Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File:                     Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier:          uNX8BniePEOlSj82Myd74ihNSZ7jtarHGeZ5WLMNEFk=
Subject key identifier:   E3:27:13:2E:00:A7:E9:ED:58:D1:D1:DC:62:B2:67:74:AE:84:36:3F
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer:       /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial:       01976AAAAA29E16A89A7B1A1CA29AE97FEA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number:          01AC
Signing time:             Fri 13 Jun 2025 19:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 19:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 19:00:58 +0000
Files and hashes:         1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
                          2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: iJxwpxSqXYVd51rvZ2igmU8GK2isPPQIcUmsBA+NC4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:aa:aa:29:e1:6a:89:a7:b1:a1:ca:29:ae:97:fe:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
        Validity
            Not Before: Jun 13 19:00:58 2025 GMT
            Not After : Jun 14 19:00:58 2025 GMT
        Subject: CN=e327132e00a7e9ed58d1d1dc62b26774ae84363f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:f3:35:48:9b:8b:45:5a:c4:72:5a:41:7b:
                    42:51:67:27:e7:a9:6b:ff:54:fe:12:a8:36:b1:7d:
                    18:9c:7c:ff:b3:53:a5:7b:b9:97:40:cb:d4:79:29:
                    b9:d5:24:51:c9:09:16:ed:e2:d6:b6:93:62:13:28:
                    c2:12:80:bd:eb:be:08:aa:7f:23:ce:92:84:a4:c6:
                    09:ee:09:7e:1b:5e:c2:1d:f7:a0:46:1a:24:fd:c6:
                    91:41:eb:1a:f4:45:ce:18:36:12:c0:81:81:75:2e:
                    8f:cb:3d:66:c5:ec:6d:a6:48:9b:6c:0a:3f:c0:9e:
                    76:f2:1e:a6:b0:8f:47:74:17:13:b0:9a:ca:2f:b8:
                    96:c0:25:ca:03:eb:00:3c:94:71:1c:fd:7a:d2:6e:
                    13:23:b4:c8:39:3d:8d:af:26:18:1a:72:af:a5:9f:
                    a5:0b:82:2f:84:fa:21:7d:e3:68:a4:a7:6a:d5:84:
                    b8:b5:66:25:86:05:3e:92:32:6c:52:ed:fd:c9:c8:
                    5c:3d:f6:a0:c6:b0:6f:67:99:dc:53:19:05:a9:60:
                    56:a2:a8:7c:0a:56:19:dd:ca:44:e0:98:13:cf:60:
                    32:54:8d:13:20:de:7b:49:ee:fd:43:0a:44:45:3f:
                    7a:a7:34:88:11:bd:4d:27:64:c2:34:28:bb:a9:b5:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:13:2E:00:A7:E9:ED:58:D1:D1:DC:62:B2:67:74:AE:84:36:3F
            X509v3 Authority Key Identifier:
                keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:d3:0c:2f:03:fd:86:70:61:4f:71:99:05:0b:12:48:f3:
         26:dd:fa:0d:cc:ce:16:c2:ca:d2:cf:6a:42:be:de:2b:08:28:
         46:06:3c:f8:85:ad:e6:84:7e:d7:11:03:c3:48:aa:18:2c:95:
         ea:6f:0a:7a:b3:37:dc:3e:52:4d:f6:56:20:9a:94:e5:9a:7b:
         7a:19:25:1c:72:7a:40:83:9f:b3:39:34:b5:a0:d2:61:0b:e0:
         46:05:12:d6:a4:dc:42:01:4e:21:6d:75:e4:7e:bb:3e:a4:21:
         53:a8:77:46:cd:10:68:1d:6f:1f:51:d0:7a:0c:01:00:f6:ea:
         b2:43:7a:ce:a2:60:31:fb:0b:ad:8b:20:51:f4:68:82:bb:17:
         ef:bc:98:de:ee:8e:52:a5:7b:b0:ff:76:81:03:b1:89:2d:6d:
         40:a8:b5:e9:3b:cd:20:8f:20:b8:ee:e9:77:cd:77:83:f6:95:
         f5:87:c3:db:fb:25:a2:ec:96:4f:c4:07:ea:57:d4:c2:a7:cf:
         09:ab:de:e7:0f:33:93:12:51:8e:b6:88:33:c4:44:a8:7a:4a:
         26:39:da:d9:88:00:a7:af:0b:fd:1c:25:5f:1e:80:a7:92:7b:
         66:e5:35:c4:1c:de:21:61:25:61:5e:17:d2:13:ff:6f:80:bf:
         6c:46:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:23:27 2025 by rpki-client