Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File:                     oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier:          W5njPvngmCMobaPtEcldmx2j9X+NjNWaU4K9sliN3kI=
Subject key identifier:   63:70:28:21:3F:93:66:BA:5D:59:33:66:D8:0E:0D:26:9A:56:B2:41
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer:       /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial:       01974A0C7E3C1529D77F2AAC34F34E27CBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number:          0E16
Signing time:             Sat 07 Jun 2025 11:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:21 +0000
Files and hashes:         1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
                          2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
                          3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: pazP9blIqTKySn37lr8bIDZ1mN+K5UxZw7fTmmnyybs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:7e:3c:15:29:d7:7f:2a:ac:34:f3:4e:27:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
        Validity
            Not Before: Jun  7 11:00:21 2025 GMT
            Not After : Jun  8 11:00:21 2025 GMT
        Subject: CN=637028213f9366ba5d593366d80e0d269a56b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:5b:1c:61:2b:2f:f3:99:48:b7:34:18:dc:
                    19:20:aa:0a:c9:b4:1c:ca:5c:2c:88:ae:04:f0:a4:
                    77:43:83:a3:17:88:de:f3:8c:b7:4d:2b:11:0f:df:
                    ba:93:7a:e9:1f:75:a1:20:6c:54:ce:c1:6d:40:84:
                    fa:79:52:b5:ab:f9:ba:c7:61:43:d5:0d:0f:41:fe:
                    1a:31:37:55:56:88:8b:cf:c2:13:3a:5b:f8:71:c7:
                    62:9b:2b:e2:3b:6a:b8:89:8d:cd:82:a6:57:b3:2a:
                    bf:66:6c:7f:b4:46:cc:30:b1:74:cb:a5:ca:13:6d:
                    68:3f:7e:3c:a7:ea:87:6e:19:16:6e:f5:ea:eb:e0:
                    30:6d:d0:18:44:57:9d:e8:2a:d1:63:2d:80:ae:55:
                    a9:a1:35:1b:84:b0:65:b1:1b:97:a7:db:54:22:b1:
                    42:05:fd:aa:72:b5:94:7b:7c:e0:cd:8a:da:05:7f:
                    b3:20:7d:5d:d5:ec:9c:09:48:87:fd:d0:ba:a1:27:
                    fe:da:82:37:67:12:5e:20:72:c4:00:88:7d:68:9b:
                    f0:c2:4b:0b:20:da:53:ad:e8:23:20:6f:93:c3:3e:
                    bd:9b:01:ae:48:07:9c:1b:60:59:9f:94:40:5e:5a:
                    74:c6:85:f4:94:80:1e:d4:7a:a3:3e:d5:5b:e4:69:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:28:21:3F:93:66:BA:5D:59:33:66:D8:0E:0D:26:9A:56:B2:41
            X509v3 Authority Key Identifier:
                keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:62:4e:da:72:19:f8:d2:40:0c:85:1b:17:06:9f:36:f9:c2:
         75:a8:34:d0:af:55:85:f6:e2:8b:3a:34:3d:47:ce:42:6b:fa:
         52:4b:4c:ea:0e:7f:ea:80:2f:7e:53:14:97:5c:e3:36:2f:10:
         b7:37:96:1f:e0:f7:c5:a5:df:24:36:e6:14:f3:cf:99:ae:6d:
         cd:22:7c:7f:d6:24:ac:d0:ee:58:05:1f:28:d8:88:27:29:06:
         8f:1c:fa:7c:30:29:7f:fc:77:f2:95:3d:62:65:11:86:fb:48:
         4a:93:ef:f8:5f:83:86:92:eb:22:28:fb:23:22:7c:3d:70:e5:
         08:ac:20:ac:26:1e:29:99:fb:cf:de:a5:d8:9c:94:89:9d:3a:
         87:90:dd:dc:2f:19:75:0e:3f:37:bb:91:d1:b4:4f:bd:e8:9d:
         d3:b2:4e:bd:04:99:f8:78:9c:e9:b0:99:39:16:3d:3b:4a:e1:
         93:68:c0:75:4b:0e:b8:99:f4:7c:f8:c1:54:c1:79:51:a1:c7:
         59:15:33:f8:15:d5:7f:df:86:f6:6f:72:10:22:2f:e6:7d:2a:
         9e:0e:7f:30:3b:4a:7b:44:8e:cb:66:36:34:69:d3:50:07:e0:
         d9:eb:99:e1:52:5f:a8:ae:1d:2e:6b:ad:6d:18:b0:f3:5b:02:
         9a:ee:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:37 2025 by rpki-client