Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File:                     oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier:          lQHYvaWgEE57PIVZ8EtjuwFHqu0zX/xTF9doWsvbGvM=
Subject key identifier:   7F:CF:00:D8:09:76:E2:6C:83:A3:3E:42:43:9E:0F:43:FE:EA:89:F7
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer:       /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial:       019749319383D2AC7569723F6F910AF95C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number:          053F
Signing time:             Sat 07 Jun 2025 07:01:15 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:15 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:15 +0000
Files and hashes:         1: dwa1SVgeAHbSLLwbTRR7yyl10Qo.roa (hash: EOG7RhGAZwKSmeitaUimX8BvHbJofF1Pbz7/6Kkc5lA=)
                          2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: y8Gu+TjZlIGLLAJSBZk34I2b+lgw8HAqjpLqFZ8cTzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:93:83:d2:ac:75:69:72:3f:6f:91:0a:f9:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
        Validity
            Not Before: Jun  7 07:01:15 2025 GMT
            Not After : Jun  8 07:01:15 2025 GMT
        Subject: CN=7fcf00d80976e26c83a33e42439e0f43feea89f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:69:4e:bf:e6:d3:ef:00:0f:87:74:43:24:
                    5d:da:d5:df:d1:4a:7d:f7:74:79:f9:e6:5f:2e:04:
                    1e:6e:3d:27:a0:25:94:ad:39:fa:dd:87:14:15:38:
                    b3:fa:52:f1:69:1b:14:18:b9:28:95:dc:85:35:53:
                    02:f8:25:57:bd:96:bf:34:ca:fb:c2:c6:9a:bc:f9:
                    12:b3:8b:e2:a4:c2:ae:c5:fc:8b:bb:b3:62:81:cb:
                    1e:25:82:50:9f:df:70:7b:b2:78:d7:46:94:17:69:
                    8a:fb:be:0e:10:bb:95:ae:01:15:6a:5f:d4:25:d1:
                    b3:91:4c:0a:82:e1:55:ff:13:71:02:f7:ac:78:93:
                    3c:44:cd:9f:54:d3:cc:13:7b:5c:be:cc:d0:c0:66:
                    0b:3d:c1:ea:6d:ca:1a:a0:66:10:f2:71:a9:a8:ac:
                    60:7b:5c:d2:d1:af:28:60:b8:04:78:57:25:28:2b:
                    89:6f:ac:d9:09:32:47:27:20:70:dc:15:84:db:0d:
                    a2:31:e9:a3:b4:7f:f6:87:6e:c9:f6:c8:b5:3d:20:
                    2b:9f:51:71:f9:45:55:1e:40:30:61:57:37:d6:d5:
                    fa:95:e9:07:35:6d:6b:81:78:29:0e:9d:51:18:ee:
                    ec:34:1a:56:89:4a:6b:d5:e5:1a:a4:3a:6f:cf:c8:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:00:D8:09:76:E2:6C:83:A3:3E:42:43:9E:0F:43:FE:EA:89:F7
            X509v3 Authority Key Identifier:
                keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:83:fc:a3:81:90:e4:6c:d8:1b:53:17:b3:6f:be:fe:7f:69:
         7a:cc:16:41:22:d5:f0:31:55:1f:9b:5e:39:db:b5:6f:ea:6e:
         ef:02:b8:61:bc:5c:24:3b:ef:21:b9:5d:9d:2c:c7:55:79:16:
         0a:0b:38:f3:0e:bd:b7:5d:b8:e7:4a:5a:cb:e6:e4:fa:a8:cf:
         cc:b0:dd:89:0c:f3:1f:29:d8:1d:71:a3:d2:1c:4e:c4:1a:44:
         c1:c6:7a:0e:8d:28:2d:5a:80:8b:d2:73:ac:77:ff:ab:f6:93:
         33:a0:74:43:c3:f8:d9:1b:c4:b8:da:04:4d:b8:2f:cc:69:01:
         aa:20:a7:9f:8f:71:59:df:bd:17:df:50:05:69:23:35:63:d5:
         32:bb:e4:49:27:1d:51:63:e7:1c:21:93:60:07:d2:7f:27:34:
         5f:8c:31:00:dd:69:fd:49:7e:19:41:8d:39:e8:02:f4:8e:04:
         8d:f7:26:6e:21:3b:fb:15:2b:10:37:56:60:54:af:b1:15:7a:
         12:a1:f1:d1:86:3e:12:86:22:47:9c:3a:98:a8:fa:26:29:fe:
         8d:b9:62:2d:29:d8:62:67:a1:2e:93:df:9b:11:96:c8:fc:24:
         10:5a:4f:8c:42:b8:68:4c:11:2f:44:39:46:80:02:2d:6f:5f:
         b7:b9:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:51 2025 by rpki-client