Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File:                     oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier:          PMqrCF3x3ex+fvR5iiw9yhOhXE1+AckOySn+X/VI7p4=
Subject key identifier:   88:F3:0F:06:59:5A:51:41:F3:14:B1:F4:10:1D:3B:F1:46:23:C6:14
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer:       /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial:       01975BDC552DBB001F71D79FBE9B572D6A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number:          0EB4
Signing time:             Tue 10 Jun 2025 22:00:55 +0000
Manifest this update:     Tue 10 Jun 2025 22:00:55 +0000
Manifest next update:     Wed 11 Jun 2025 22:00:55 +0000
Files and hashes:         1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: kDs1gCvTxZOu5r/KVLkDxTd0kIXxs8LwpNaom0oE+No=)
                          2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:55:2d:bb:00:1f:71:d7:9f:be:9b:57:2d:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
        Validity
            Not Before: Jun 10 22:00:55 2025 GMT
            Not After : Jun 11 22:00:55 2025 GMT
        Subject: CN=88f30f06595a5141f314b1f4101d3bf14623c614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:1b:9a:1e:35:50:04:e6:f6:1b:24:e7:9e:
                    73:61:62:99:f5:2c:1e:76:bb:b5:f1:23:e1:69:db:
                    05:c8:b1:f4:3b:ed:e1:47:04:10:90:0c:8e:a5:2e:
                    66:6b:e1:ab:54:09:cc:05:d4:41:8d:89:83:b7:5c:
                    82:51:fd:6d:5a:0e:8e:c7:c5:28:25:b2:46:ad:d0:
                    82:5b:44:76:20:2f:37:5d:40:bd:51:77:a2:79:eb:
                    5e:cf:cb:54:bb:c9:d0:b9:f4:20:5f:9e:d7:dd:34:
                    16:52:49:cf:a4:1c:24:d7:09:e7:6c:d0:25:84:58:
                    28:1a:c6:a8:a9:65:8f:1c:17:79:35:b4:cf:23:9b:
                    be:1a:a4:6b:15:71:2c:7b:1e:b2:de:d7:17:ff:86:
                    cf:c9:ea:3a:ba:1c:d1:38:b8:6b:8f:07:23:9f:41:
                    bd:9e:d6:77:31:78:7d:c1:fb:e6:62:fd:45:94:36:
                    02:4b:ee:e0:47:72:dd:6e:57:e5:92:b3:75:86:f9:
                    30:05:92:23:a8:a7:86:f9:62:c3:5b:af:66:55:71:
                    6a:95:6b:53:07:fc:c3:d9:29:d4:1e:53:77:88:03:
                    83:d6:99:22:74:b8:e7:34:60:8c:be:d5:25:61:cc:
                    50:5a:43:e1:57:32:74:e7:af:2c:2d:80:a9:0f:2c:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:0F:06:59:5A:51:41:F3:14:B1:F4:10:1D:3B:F1:46:23:C6:14
            X509v3 Authority Key Identifier:
                keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:9a:8f:83:fd:0a:ec:00:86:4a:6d:3e:e8:31:62:39:eb:
         0a:2d:15:a2:a5:12:3e:f0:0b:c7:d1:e8:01:b7:25:fd:6c:83:
         41:73:6c:31:71:28:b7:04:fd:cb:d9:42:0c:4e:fd:f7:d0:a7:
         7e:0d:75:b5:c0:45:df:e2:b3:c4:0d:f0:7a:0d:3f:68:c2:74:
         26:65:de:ac:e3:16:a7:7f:3e:81:fc:3e:07:b8:a1:f9:29:7f:
         85:17:c8:4f:24:60:62:17:e9:fd:7e:2a:57:66:e1:0f:fa:5b:
         ec:d3:ff:8a:9c:c8:a9:cb:ad:e7:2d:ba:1c:ff:34:ff:3b:70:
         ae:22:d2:0e:d9:bd:89:49:0b:a7:3b:a6:83:57:36:ae:9f:90:
         51:f5:94:65:f9:7b:6e:26:79:2d:a0:0b:44:66:c8:fc:91:2a:
         28:0b:14:5b:42:fd:32:e4:46:d1:2b:ad:27:de:e5:3e:4b:c6:
         4e:bb:5c:59:fa:f7:21:87:2b:7f:da:4a:1d:65:2d:7a:bf:79:
         6c:27:eb:a4:81:e6:fe:27:6d:0c:17:cc:f9:2a:57:67:c1:85:
         1a:77:5b:95:3b:ac:c1:71:17:2a:9c:88:28:07:3a:a3:91:76:
         5c:d2:8d:cb:7d:7e:81:a4:79:12:84:30:f9:48:cb:1b:97:26:
         30:c8:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:54 2025 by rpki-client