9b:3c:b0:ba:97:4d:15:4f:01:0b:73:1a:
         bb:ef:05:66:17:77:80:56:f7:60:0c:10:d6:5e:6b:75:22:89:
         89:79:2f:ce:87:89:9a:ad:eb:39:21:0c:6a:cf:0f:e7:b6:af:
         16:b9:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:21 2025 by rpki-client