Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          6adwsQuy3kqKJ8BeqtwP/n1fd1Q5ewcBofKhIxt5yLE=
Subject key identifier:   22:CE:E7:C7:01:A8:D7:7B:81:97:10:AD:4F:A0:82:FE:04:FC:A4:EA
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       01976FD0BAD66551585F6DFF88BB98F40E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          12E0
Signing time:             Sat 14 Jun 2025 19:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:39 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: rstgvMbTt54K2qQtzTve3T+D04SWLVgE/ExKyL26RgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:ba:d6:65:51:58:5f:6d:ff:88:bb:98:f4:0e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jun 14 19:00:39 2025 GMT
            Not After : Jun 15 19:00:39 2025 GMT
        Subject: CN=22cee7c701a8d77b819710ad4fa082fe04fca4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:32:7c:f2:e0:ff:e5:90:40:5c:a8:9a:d9:
                    5b:05:26:fb:97:b2:08:03:35:0c:a6:51:c6:59:96:
                    10:d1:e8:88:57:70:d6:d5:41:d8:c8:83:1b:37:7b:
                    63:74:ed:43:6f:6f:73:74:1f:8f:20:0e:e8:37:71:
                    c8:a9:89:49:20:35:15:e3:5e:4f:46:e3:14:d7:7d:
                    6a:68:d8:94:35:17:73:38:90:a2:61:fe:71:4d:ce:
                    83:70:ee:73:f6:83:c2:61:1c:7b:e4:8e:74:6b:5b:
                    b0:cf:db:9f:6a:09:29:36:22:90:a9:e9:21:09:0d:
                    ce:21:f6:34:33:27:f9:47:0e:90:8b:07:0d:46:83:
                    dd:02:4a:e7:9f:34:68:3d:77:88:ad:4f:62:ff:24:
                    e4:97:42:57:a8:28:c2:e1:7d:76:9b:56:c5:a0:8d:
                    bf:4d:3f:d7:b4:09:e5:e4:bf:1d:f3:ec:da:94:28:
                    99:ff:50:8f:1d:bf:c2:f9:60:83:e0:0d:53:7a:5b:
                    75:a4:ee:39:37:68:7e:14:b2:57:f3:9b:32:b1:9a:
                    1a:ca:2f:c7:d5:d4:e6:9f:35:2a:b5:48:f4:cf:94:
                    ad:2f:8f:a2:00:69:29:ca:24:30:60:63:94:be:54:
                    3c:97:aa:7a:2d:a7:d8:bc:18:9f:cd:ab:aa:63:eb:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:E7:C7:01:A8:D7:7B:81:97:10:AD:4F:A0:82:FE:04:FC:A4:EA
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:64:6f:13:59:28:af:d5:5d:29:01:bb:85:b2:c4:64:6d:a3:
         43:3e:3d:e2:cb:3d:4b:bf:0c:10:ec:90:aa:04:3e:7f:03:3a:
         78:21:1f:7f:49:95:16:e7:cf:43:81:0b:dd:4d:e0:50:99:17:
         8b:cf:1f:ce:df:15:83:48:f2:ec:63:29:11:3a:89:35:da:dc:
         d4:8a:2a:bf:de:8d:14:a4:c5:f6:8e:4a:f1:ca:a0:34:65:cd:
         25:2d:89:33:8d:d5:bc:96:1c:74:52:9e:e3:36:b1:74:42:98:
         b7:3f:36:44:72:82:a4:19:5c:35:e3:0c:67:2d:1b:d6:12:85:
         7b:25:08:7e:b5:9d:04:a7:fb:1c:11:eb:4a:f0:18:32:ad:e8:
         32:0a:09:47:a2:ad:bc:48:c9:60:35:9b:cb:7c:0a:aa:5d:f0:
         15:a5:d8:7a:3d:78:12:ee:bd:96:3b:52:9a:b0:59:96:ff:20:
         9c:d8:2c:c6:f9:76:f9:ae:56:ea:ef:72:f9:53:51:1f:59:61:
         82:08:14:a6:4d:dd:da:36:d7:bb:33:32:50:be:df:27:fe:a1:
         cf:db:f3:fd:e4:ac:bc:b2:ce:7f:71:fc:8a:8c:c7:bd:7e:3f:
         e5:f6:78:21:ca:30:aa:b0:a4:78:72:c8:2d:2f:fb:58:ef:5b:
         a0:a6:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:46 2025 by rpki-client