Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File:                     O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier:          8+W1NkzpUWXUT4diXUTGULa5kX2DWa8YbBhimGDfDLU=
Subject key identifier:   0F:EF:CA:7F:C2:88:FA:BB:1F:33:FE:49:84:7D:7D:C5:38:8D:0A:E5
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer:       /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial:       0197488C2FD166C8E9736B51FCAC02875B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number:          0DFE
Signing time:             Sat 07 Jun 2025 04:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:36 +0000
Files and hashes:         1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
                          2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: 1Hm1oovpcrWci+wcsbwbSmMipy0akkmZvaTqgvmdE5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:2f:d1:66:c8:e9:73:6b:51:fc:ac:02:87:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
        Validity
            Not Before: Jun  7 04:00:36 2025 GMT
            Not After : Jun  8 04:00:36 2025 GMT
        Subject: CN=0fefca7fc288fabb1f33fe49847d7dc5388d0ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:e2:ea:16:bf:4c:23:e5:63:71:55:f7:e1:
                    ee:d4:98:17:a2:8b:b4:d3:13:ba:f3:3d:06:81:27:
                    78:40:41:a0:61:f1:3c:7d:00:7f:8e:43:9a:c4:5c:
                    36:1f:36:e0:27:4f:45:7d:a8:7f:3d:57:80:74:60:
                    97:14:ad:bb:04:89:22:9f:8f:01:05:74:9e:44:52:
                    24:1b:9e:98:4c:c2:c5:a9:bf:c7:cb:62:d1:3b:aa:
                    8e:de:0e:47:d9:62:f7:f0:0c:d5:86:1b:b3:96:28:
                    89:16:72:92:0c:ba:1c:ae:a2:cc:07:45:c2:78:32:
                    a9:e3:65:bd:db:ca:bd:e6:12:cc:b4:41:d9:9c:9a:
                    6a:07:98:0e:c3:7c:9d:ce:3e:be:46:81:e1:81:9f:
                    fd:4e:b4:55:38:29:e1:1a:17:cb:3a:fa:74:ab:a5:
                    42:a5:80:f0:bb:08:4f:ab:c2:ab:ab:4b:5d:38:9d:
                    79:8f:96:39:1c:a0:3d:03:41:99:22:a8:2c:e6:a4:
                    7c:79:83:f0:0b:fa:54:62:c4:bb:fc:98:f7:be:ab:
                    ba:52:d9:9c:63:1f:54:a4:14:fd:ee:da:13:49:18:
                    c2:81:cd:0b:da:04:04:46:03:23:46:34:d8:36:6b:
                    96:e4:e1:f4:4c:62:e9:37:55:f2:5f:8c:3f:8d:07:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EF:CA:7F:C2:88:FA:BB:1F:33:FE:49:84:7D:7D:C5:38:8D:0A:E5
            X509v3 Authority Key Identifier:
                keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:04:9e:48:ea:12:90:26:5e:22:00:cd:8a:93:cd:13:89:
         e7:07:88:97:52:ec:e2:87:94:e4:78:c9:22:71:31:31:6f:0e:
         cf:dc:21:99:02:48:62:a9:70:c9:26:98:58:2d:96:23:31:b1:
         63:ec:8c:c7:de:08:03:cd:b0:b9:a1:fa:39:f4:22:be:63:32:
         52:86:d0:a2:f5:e3:00:5b:0a:b3:7d:c0:4c:55:28:89:52:64:
         88:c2:5f:fb:08:49:8a:8f:c0:cc:92:d8:5b:aa:96:84:d5:1d:
         4a:b2:c0:d5:e9:e5:ef:43:80:ab:ba:1d:e5:77:db:d3:b0:00:
         00:56:eb:a8:f4:26:1a:ef:cc:5b:8d:bb:16:93:7a:59:fc:3e:
         c9:0a:b5:33:e6:ee:79:44:88:cb:5f:8e:d0:4f:a7:38:64:28:
         3f:de:7b:7a:65:3a:29:78:59:fd:ca:bb:45:15:c3:71:0c:29:
         4d:eb:f6:b8:09:9a:92:a2:6c:45:82:5e:e2:1a:53:d8:2b:95:
         19:77:ab:64:0a:14:5e:bb:8c:c4:d9:08:98:5c:58:85:5c:c8:
         1e:af:0a:7e:9b:db:5d:b1:d9:bc:f0:79:4e:15:2c:d8:6f:7e:
         97:88:df:2e:be:22:e8:dd:be:23:d7:65:cf:33:66:3c:7d:7c:
         85:12:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:40 2025 by rpki-client