Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File:                     Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier:          Hfyt9jJN/ZAtmvX0dxmTqU0FHBYiob1Qrsd30RfG7QE=
Subject key identifier:   A1:BA:D0:E5:92:98:84:D6:94:71:07:9E:48:F5:7A:C4:14:8E:3C:8E
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer:       /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial:       019762F086A532F2ED54A025A7ABEBE8F5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number:          01A8
Signing time:             Thu 12 Jun 2025 07:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:19 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:19 +0000
Files and hashes:         1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
                          2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: KU6zY672hrrEDWFiH9595eemfyMRzc8A/9i9Gf1+T/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f0:86:a5:32:f2:ed:54:a0:25:a7:ab:eb:e8:f5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
        Validity
            Not Before: Jun 12 07:00:19 2025 GMT
            Not After : Jun 13 07:00:19 2025 GMT
        Subject: CN=a1bad0e5929884d69471079e48f57ac4148e3c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:0f:cc:e5:54:38:96:d7:98:44:b6:11:98:
                    49:02:08:d9:3a:ce:fe:56:e6:60:72:36:2d:dc:96:
                    25:86:0c:ec:61:44:fe:aa:08:2a:6f:a4:fe:61:12:
                    7a:b2:7c:f8:80:bc:f1:88:3c:69:81:a1:30:c2:cf:
                    65:a0:bb:0c:80:a3:de:c7:eb:3e:a9:a1:6e:c2:07:
                    1f:e0:2f:9b:f3:2e:b7:35:69:ec:14:f5:0e:bb:fd:
                    93:1e:a1:ac:44:88:21:c3:aa:ae:b5:26:fb:56:4b:
                    70:9b:ec:91:db:5c:9a:46:c0:1b:71:90:9c:69:f6:
                    e1:a2:5c:2e:b1:3f:de:ab:8b:ea:e9:8c:6c:53:6d:
                    b2:d0:34:e3:7f:b3:17:c9:e4:ce:1b:33:49:24:c2:
                    86:03:4b:7a:b5:ac:7f:1e:68:08:a4:c0:d1:76:a1:
                    16:c7:f1:23:7a:36:22:d8:2a:1d:d3:2c:75:d8:a5:
                    79:68:0f:3e:ae:3e:cd:6e:49:f9:18:96:9e:6f:97:
                    6f:28:b5:9d:8f:cd:ee:0e:64:e5:61:83:3a:1a:9b:
                    1f:05:18:00:a7:e5:bf:39:f9:ea:dc:0b:f6:12:ca:
                    d8:64:69:49:ff:7c:49:52:fa:e0:4b:d7:63:c1:d8:
                    e7:15:79:25:49:6c:02:2b:7c:71:f0:e8:db:8b:80:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BA:D0:E5:92:98:84:D6:94:71:07:9E:48:F5:7A:C4:14:8E:3C:8E
            X509v3 Authority Key Identifier:
                keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:4e:9d:1c:eb:77:60:9e:45:54:cb:a5:d2:fb:b8:ae:74:
         ed:fe:d1:c4:7d:32:3d:53:be:76:57:1d:26:cd:ce:cb:f2:63:
         58:14:6c:2e:c2:ad:46:09:83:04:d4:13:6d:97:a4:62:2f:92:
         44:ed:88:cd:ef:3d:80:72:f9:14:3b:23:7a:9e:6f:b9:ad:83:
         82:7b:0f:24:de:0b:d4:7d:78:35:ca:06:e4:3a:6e:fd:42:93:
         5d:e4:51:c0:c3:ec:15:46:60:a5:32:8a:6b:13:3d:b5:5d:64:
         20:0e:ce:78:98:9b:a2:ac:76:8b:f0:69:e8:cf:5e:37:a6:ba:
         ba:f4:ec:50:4f:ea:10:1f:18:07:39:98:fc:26:0b:8d:7b:06:
         6c:00:8e:31:a4:1e:84:2f:8e:84:f2:0b:c9:82:fd:e8:0b:a3:
         62:14:70:a6:d5:d8:db:34:28:07:f1:fb:a7:56:69:4b:c0:3c:
         27:df:ca:a9:63:15:11:4b:a4:f4:28:00:48:3a:1e:f4:03:79:
         7e:75:77:89:5c:12:ea:ed:34:58:af:9c:40:27:72:d0:a6:1c:
         f5:72:1e:40:14:86:53:4d:e1:ce:80:8a:67:39:8c:ff:e7:a2:
         55:b1:8f:1c:c9:52:c3:1c:74:77:d0:bb:80:9c:05:1e:9d:97:
         4a:fd:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:49:34 2025 by rpki-client