Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          WJKumZZSV9DlnznukU/SfbdATFveNutPBBBui9abVd4=
Subject key identifier:   E2:94:F1:54:12:31:1D:AD:1A:FD:78:1F:63:C4:5B:5F:96:6B:00:37
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       01976DAB51F5DB3CACD9674228A058F2457A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 09:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:33 +0000
Files and hashes:         1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
                          2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
                          3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: Ue70v42UyWf6O7ggU3Hh6BF5rtwNa77DA6af/EOFCSw=)
                          4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:51:f5:db:3c:ac:d9:67:42:28:a0:58:f2:45:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Jun 14 09:00:33 2025 GMT
            Not After : Jun 15 09:00:33 2025 GMT
        Subject: CN=e294f15412311dad1afd781f63c45b5f966b0037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:eb:74:93:2c:72:a5:36:64:1d:22:3d:39:
                    d2:40:0d:43:2f:15:f3:32:00:04:05:31:a0:d8:7c:
                    92:fd:c8:1f:1a:b5:f4:c7:0f:bf:a9:34:d3:e8:ac:
                    19:67:25:a3:f8:93:9e:e6:6f:03:c8:c6:45:85:7a:
                    ea:32:6c:7a:ed:2d:ed:07:4e:c6:ad:93:92:4f:10:
                    2c:14:1f:73:48:ac:ba:cc:fa:a9:16:70:b7:c0:f1:
                    ee:14:0d:9d:ba:e0:00:e4:dc:54:ca:ef:44:d4:23:
                    6f:28:59:53:b4:0e:24:6f:93:73:0b:74:df:39:c5:
                    fe:b5:e4:98:53:d6:bb:ec:e9:bf:5b:e5:ab:36:51:
                    2e:d6:a4:62:2c:61:f9:37:47:c4:3c:b2:1e:ed:64:
                    0f:f4:98:f0:89:de:46:36:93:2b:ca:7b:b6:39:c0:
                    78:06:1e:5e:2b:f8:ca:1e:52:3c:9e:71:53:a3:c7:
                    87:e2:2a:27:9a:0b:b5:c5:52:44:c1:92:65:ce:c9:
                    b1:ed:6d:fd:d4:a4:15:f9:34:22:3c:79:a8:e5:98:
                    06:6d:aa:54:6c:a9:44:c6:52:ff:00:0e:77:bc:a4:
                    be:8b:b6:fb:2f:11:81:67:89:88:69:2b:40:43:e6:
                    c9:62:2a:0b:b2:84:2d:f3:7c:7d:34:25:a5:61:e8:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:F1:54:12:31:1D:AD:1A:FD:78:1F:63:C4:5B:5F:96:6B:00:37
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:26:06:fd:d3:58:d0:d7:22:9e:24:fa:e7:97:84:c6:44:
         c3:22:01:1c:8c:f9:3b:81:77:9a:4c:bc:7a:78:3f:19:21:4f:
         ff:9c:ca:2d:98:dc:d7:20:7a:49:6f:4a:6e:cc:c4:16:f2:35:
         ea:ce:1b:4a:4b:df:ef:1e:83:c2:36:b9:8d:70:09:ab:53:c3:
         26:5e:a9:66:1f:44:7b:a8:ae:49:0b:fb:d8:7b:7f:50:a8:45:
         78:fb:bf:3e:18:ef:63:03:ed:ea:86:21:de:50:f1:d3:a9:d2:
         22:3a:a1:eb:1e:df:68:9c:46:91:b3:84:15:4c:53:a2:e0:83:
         d6:cd:75:00:0e:89:a5:da:08:80:c8:5a:78:5d:7e:19:c7:53:
         aa:d5:53:d7:cb:25:2b:34:19:48:bc:ee:72:64:70:b7:63:9a:
         3a:f7:68:a5:fa:da:bc:ed:6b:95:76:72:35:94:7c:7c:85:89:
         9a:97:e9:60:d5:d1:41:a6:12:7b:bc:cc:2c:2e:f2:ca:5f:c9:
         fc:59:7b:0c:3b:f7:02:45:0b:b1:53:29:1c:3e:7c:83:d1:c3:
         37:b8:84:18:f0:ba:97:9d:71:d2:bf:9b:10:bc:71:a2:c8:85:
         00:1b:97:7d:c8:a5:fc:8c:32:56:08:8f:17:26:e5:24:3e:91:
         86:30:a6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq1H12zys2WdCKKBY8kV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk
ZGQyNmEwHhcNMjUwNjE0MDkwMDMzWhcNMjUwNjE1MDkwMDMzWjAzMTEwLwYDVQQD
EyhlMjk0ZjE1NDEyMzExZGFkMWFmZDc4MWY2M2M0NWI1Zjk2NmIwMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOHrdJMscqU2ZB0iPTnSQA1DLxXz
MgAEBTGg2HyS/cgfGrX0xw+/qTTT6KwZZyWj+JOe5m8DyMZFhXrqMmx67S3tB07G
rZOSTxAsFB9zSKy6zPqpFnC3wPHuFA2duuAA5NxUyu9E1CNvKFlTtA4kb5NzC3Tf
OcX+teSYU9a77Om/W+WrNlEu1qRiLGH5N0fEPLIe7WQP9Jjwid5GNpMrynu2OcB4
Bh5eK/jKHlI8nnFTo8eH4ionmgu1xVJEwZJlzsmx7W391KQV+TQiPHmo5ZgGbapU
bKlExlL/AA53vKS+i7b7LxGBZ4mIaStAQ+bJYioLsoQt83x9NCWlYejykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKU8VQSMR2tGv14H2PEW1+WawA3MB8GA1UdIwQY
MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt
ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh
LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr28mBv3T
WNDXIp4k+ueXhMZEwyIBHIz5O4F3mky8eng/GSFP/5zKLZjc1yB6SW9KbszEFvI1
6s4bSkvf7x6Dwja5jXAJq1PDJl6pZh9Ee6iuSQv72Ht/UKhFePu/PhjvYwPt6oYh
3lDx06nSIjqh6x7faJxGkbOEFUxTouCD1s11AA6JpdoIgMhaeF1+GcdTqtVT18sl
KzQZSLzucmRwt2OaOvdopfravO1rlXZyNZR8fIWJmpfpYNXRQaYSe7zMLC7yyl/J
/Fl7DDv3AkULsVMpHD58g9HDN7iEGPC6l51x0r+bELxxosiFABuXfcil/IwyVgiP
FyblJD6RhjCmkA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:06:56 2025 by rpki-client