Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          iUeY4u9abM9rO9Q01uvI0XC14Pvv9nnklwklrjropVE=
Subject key identifier:   20:36:55:F4:1C:D6:EF:7D:2B:71:D0:C6:BC:72:D9:3B:28:53:E1:9A
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       01975F4AF25AEA484C5B4815EC3E79BEB50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          0ECF
Signing time:             Wed 11 Jun 2025 14:00:36 +0000
Manifest this update:     Wed 11 Jun 2025 14:00:36 +0000
Manifest next update:     Thu 12 Jun 2025 14:00:36 +0000
Files and hashes:         1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
                          2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=)
                          3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=)
                          4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
                          5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: Adt1Sj+SIOgAW8H+b83RKAs9rbDdW6Ii7aBhuXHBdt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:4a:f2:5a:ea:48:4c:5b:48:15:ec:3e:79:be:b5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Jun 11 14:00:36 2025 GMT
            Not After : Jun 12 14:00:36 2025 GMT
        Subject: CN=203655f41cd6ef7d2b71d0c6bc72d93b2853e19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:bd:4d:08:3e:65:47:eb:65:38:80:b6:d8:
                    d0:5b:3b:83:5a:2c:6b:ac:fb:07:f8:a1:bd:fa:69:
                    38:e4:76:cd:9b:f4:ec:16:00:8b:f8:81:83:61:90:
                    e0:6a:2f:33:b4:06:0c:c4:1f:fd:fa:da:a3:35:08:
                    66:20:98:07:97:59:0a:f8:04:5c:6c:78:f4:f8:c7:
                    65:7b:11:a3:a0:25:b7:17:85:df:be:d1:4c:d5:b1:
                    14:63:8f:6b:f7:1b:2e:ef:ed:b6:4c:78:9f:38:22:
                    ee:5a:94:3e:b1:89:b0:05:90:40:f3:eb:4e:3e:62:
                    df:b5:a2:32:eb:52:8c:44:13:98:ac:40:b4:8d:d4:
                    1b:6b:5f:67:0a:98:69:92:13:18:54:94:db:71:59:
                    11:32:a6:45:e1:ef:39:33:3d:fa:02:47:d5:a1:96:
                    36:f4:8c:ff:d2:58:67:d8:6e:40:12:dd:99:a6:7e:
                    66:a8:69:ab:1f:a6:0e:92:f8:f5:7a:97:a0:6e:04:
                    fb:c3:ba:03:2b:df:35:1c:91:12:6f:6b:d9:59:6d:
                    87:67:b2:86:25:c3:28:1d:1b:ec:fe:07:7a:18:3d:
                    dc:88:18:31:7c:a4:ad:f2:6c:ac:bb:eb:5f:a4:6d:
                    5d:fb:3d:33:d6:1d:fb:79:bc:15:8d:8b:de:9e:44:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:55:F4:1C:D6:EF:7D:2B:71:D0:C6:BC:72:D9:3B:28:53:E1:9A
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:60:72:b3:62:53:6e:ee:cd:70:21:45:96:39:2f:53:5f:
         00:6c:a2:88:ea:f8:79:94:bf:27:c6:47:fb:70:77:39:66:cf:
         be:35:1d:1b:41:20:ed:22:5f:a9:76:14:a4:bf:ef:73:1a:3e:
         b6:0b:d5:30:64:13:47:c2:f4:a1:d5:58:0d:69:3a:03:9f:0c:
         5d:15:da:06:e3:6d:d3:f7:4e:ae:6f:87:36:c8:cf:3e:09:bb:
         bd:1c:b0:90:a9:04:bf:af:d3:cc:b6:48:6d:a6:2c:f1:d9:47:
         eb:c0:3a:e5:83:07:98:de:ff:54:92:74:11:2a:1e:fc:82:3c:
         7e:01:72:96:12:57:3b:1d:fd:61:5b:80:1f:0e:ee:d8:2a:58:
         c0:6d:4f:27:51:4a:60:2c:2e:af:46:92:d4:4a:b1:8b:9c:74:
         85:fe:be:a6:96:3c:ad:52:04:66:ed:ab:06:3b:20:b5:dc:51:
         3e:ed:2c:72:5c:39:04:22:98:d1:24:2d:8f:c4:6c:49:c6:2d:
         04:6f:ca:76:82:de:5f:59:e8:79:85:32:c6:5a:74:0f:35:ad:
         12:9e:2f:20:b7:e4:86:a3:c0:8d:d9:3b:18:4c:88:72:80:9c:
         11:c5:b9:5b:2a:16:e9:25:0b:08:3f:db:af:1f:9a:84:c8:c1:
         87:a6:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:29:23 2025 by rpki-client