Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File:                     OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier:          BV8V04Em1+cS2h6CVABXnyy8XTIvQfZMvg1c5MRvaIg=
Subject key identifier:   15:1C:5C:80:5C:E9:1B:F3:4B:17:27:33:4C:6C:28:57:4A:30:24:5C
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer:       /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial:       01975B375EA7D3F6A732D2A7435AB508B7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number:          0EEB
Signing time:             Tue 10 Jun 2025 19:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 19:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 19:00:44 +0000
Files and hashes:         1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: cce8fOFbYtvipKu9us+uRL2k4HNXdF0srH/WDoVZ3XE=)
                          2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:5e:a7:d3:f6:a7:32:d2:a7:43:5a:b5:08:b7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
        Validity
            Not Before: Jun 10 19:00:44 2025 GMT
            Not After : Jun 11 19:00:44 2025 GMT
        Subject: CN=151c5c805ce91bf34b1727334c6c28574a30245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:5f:0f:a9:dc:12:61:0b:50:6d:a0:51:29:
                    f3:fd:51:58:ee:10:a3:62:f1:42:c4:f9:93:b7:70:
                    c4:ff:db:a8:a0:80:07:9c:c3:8a:b1:af:8a:41:ca:
                    d3:58:af:39:65:15:ad:85:64:f6:53:00:7f:4a:24:
                    75:a5:9b:db:95:d9:d4:61:84:8b:e3:17:1a:d5:11:
                    63:8c:6c:eb:23:7d:3d:33:08:1a:c6:a9:25:41:83:
                    5a:05:bb:e1:36:e8:9c:93:97:50:9a:b8:b2:8e:b5:
                    b7:9f:2d:1e:b7:f7:29:36:7c:8f:bd:66:62:df:76:
                    ba:11:2b:cc:0e:02:6c:ed:4e:0d:4b:8f:f6:70:aa:
                    69:6c:97:44:50:25:a1:7a:ac:87:d9:fa:b3:8e:26:
                    af:70:97:85:ad:89:25:6e:b9:75:c4:28:9f:02:95:
                    b9:44:de:a8:1f:f2:0d:39:30:c2:d4:6f:1b:a7:17:
                    0c:cc:27:d0:cc:f7:a3:57:df:9d:c4:49:d5:ea:91:
                    d6:58:19:f1:5e:19:77:58:aa:2b:87:1e:6a:56:bf:
                    84:84:fb:6b:e0:c2:41:7c:b7:dd:17:b9:86:2e:98:
                    67:c1:12:0a:cd:39:33:f5:af:86:c7:8f:58:e7:4d:
                    57:5d:9e:67:8a:d8:67:cd:1b:83:df:27:c9:ee:70:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:5C:80:5C:E9:1B:F3:4B:17:27:33:4C:6C:28:57:4A:30:24:5C
            X509v3 Authority Key Identifier:
                keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:a3:0d:60:6e:c3:40:77:ca:72:86:da:1b:8d:7d:0e:2f:
         92:b7:cd:f5:4d:6e:03:64:87:eb:43:f1:0a:81:4f:3d:c7:fa:
         2b:a6:cc:07:1c:e2:03:eb:c1:bf:be:d4:ab:4d:73:92:d6:b7:
         49:df:f4:ac:3f:4a:e3:2f:3f:58:32:1a:e9:cf:67:f6:bb:74:
         14:29:c8:92:40:cc:fc:03:89:cb:bc:6e:8e:0b:a8:dc:6d:7d:
         32:89:bd:b5:58:2a:db:92:43:0c:32:78:31:b1:1a:b0:a6:54:
         80:0d:22:c7:9f:94:4a:3c:d5:f8:e7:19:41:ad:68:2c:62:c1:
         d8:54:08:70:ee:8c:95:ca:36:14:3d:1c:e0:b3:1c:d0:05:3c:
         fa:3e:fc:da:d0:bf:c2:22:37:aa:72:02:a3:f5:44:29:9e:73:
         09:49:01:3e:14:b5:3c:34:a0:cb:5e:b1:e9:6a:72:08:e8:59:
         aa:89:5e:98:e4:c4:60:9d:f3:2f:bb:cd:d5:b3:a1:58:0f:62:
         27:e6:df:e9:b2:36:1e:b0:c2:15:86:da:f2:28:05:55:6e:5a:
         52:f3:40:bc:ca:6e:9c:df:29:63:d0:bb:64:89:11:87:de:c9:
         8d:3f:66:31:ca:55:ed:54:2a:3e:12:ab:5e:32:f9:68:41:70:
         da:07:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:54:13 2025 by rpki-client