Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File:                     O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier:          M9W71XcAuHKCZ1Hcp2iE5xpmzD4SQnoGjqPVGx6VPA8=
Subject key identifier:   95:D6:B2:A6:C5:43:DC:71:F7:DD:4D:16:88:A6:39:8F:2E:8E:CC:27
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer:       /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial:       01984589990F4F8B23CC759182EA8603292E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number:          0E81
Signing time:             Sat 26 Jul 2025 07:01:42 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:42 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:42 +0000
Files and hashes:         1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
                          2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: PDPLZ7kNPstEOCa5TMo7KMpEio/rWih9pc4cuWpN/+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:99:0f:4f:8b:23:cc:75:91:82:ea:86:03:29:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
        Validity
            Not Before: Jul 26 07:01:42 2025 GMT
            Not After : Jul 27 07:01:42 2025 GMT
        Subject: CN=95d6b2a6c543dc71f7dd4d1688a6398f2e8ecc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:0a:71:3a:be:5a:62:43:a7:4b:00:58:fe:
                    e8:2e:b0:89:d0:70:8f:e6:7b:36:38:dd:68:37:52:
                    04:4e:a2:85:c3:4a:cd:30:49:96:e2:6f:ff:78:f8:
                    94:ac:d4:d0:4b:c3:35:9a:4a:fa:11:1c:47:0f:73:
                    39:97:28:45:64:9f:a6:ee:a4:db:46:cb:24:9b:2d:
                    9e:b3:2a:42:a6:10:ac:80:93:a9:a4:0f:e2:dd:43:
                    04:c2:8a:92:6f:e2:f0:59:bf:93:98:0f:49:a9:cc:
                    36:35:e8:a2:d5:80:c9:99:70:d6:93:50:25:0c:2d:
                    74:71:2a:34:7d:0f:ae:e8:69:5e:78:b6:80:a7:1e:
                    b9:da:79:2a:72:f6:83:c8:63:9c:72:00:ef:0d:d0:
                    7e:83:35:2f:10:75:6a:3e:72:ed:cd:2c:2e:5e:30:
                    28:4b:45:67:f2:a0:5c:18:34:7b:96:ad:dd:98:76:
                    88:53:48:b7:81:f4:bb:6d:e3:09:94:04:0d:d1:23:
                    8a:43:40:02:d8:b3:9c:5c:76:1a:37:8e:70:4f:75:
                    b2:59:07:2e:3b:e3:38:e6:6c:8b:03:28:5d:b0:67:
                    e9:20:c0:ff:9f:ea:e7:42:48:09:8d:f4:29:fa:0e:
                    cb:d4:cd:60:b4:65:a3:fe:f0:c1:0a:1a:f6:a9:01:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D6:B2:A6:C5:43:DC:71:F7:DD:4D:16:88:A6:39:8F:2E:8E:CC:27
            X509v3 Authority Key Identifier:
                keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:01:ab:f9:1a:f0:9b:33:8f:52:83:58:78:5f:cf:76:5f:
         bb:f9:f7:1c:10:2e:cd:1f:8d:28:0b:ab:d6:fa:59:71:5d:d6:
         34:f8:a4:d1:11:30:d2:07:92:9b:b3:7a:33:0f:76:34:a1:ac:
         a8:02:d9:70:59:d8:e6:c0:b7:35:8d:c3:7b:6d:6d:5d:3f:41:
         85:29:c1:f9:6f:da:87:8e:0b:64:f3:a5:0f:09:e8:0a:05:1e:
         ca:2f:45:86:bb:ea:19:63:97:e8:60:66:7d:93:29:1a:e4:07:
         2a:79:eb:eb:15:84:a5:c6:9d:ab:d3:43:be:88:cf:2b:8d:d6:
         7f:51:ab:83:5e:6a:fb:9d:dd:b5:4b:07:7e:e9:51:74:35:cc:
         70:7b:84:33:c9:39:b9:9d:70:12:86:57:89:f5:7b:0c:78:7a:
         ba:8b:a2:3c:c8:3d:c5:ae:71:22:74:6a:91:e3:22:25:45:ce:
         bf:75:79:4b:3b:61:fe:22:0e:b4:ec:ea:a2:03:74:66:9a:87:
         b1:8b:66:35:0f:2e:5e:9e:7e:93:c1:a3:f7:3b:3e:42:8d:98:
         0d:95:2d:d1:18:93:18:0b:95:ba:68:24:4a:6f:e9:8f:c3:82:
         16:9e:e4:1f:1d:ba:6c:da:6a:fa:d8:0c:7d:9e:70:b4:e9:c5:
         6a:17:cc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiZkPT4sjzHWRguqGAykuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUwNzI2MDcwMTQyWhcNMjUwNzI3MDcwMTQyWjAzMTEwLwYDVQQD
Eyg5NWQ2YjJhNmM1NDNkYzcxZjdkZDRkMTY4OGE2Mzk4ZjJlOGVjYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vgKcTq+WmJDp0sAWP7oLrCJ0HCP
5ns2ON1oN1IETqKFw0rNMEmW4m//ePiUrNTQS8M1mkr6ERxHD3M5lyhFZJ+m7qTb
Rsskmy2esypCphCsgJOppA/i3UMEwoqSb+LwWb+TmA9Jqcw2Neii1YDJmXDWk1Al
DC10cSo0fQ+u6GleeLaApx652nkqcvaDyGOccgDvDdB+gzUvEHVqPnLtzSwuXjAo
S0Vn8qBcGDR7lq3dmHaIU0i3gfS7beMJlAQN0SOKQ0AC2LOcXHYaN45wT3WyWQcu
O+M45myLAyhdsGfpIMD/n+rnQkgJjfQp+g7L1M1gtGWj/vDBChr2qQEQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXWsqbFQ9xx991NFoimOY8ujswnMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTwBq/ka
8Jszj1KDWHhfz3Zfu/n3HBAuzR+NKAur1vpZcV3WNPik0REw0geSm7N6Mw92NKGs
qALZcFnY5sC3NY3De21tXT9BhSnB+W/ah44LZPOlDwnoCgUeyi9FhrvqGWOX6GBm
fZMpGuQHKnnr6xWEpcadq9NDvojPK43Wf1Grg15q+53dtUsHfulRdDXMcHuEM8k5
uZ1wEoZXifV7DHh6uouiPMg9xa5xInRqkeMiJUXOv3V5Szth/iIOtOzqogN0ZpqH
sYtmNQ8uXp5+k8Gj9zs+Qo2YDZUt0RiTGAuVumgkSm/pj8OCFp7kHx26bNpq+tgM
fZ5wtOnFahfMuQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:54:20 2025 by rpki-client