Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File:                     oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier:          E09xmeQcvN4TmVLQWj0AM3u/bmjB/RQRvoe7QLY4YPQ=
Subject key identifier:   2C:58:2D:17:47:6B:24:30:86:CB:F7:31:1D:C4:0A:B7:8D:FB:FB:21
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer:       /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial:       01976A7369A67C980003345969EA9D2B90EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 18:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:37 +0000
Files and hashes:         1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
                          2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: NhZNkeOYl+7tF25RWNUdlANHKHmNXqkTzs//pP5wQac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:69:a6:7c:98:00:03:34:59:69:ea:9d:2b:90:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
        Validity
            Not Before: Jun 13 18:00:37 2025 GMT
            Not After : Jun 14 18:00:37 2025 GMT
        Subject: CN=2c582d17476b243086cbf7311dc40ab78dfbfb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:4f:77:a9:5a:57:42:ee:7e:53:9a:c5:90:
                    21:c4:5d:a1:56:fa:20:a7:b4:ec:d5:10:72:8b:80:
                    54:13:f6:42:5b:d5:57:b4:70:9e:1d:df:fb:02:9a:
                    54:03:04:2e:f0:e9:5c:63:5b:2c:13:99:3a:be:3a:
                    54:aa:d6:20:c8:7c:96:99:16:ab:35:c0:07:30:80:
                    78:91:c6:5e:24:17:9c:2f:87:7e:04:a3:50:85:f4:
                    b8:c3:6f:32:5f:52:97:8d:ec:89:4a:db:9e:44:86:
                    3f:81:c1:1e:6f:ab:b0:33:40:96:e4:24:87:44:58:
                    a1:02:a4:44:fd:7d:10:a4:d2:fb:36:7c:bd:19:82:
                    e6:9f:7e:0e:fc:25:1c:ad:f2:e7:35:e6:76:b9:b9:
                    59:99:4e:10:e9:2a:3d:34:f2:3e:28:79:c7:95:65:
                    a9:6e:de:1c:05:d9:d4:6d:69:da:f3:f7:8b:4e:d6:
                    a8:2e:34:15:5d:1a:3c:45:8b:17:f9:99:db:a4:7c:
                    e4:12:b6:ac:d0:67:c7:85:72:33:55:fa:78:78:99:
                    05:95:08:b3:f8:a6:91:1a:4f:10:96:87:04:33:49:
                    78:51:c7:3c:92:13:91:a9:c0:22:30:66:1b:f6:df:
                    8e:9e:8c:4d:0f:48:88:52:01:29:f3:d7:1f:cc:75:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:58:2D:17:47:6B:24:30:86:CB:F7:31:1D:C4:0A:B7:8D:FB:FB:21
            X509v3 Authority Key Identifier:
                keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:21:4a:8e:d9:75:81:43:23:63:b4:d8:9e:f1:49:77:45:79:
         7c:4d:20:ee:6b:b0:99:61:07:0a:36:6b:a8:99:cf:93:b9:28:
         90:32:13:22:78:31:87:88:e4:03:9f:5e:8c:e6:1e:df:29:3f:
         f3:4a:ab:b1:2e:a1:10:d3:f4:8c:6a:5b:1c:60:34:ea:40:d5:
         b3:2d:f0:0a:a3:69:6f:07:81:2d:83:9b:51:0d:99:7b:94:96:
         c8:99:6a:fb:8e:48:62:b9:ea:2f:5c:b4:4c:7d:fa:df:8c:2c:
         3e:1f:a9:2d:a6:4d:b5:04:1c:0f:8d:e4:af:8c:aa:91:b8:fd:
         5d:76:a4:8c:94:63:94:34:b6:35:db:4c:5c:9c:6c:58:78:dd:
         77:67:6b:e6:db:3f:48:1e:7d:6f:31:69:10:d6:3a:ad:51:05:
         aa:0f:94:b5:32:54:30:92:f3:97:5c:ff:53:09:54:cd:95:60:
         ec:d4:93:b9:94:6b:36:52:cb:f5:bd:be:70:43:db:e6:20:ef:
         e4:26:c0:af:e6:6f:8b:61:5c:d4:59:ea:b3:18:ea:74:29:9a:
         e6:76:22:db:c7:ae:81:0c:de:48:2e:f8:0d:d0:43:16:b7:5b:
         0e:f5:4c:51:fc:ca:80:fb:49:b3:4e:4f:2d:09:ce:c1:7f:1d:
         b1:62:9c:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqc2mmfJgAAzRZaeqdK5DqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjU1MjgyYmU0MTlkMjEyMjJiNTA2ZmI3YTM2OGMzZmU1
ZGIyM2QwHhcNMjUwNjEzMTgwMDM3WhcNMjUwNjE0MTgwMDM3WjAzMTEwLwYDVQQD
EygyYzU4MmQxNzQ3NmIyNDMwODZjYmY3MzExZGM0MGFiNzhkZmJmYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFPd6laV0LuflOaxZAhxF2hVvog
p7Ts1RByi4BUE/ZCW9VXtHCeHd/7AppUAwQu8OlcY1ssE5k6vjpUqtYgyHyWmRar
NcAHMIB4kcZeJBecL4d+BKNQhfS4w28yX1KXjeyJStueRIY/gcEeb6uwM0CW5CSH
RFihAqRE/X0QpNL7Nny9GYLmn34O/CUcrfLnNeZ2ublZmU4Q6So9NPI+KHnHlWWp
bt4cBdnUbWna8/eLTtaoLjQVXRo8RYsX+ZnbpHzkEras0GfHhXIzVfp4eJkFlQiz
+KaRGk8QlocEM0l4Ucc8khORqcAiMGYb9t+OnoxND0iIUgEp89cfzHXi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxYLRdHayQwhsv3MR3ECreN+/shMB8GA1UdIwQY
MBaAFKFlUoK+QZ0hIitQb7ejaMP+XbI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjct
OTFkYmM5ZjBlOGRiLzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MDYyYTktN2Y0Ny00NGVhLWFiYjctOTFkYmM5ZjBlOGRi
LzEvb1dWU2dyNUJuU0VpSzFCdnQ2Tm93XzVkc2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSFKjtl1
gUMjY7TYnvFJd0V5fE0g7muwmWEHCjZrqJnPk7kokDITIngxh4jkA59ejOYe3yk/
80qrsS6hENP0jGpbHGA06kDVsy3wCqNpbweBLYObUQ2Ze5SWyJlq+45IYrnqL1y0
TH3634wsPh+pLaZNtQQcD43kr4yqkbj9XXakjJRjlDS2NdtMXJxsWHjdd2dr5ts/
SB59bzFpENY6rVEFqg+UtTJUMJLzl1z/UwlUzZVg7NSTuZRrNlLL9b2+cEPb5iDv
5CbAr+Zvi2Fc1FnqsxjqdCma5nYi28eugQzeSC74DdBDFrdbDvVMUfzKgPtJs05P
LQnOwX8dsWKc3A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:50 2025 by rpki-client