Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File:                     oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier:          D20SMrKdz2C0F4WuWlQNEkm0v0PVDM/c1cDVU7GUuzA=
Subject key identifier:   29:DA:99:2D:DF:8D:24:F9:55:EB:E6:78:0E:20:34:2B:FF:0F:DE:DC
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer:       /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial:       019751217A8728E140BDCC51B53C92BDA994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 20:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:37 +0000
Files and hashes:         1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: db+ux2IUMypuYNwnN/kunsZLB39xwlLlqJJh1tYnrBw=)
                          2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:7a:87:28:e1:40:bd:cc:51:b5:3c:92:bd:a9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
        Validity
            Not Before: Jun  8 20:00:37 2025 GMT
            Not After : Jun  9 20:00:37 2025 GMT
        Subject: CN=29da992ddf8d24f955ebe6780e20342bff0fdedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:55:b3:24:9c:6d:aa:6a:63:be:59:88:c3:
                    ab:b0:cc:e9:2f:00:62:9c:b7:87:de:cc:20:c7:e6:
                    c6:d9:30:3a:4e:f6:4e:7a:9d:38:52:4c:70:c6:56:
                    4a:4c:f8:68:cc:bb:49:46:21:a1:37:f4:6f:cd:ea:
                    f0:bc:db:46:f8:02:e9:67:e6:04:5a:2f:36:33:fc:
                    70:54:f7:3d:5b:11:1f:db:c2:b8:13:1e:1c:f3:42:
                    32:17:c3:1e:62:4d:e6:58:fe:9d:24:d9:87:e4:c1:
                    e2:24:ee:00:19:76:d0:b7:21:2b:c7:1d:0e:09:82:
                    a5:a7:3d:a6:d0:7d:d8:32:2d:e0:4b:b9:34:db:a7:
                    16:ab:20:bb:b9:62:c3:1a:a7:fe:3f:00:52:4d:5a:
                    ac:15:bf:f8:9f:47:f8:64:ac:2c:63:ec:89:95:90:
                    8a:0a:52:32:51:1f:d6:4d:bd:f7:a6:62:bc:71:02:
                    f1:27:d6:81:20:d3:ea:ce:90:25:00:d1:25:7e:0b:
                    14:bb:9c:e8:e5:0c:da:3c:c3:e0:c7:2a:40:bf:51:
                    87:a3:c0:0f:3e:7f:7c:3c:d3:8b:26:76:47:07:67:
                    99:11:4e:ea:74:ea:23:9e:a1:6c:1f:48:e0:1c:be:
                    f2:83:09:92:95:c6:e4:76:02:d1:71:c8:38:b1:ce:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:99:2D:DF:8D:24:F9:55:EB:E6:78:0E:20:34:2B:FF:0F:DE:DC
            X509v3 Authority Key Identifier:
                keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:2d:2e:4e:fc:46:5f:4f:b7:ea:0d:25:13:2f:25:d5:af:
         0e:cf:2e:6b:79:17:f2:8b:be:2f:bd:cf:b7:96:27:df:8c:0c:
         e8:b3:5c:ca:9b:13:1a:b3:b3:4f:c7:d5:ae:af:d5:67:bf:b5:
         dd:e0:5b:32:fb:49:78:57:ee:46:8b:aa:a3:a8:9c:5a:39:d6:
         a8:1f:61:9f:b7:55:48:a2:c3:aa:91:0c:9d:40:7a:e2:1f:75:
         34:fb:e6:b5:23:5a:b4:54:0b:bd:59:42:1a:47:60:50:2e:db:
         ae:60:15:ed:9f:83:59:4f:d4:3c:59:5f:85:c5:18:cb:9b:dc:
         a0:25:91:c2:4c:bc:03:b5:85:09:2f:dc:8e:15:cc:75:a7:4b:
         5e:af:48:f6:89:65:3e:7b:7b:96:d3:59:4c:3f:ad:8d:9d:66:
         cd:d0:f6:e0:d9:3f:a0:26:e7:2f:11:80:e1:fb:da:51:2f:ab:
         df:5c:ce:bf:c3:3c:ac:f3:d6:f2:15:1a:f0:0f:ca:d4:89:fd:
         cb:52:b6:73:e5:50:90:e0:9a:26:2e:8c:8e:20:b0:c5:93:1f:
         b2:03:22:f3:e4:ad:69:c0:4e:4c:84:8d:9b:95:9b:1a:b5:9d:
         17:8d:23:a8:0b:c0:9e:c8:ff:15:4f:bb:6c:d9:05:a5:7d:31:
         6c:89:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:06 2025 by rpki-client