Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File:                     oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier:          0hNunrTGmCrAYMMUsywpDYb9ZsQ9yznUShkr295E0dg=
Subject key identifier:   A6:31:D8:32:98:01:78:37:76:B4:69:53:09:ED:B2:35:D7:2B:5D:FF
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer:       /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial:       01974D7C20BFCF580F174226A1DE11024C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number:          0F46
Signing time:             Sun 08 Jun 2025 03:01:09 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:09 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:09 +0000
Files and hashes:         1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
                          2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: kb3NRsJ/LmPp8CbBJD+9f/Gdz1gKyYVWw9wTyWBmAEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:20:bf:cf:58:0f:17:42:26:a1:de:11:02:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
        Validity
            Not Before: Jun  8 03:01:09 2025 GMT
            Not After : Jun  9 03:01:09 2025 GMT
        Subject: CN=a631d8329801783776b4695309edb235d72b5dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:4a:f4:dc:0a:d3:20:6d:20:13:f8:33:d1:
                    2c:34:81:8e:36:4e:51:a6:e2:07:c6:41:a1:c7:a5:
                    39:07:15:7b:fa:5c:e1:2c:98:8c:cc:cc:4d:0f:60:
                    e7:2d:c1:6d:93:a0:6d:33:0a:98:80:b6:7b:7c:2e:
                    d4:36:c9:e5:0e:59:8c:34:d8:35:72:0d:ad:85:3e:
                    aa:6f:06:38:da:16:8a:20:08:66:2f:e4:55:9f:bc:
                    b5:00:bb:2f:a8:cf:0f:79:d8:d0:74:4a:82:e3:1d:
                    f7:61:fd:2c:20:60:56:97:76:b2:75:cf:d2:a6:6d:
                    e9:c7:07:79:ca:85:3a:bf:ff:ee:32:79:5c:84:e4:
                    74:69:0a:12:77:84:2c:30:49:a0:d5:45:b4:9b:47:
                    78:ab:26:18:06:0a:7e:6f:c8:cc:95:e3:80:38:0e:
                    23:c1:a5:62:3b:1c:6b:23:6b:c5:32:06:87:ac:95:
                    99:81:07:e3:0d:bb:86:fc:35:36:20:74:f7:d6:44:
                    28:96:92:41:9e:77:68:0f:a3:8b:b1:bc:59:8d:38:
                    1a:bc:a9:84:9e:bc:00:bd:1c:40:e3:70:79:d4:bb:
                    c8:d6:ee:57:2f:80:1a:32:11:dd:b1:bf:ac:d0:d1:
                    2a:63:ef:8c:c5:c7:db:65:aa:88:58:e1:83:1a:68:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:31:D8:32:98:01:78:37:76:B4:69:53:09:ED:B2:35:D7:2B:5D:FF
            X509v3 Authority Key Identifier:
                keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:61:b4:dc:7a:d7:a6:ef:6a:7e:43:25:bb:4c:20:f7:bd:
         7d:4c:42:5a:a7:bb:84:c5:f1:13:9d:bf:fa:3e:e4:5d:1e:13:
         5a:c7:c5:4d:a3:31:6a:c5:41:ce:f0:e4:47:b5:42:4d:4b:a7:
         92:24:4d:22:e6:d1:98:81:4d:89:10:12:24:b4:34:c9:79:96:
         56:8d:3c:39:9e:55:10:5d:e8:f0:13:11:53:8e:cd:96:24:46:
         03:cb:db:31:37:51:5b:63:34:67:bc:7d:53:16:5d:5c:a6:03:
         d0:89:db:c2:34:d4:6b:df:b6:76:ea:05:56:41:de:fc:b1:d0:
         49:ab:a5:20:da:ba:66:85:50:25:a8:c5:43:cf:1e:98:83:28:
         15:9c:a1:45:af:a4:f2:70:65:e1:02:20:53:e0:a7:a4:5b:d9:
         85:a6:19:f4:d9:92:de:6e:5a:be:b2:73:1e:72:70:1f:52:17:
         4f:a1:f8:e3:80:a7:be:71:87:e4:42:7f:0d:a9:da:9f:5d:37:
         fc:35:06:83:db:61:01:f7:f5:27:87:93:ff:5d:08:4b:a9:6e:
         bb:cc:4a:ab:e7:6c:be:84:7e:b0:47:e9:03:0a:a9:f6:c2:ee:
         47:3b:a7:e1:cc:03:3a:41:76:95:7b:ef:65:09:a0:cc:8a:71:
         34:4a:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:59 2025 by rpki-client