Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
File:                     oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft (raw, json)
Hash identifier:          Ki5xqSdWGkLnRWOCNR8LnAws6uzvO6shG4btBgSyPL0=
Subject key identifier:   30:47:51:84:C8:BA:2E:43:95:67:86:17:49:BD:63:88:A8:6A:E8:E9
Authority key identifier: A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
Certificate issuer:       /CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Certificate serial:       019849D2C58A2DBA9FD325B5D0036291DC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
Manifest number:          1477
Signing time:             Sun 27 Jul 2025 03:00:06 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:06 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:06 +0000
Files and hashes:         1: ZcTmzRVwzbIZI35RxAQspNK8wA0.roa (hash: CvHPermbD4g/guqKSz7nbFfdIQ834453x2yMIE8CXZg=)
                          2: oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl (hash: ZwnJL9LpYth+w6L1gzlX3JgwtrZgq/xQZ6lOEWX2Qsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:c5:8a:2d:ba:9f:d3:25:b5:d0:03:62:91:dc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15a105f5ba627e5be6f1ff91f2597278209931f
        Validity
            Not Before: Jul 27 03:00:06 2025 GMT
            Not After : Jul 28 03:00:06 2025 GMT
        Subject: CN=30475184c8ba2e439567861749bd6388a86ae8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:56:63:d5:81:4a:61:e0:a0:16:45:96:fe:
                    3b:41:8e:09:39:28:f7:18:63:07:3b:88:bf:e0:3f:
                    43:09:f0:4f:d2:7a:39:ea:11:34:80:ea:0c:df:75:
                    b9:50:2e:37:ce:0d:3f:52:f1:08:82:59:41:bc:5d:
                    d2:b4:16:44:ec:1c:17:01:6f:ae:12:c9:0e:39:db:
                    af:1b:c5:ff:6d:a2:6f:0d:f9:d6:fe:78:c6:bc:15:
                    d7:3e:b0:2f:05:1d:75:ec:38:5b:ec:dd:b5:7e:f7:
                    1e:bd:92:1b:4f:db:f7:9e:37:83:7c:ec:c0:3a:18:
                    c8:c6:21:a9:95:af:c4:ba:18:a8:df:45:27:95:c5:
                    b8:1c:f2:75:37:67:47:2a:35:d4:84:bb:52:20:b7:
                    38:73:11:fb:29:77:8f:25:24:09:1e:f6:58:9f:04:
                    8a:01:4f:08:b8:d3:22:5b:1a:0f:38:04:77:51:84:
                    d8:8a:fc:07:05:42:37:9d:58:b7:6f:20:42:ea:34:
                    3c:f5:f0:49:8b:d5:a5:d0:fc:dd:bd:f7:d6:c0:d5:
                    82:a0:88:5b:3e:f5:64:ae:23:09:5d:e4:7c:63:36:
                    54:5b:03:38:d7:1f:10:f0:e8:26:db:ee:2d:a2:bb:
                    a7:a5:85:71:1c:f5:8d:f1:82:af:70:51:2a:2b:78:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:51:84:C8:BA:2E:43:95:67:86:17:49:BD:63:88:A8:6A:E8:E9
            X509v3 Authority Key Identifier:
                keyid:A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:ad:8e:f1:64:d0:57:a6:29:86:7b:b1:48:df:7c:57:70:
         67:4f:5b:46:51:9a:78:11:ae:e1:e7:ea:8e:0f:e1:89:b6:20:
         08:02:e7:9c:1e:b0:52:8d:12:2a:20:94:d8:42:ca:9d:20:93:
         79:86:4c:17:7b:cd:10:df:ec:2d:55:c4:04:f1:88:b7:b7:a9:
         78:07:c0:bd:35:ca:97:5f:9e:fa:65:70:fe:df:c0:6f:7e:75:
         5a:7f:12:89:22:41:ba:d6:2e:bb:97:75:8e:7d:7c:97:b7:43:
         3f:6e:41:25:9c:4d:a0:0a:92:c9:a4:4c:c9:75:a3:5a:ed:83:
         e2:76:a8:69:56:12:9e:10:44:20:ba:e0:0b:55:e4:93:01:81:
         2b:ae:36:c1:af:02:ee:65:63:ab:ef:fd:ca:a5:e3:f2:51:60:
         5e:fd:01:61:e0:bf:7b:ee:58:ec:25:70:42:22:23:a2:61:15:
         fc:8c:f4:d5:30:c0:6f:5f:4d:5e:09:99:db:5f:ac:6f:54:ca:
         4e:94:a5:26:39:a1:0d:8b:8b:e5:16:7a:2e:0d:27:80:eb:fe:
         27:27:30:f5:eb:2f:44:f8:43:c5:26:60:5b:99:82:14:a0:16:
         a9:ce:2a:38:75:c2:43:62:cd:3a:f6:3d:ae:d8:21:06:55:f0:
         0b:32:74:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:07 2025 by rpki-client