Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File:                     obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier:          kgWMHDO0nMiFh1SiTGu036vP/MExwJHUATCjE7ZNysM=
Subject key identifier:   1C:22:2F:7B:87:4C:E7:E4:23:03:23:17:9C:E3:24:82:55:B1:47:6A
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer:       /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial:       01974FD7C274F37A34742BD488052C0A5CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number:          1015
Signing time:             Sun 08 Jun 2025 14:00:29 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:29 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:29 +0000
Files and hashes:         1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
                          2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: blakiBg8QmfAxecitcizdSe89usuUuHxep1FyFsf4I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:c2:74:f3:7a:34:74:2b:d4:88:05:2c:0a:5c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
        Validity
            Not Before: Jun  8 14:00:29 2025 GMT
            Not After : Jun  9 14:00:29 2025 GMT
        Subject: CN=1c222f7b874ce7e4230323179ce3248255b1476a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:9d:ce:46:0b:3c:42:7f:ce:69:18:fe:74:
                    5f:97:e7:e5:67:fd:74:9c:6d:4d:05:d5:ef:38:91:
                    7e:ed:28:d5:92:ca:d5:5a:8c:94:a7:97:59:c5:7c:
                    ef:51:dc:3f:23:eb:16:f1:14:4a:3e:25:b9:ab:b4:
                    8d:9e:a0:0c:41:27:92:cc:24:c8:ed:9d:3d:1c:ff:
                    e3:c0:05:c5:65:4c:8e:a7:12:93:5c:c9:64:41:8a:
                    86:9c:e9:de:57:d8:2c:90:ee:b5:c0:48:1b:d7:cb:
                    3c:af:c2:de:ef:e2:36:7c:16:57:9a:1c:77:81:84:
                    36:1a:46:6e:e9:63:3d:62:bc:97:cb:ef:ed:dd:c4:
                    0a:64:aa:8f:89:57:5e:af:08:0a:cc:e8:c1:a1:eb:
                    a1:1d:cd:51:31:f4:4f:b8:dd:04:46:fd:d1:df:e1:
                    67:e4:28:5d:f7:7a:d9:72:97:08:ea:cb:9c:4f:b9:
                    25:90:e4:0f:a6:99:83:fe:90:28:a7:ba:84:b0:53:
                    8c:47:e4:f9:2e:17:db:ce:f6:5a:7e:3b:56:46:99:
                    ad:e0:5e:6f:20:50:4c:d7:44:c3:b2:a8:0b:c7:4f:
                    51:7b:16:43:85:43:08:e4:b8:e5:23:ba:2d:4e:95:
                    35:5d:d3:7d:94:7e:61:8d:bb:2c:82:67:6d:3b:0c:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:2F:7B:87:4C:E7:E4:23:03:23:17:9C:E3:24:82:55:B1:47:6A
            X509v3 Authority Key Identifier:
                keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:85:2d:b0:b0:95:9a:4f:e2:5c:0e:1d:a4:08:03:11:27:36:
         b4:c8:19:59:05:01:af:4e:75:e2:b6:1e:11:80:d9:cb:ab:d6:
         8a:0d:b6:6a:3b:4a:e8:27:57:60:4f:a2:91:b0:ae:51:b9:52:
         e7:72:31:95:cb:b7:1d:31:fa:db:39:b4:33:a5:88:ce:4f:70:
         22:da:c4:fe:8b:dd:6f:35:63:03:e4:89:61:05:72:2d:cd:78:
         54:5a:33:e7:cb:8e:80:2b:d5:b0:ae:e6:ce:de:d3:f5:9d:59:
         d3:c5:5c:9f:44:b7:4f:7a:12:4a:95:87:ce:2b:9f:8d:ac:8f:
         c6:52:5a:b5:6f:91:e4:1e:3a:9c:d2:77:32:81:0a:3a:af:ea:
         5a:e7:09:44:b5:65:01:06:ef:88:11:57:3c:b7:00:01:99:aa:
         ab:d9:20:e6:3d:16:dd:de:a1:c1:52:01:34:bd:72:0c:30:ab:
         db:68:8e:16:e5:fd:7d:70:04:fe:87:da:01:16:c4:ff:f0:b3:
         43:1a:47:11:b7:20:56:c7:cd:31:8a:4f:82:fe:d2:47:51:20:
         c5:09:33:4c:80:f5:90:80:79:db:9e:5a:a4:af:8d:d5:d8:1d:
         d0:12:d0:d4:06:e8:e1:ce:55:20:7a:1e:8e:32:bf:e7:f8:0e:
         82:04:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:44:28 2025 by rpki-client