Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File:                     oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier:          eT84+6niQlV2sWpWiMqCPTA/qUw3pSE99dMNJZ8dxjY=
Subject key identifier:   1D:61:74:D7:42:E5:20:59:38:02:BE:50:CC:6A:BA:2F:32:1B:71:BB
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer:       /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial:       019848F77E8EFFDC6C4EBFFB5113A6F1BEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 23:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:36 +0000
Files and hashes:         1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: PRs0ewjaLzP1eNkq2pwSRwSPlTYLBwKM/vDqYPTKpz0=)
                          2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:7e:8e:ff:dc:6c:4e:bf:fb:51:13:a6:f1:be:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
        Validity
            Not Before: Jul 26 23:00:36 2025 GMT
            Not After : Jul 27 23:00:36 2025 GMT
        Subject: CN=1d6174d742e520593802be50cc6aba2f321b71bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:0a:fe:96:2f:79:41:53:55:bd:6b:6c:74:
                    f2:b4:3a:7b:db:c1:2a:4c:69:db:09:21:c8:f4:a2:
                    a2:57:b3:28:67:00:33:a3:43:cb:32:c2:e0:49:33:
                    4c:d0:bc:ac:44:d6:3d:3b:7b:b0:2d:bf:c7:7c:d4:
                    a8:a8:85:44:fa:15:54:d6:3b:55:1c:51:ca:4a:bf:
                    43:06:93:34:cf:37:50:cf:1a:96:5f:20:ea:d5:cd:
                    e5:cb:b4:28:5d:c4:13:9d:e2:ab:b4:97:20:52:8d:
                    be:82:21:c5:c2:68:f6:15:ab:fe:ca:12:24:8e:2e:
                    f0:71:f0:c1:2a:69:dc:d0:13:47:4b:48:48:43:2b:
                    ff:ae:a2:12:35:0d:1b:33:fd:e8:a1:29:1d:de:8a:
                    60:7a:ba:7d:6c:76:ac:4a:21:e1:95:e6:ca:4c:e0:
                    67:4e:bd:ad:ef:3a:01:cb:b9:e0:31:a0:d0:38:3a:
                    67:11:a8:41:de:f3:45:88:8f:38:68:40:83:3f:d3:
                    3c:85:a4:c9:0b:6c:9e:68:7f:d1:02:12:f7:c1:0d:
                    8b:82:8c:f4:ec:e9:c4:6c:ba:a7:81:16:a1:e1:16:
                    90:32:f0:df:8b:ea:b1:bf:90:86:41:bf:01:14:8f:
                    d8:09:0a:f8:c3:4d:3d:bf:b4:42:ee:79:ee:cb:b1:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:74:D7:42:E5:20:59:38:02:BE:50:CC:6A:BA:2F:32:1B:71:BB
            X509v3 Authority Key Identifier:
                keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:47:ef:f1:1b:d3:53:5d:a4:e5:83:62:60:18:52:be:93:27:
         bc:0a:61:84:9d:82:c5:6d:d3:c6:e8:78:0f:c8:5f:af:ec:62:
         8c:0d:51:7c:71:c3:0e:db:ea:33:80:b7:a7:ad:3e:df:c8:0b:
         d2:1a:ee:6d:2b:39:57:3c:71:3a:63:5b:14:07:b2:99:0a:cb:
         69:f1:01:17:ea:da:3a:44:ea:e9:9f:6c:84:01:de:88:31:f9:
         4b:70:f3:87:c1:36:b0:d6:7e:35:68:7e:e7:cf:11:f4:4c:34:
         c0:8b:e0:79:33:6c:59:f4:e4:86:fd:59:01:9b:d4:c1:51:4d:
         a5:45:11:33:a0:4a:bf:ce:5e:f5:78:72:8a:df:af:c4:33:98:
         db:18:1a:7d:71:8e:2e:d5:44:1a:20:98:41:ac:ae:90:ab:58:
         9a:a7:44:e5:61:65:c6:05:cc:7e:2f:a3:eb:86:d9:fd:ea:c4:
         7f:59:bf:4d:2a:9b:c9:6a:82:fb:4a:b8:ed:8f:b7:ee:4d:5b:
         6d:fc:16:3b:7e:a1:6e:74:c9:56:6b:69:b6:6a:e3:e5:4f:2d:
         30:a5:1c:bd:25:09:1d:e7:05:ac:9b:d6:5a:de:95:cc:20:ab:
         7c:b9:58:ed:d5:d1:ab:5a:9b:83:5e:ff:ea:05:bd:e5:bf:11:
         6a:92:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:22:54 2025 by rpki-client