Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File:                     Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier:          iAyOzfaUT5ONzWOZ8YlzH3JozTMleY3xQ0ELJtN+A+Q=
Subject key identifier:   CB:55:B7:64:14:06:6B:58:D3:4D:6B:41:48:C1:4B:D1:EB:47:14:76
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer:       /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial:       01975F13CB86F0879879564CAC1BC9C1CC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number:          01A6
Signing time:             Wed 11 Jun 2025 13:00:22 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:22 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:22 +0000
Files and hashes:         1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
                          2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: fIXdyrVCh+nAOCup4aSfsTbT7x9RLYbXx9ZfNE7PNdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:13:cb:86:f0:87:98:79:56:4c:ac:1b:c9:c1:cc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
        Validity
            Not Before: Jun 11 13:00:22 2025 GMT
            Not After : Jun 12 13:00:22 2025 GMT
        Subject: CN=cb55b76414066b58d34d6b4148c14bd1eb471476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:54:b8:8f:86:f5:87:cd:ce:ef:df:17:9a:
                    1e:e0:c8:30:5f:28:6c:a1:14:d8:f9:62:f7:4f:a7:
                    fb:df:65:5c:9a:25:d7:0e:1e:36:b7:44:47:48:4e:
                    5d:08:10:32:13:b5:70:2c:03:ee:a6:48:ce:05:29:
                    74:4c:71:db:37:22:93:26:4b:5a:b9:74:c6:b3:e4:
                    cc:90:23:c6:5a:56:9e:f7:95:31:05:e7:b6:63:ed:
                    c3:1e:27:48:ed:a4:7a:4e:68:81:e7:f0:ba:e0:a7:
                    fb:54:f7:49:a4:1d:3a:32:82:24:63:6a:8b:cb:21:
                    6e:16:b1:c4:a9:fd:57:68:8a:f6:79:1a:6a:07:14:
                    0e:7d:48:5f:b8:4f:25:9b:7c:5c:6f:fc:4a:49:70:
                    44:36:ee:ee:a1:dc:d2:69:f5:02:fb:5f:41:5f:1f:
                    c5:06:9d:7e:06:a4:cd:b8:00:c8:8a:23:c5:5e:7b:
                    0a:02:ed:68:74:2a:93:49:b7:fb:3d:2a:22:ca:35:
                    37:78:6f:c8:53:79:e2:e0:ec:ec:05:9b:86:6f:58:
                    66:66:6e:7e:94:6a:45:c1:89:7d:d4:38:91:b2:51:
                    64:09:e6:7b:d7:2e:b4:37:7a:f1:a7:a7:c8:30:a4:
                    77:33:02:62:7a:5f:a3:6f:da:f8:5e:ed:e4:e9:ac:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:55:B7:64:14:06:6B:58:D3:4D:6B:41:48:C1:4B:D1:EB:47:14:76
            X509v3 Authority Key Identifier:
                keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:d5:95:00:e7:a6:4f:b1:79:ec:13:00:b3:55:ca:b8:16:
         a4:5e:59:41:74:9f:db:dd:8b:b2:43:8f:1d:ed:93:32:43:cd:
         62:67:cf:58:69:dc:b6:af:47:18:72:ce:a4:f9:ea:6f:55:52:
         c8:ba:af:8e:7d:7d:70:54:e8:79:84:21:7d:3f:d8:f4:08:af:
         ea:58:bd:f6:a8:12:f7:7a:1a:e7:2a:79:61:e1:7c:6f:54:a3:
         06:8b:80:b3:68:b2:5d:64:8e:d0:86:56:ff:eb:34:2b:ba:8a:
         75:6d:da:cd:b8:f9:ac:ab:f9:e4:0f:af:20:eb:75:f7:33:84:
         d5:9a:b5:e8:03:aa:97:bb:66:e7:e3:31:e2:42:74:2b:3f:5e:
         01:d4:2e:13:5b:59:ef:98:35:f3:b2:98:ba:34:d2:5b:8b:43:
         8b:5a:28:cf:fb:ad:50:9b:df:20:13:20:4c:55:d3:d6:81:23:
         58:a2:f7:3d:f2:a5:37:53:01:13:eb:78:97:69:62:71:69:a8:
         37:b4:7f:8e:81:4b:fc:bf:47:90:e0:08:77:90:b0:e2:54:43:
         b6:dd:27:b4:44:a4:5e:62:b9:e5:cd:61:df:31:62:31:b3:fb:
         9b:79:5b:d9:7b:10:3f:f5:6b:03:b7:b3:a4:3f:d1:0e:4b:44:
         df:f5:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:42 2025 by rpki-client