Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File:                     OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier:          8zMPjJHep5tF4xKiyp2HdnEEQAIGtnlrgpr6fZGMxiI=
Subject key identifier:   7E:0C:8D:78:2D:97:65:92:02:9A:2F:8E:55:0E:89:4B:12:53:F7:11
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer:       /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial:       019762BA3148E5892CF7B4E763DA30185E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number:          04EE
Signing time:             Thu 12 Jun 2025 06:00:58 +0000
Manifest this update:     Thu 12 Jun 2025 06:00:58 +0000
Manifest next update:     Fri 13 Jun 2025 06:00:58 +0000
Files and hashes:         1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: qi5o/+iVgzKmBuopRnBQk2o5u5jxEEnfNK1QvSlOf1s=)
                          2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:ba:31:48:e5:89:2c:f7:b4:e7:63:da:30:18:5e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
        Validity
            Not Before: Jun 12 06:00:58 2025 GMT
            Not After : Jun 13 06:00:58 2025 GMT
        Subject: CN=7e0c8d782d976592029a2f8e550e894b1253f711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:a3:21:ec:8a:03:e0:0c:05:85:0a:44:ec:
                    26:f6:2b:ad:12:1c:f5:ea:19:59:a0:ac:2e:d7:04:
                    aa:82:36:8b:26:e8:9a:c1:70:3a:c2:23:2f:b0:d9:
                    48:dd:f8:ea:c0:62:de:11:18:a8:c3:10:d0:e8:32:
                    b4:05:37:12:93:99:1a:d1:e1:19:84:84:c5:ec:5c:
                    0c:ec:13:bc:1a:30:44:2c:d0:65:fa:59:fe:63:5a:
                    be:ea:a6:3d:85:36:11:29:6b:1f:4e:6d:f4:33:d8:
                    f0:8f:6c:6a:f6:e8:d8:b3:fa:4a:94:16:cb:82:24:
                    45:ef:17:9f:59:e6:36:95:79:dd:dc:49:34:b6:18:
                    63:87:39:5f:d7:de:06:e2:55:6b:9e:c9:2c:c7:27:
                    43:1f:99:44:4b:55:94:08:d1:1e:6c:70:b9:dd:b8:
                    19:1d:cc:4d:12:b5:04:bc:76:d0:ae:3c:1b:5b:04:
                    c8:a9:46:2e:b0:65:34:bd:3a:51:ea:58:68:f1:fe:
                    68:7f:95:cf:c5:63:e4:88:d2:f6:3a:5a:13:72:b0:
                    cf:3f:85:96:b0:89:56:eb:a1:73:93:18:c9:7c:2e:
                    df:84:32:ad:99:cb:38:61:98:93:92:59:e4:b5:33:
                    7f:91:51:b7:dc:3e:8c:fa:c9:96:3f:1c:a8:c3:f3:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:8D:78:2D:97:65:92:02:9A:2F:8E:55:0E:89:4B:12:53:F7:11
            X509v3 Authority Key Identifier:
                keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:90:f8:6e:cc:7c:b6:f7:16:d1:46:b7:ad:ea:67:9e:6e:ec:
         e4:86:32:c6:73:43:69:07:07:4d:4d:cb:0d:3f:2c:ba:6c:01:
         df:f7:60:21:e3:19:9f:f5:f8:9f:50:2a:32:18:a3:df:dd:5b:
         ba:88:3d:41:90:e5:f3:f0:9b:24:ce:c1:3b:26:93:07:6a:a4:
         5f:3e:de:43:43:ed:e4:3f:1a:b5:25:8d:92:ac:d5:8c:37:ed:
         4b:4b:60:2e:bc:c8:5c:44:0a:c5:72:e0:c0:86:0f:ae:08:6b:
         05:8b:dc:23:6b:de:b2:75:ba:8c:ee:5d:5a:3d:b3:d8:5b:73:
         43:28:d6:97:2c:18:0e:d9:83:34:06:b5:f3:12:63:6d:74:6c:
         05:b9:67:84:c3:e2:67:53:33:b2:29:e3:92:26:19:8d:f9:27:
         42:49:ec:a8:3d:0f:4d:2d:28:39:ea:52:f1:12:38:9d:6a:56:
         c4:b0:74:59:18:19:f6:b1:91:c4:60:04:37:13:d6:02:8b:13:
         ed:61:40:ba:e5:57:52:5d:a1:77:3c:ee:9a:59:9c:67:5f:d0:
         aa:0c:d6:78:b3:e0:85:bd:86:c4:87:6a:1c:14:25:78:e7:f5:
         3a:e6:ee:c3:ba:37:7d:d9:38:21:8a:54:63:6d:31:55:95:b5:
         6b:74:d3:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiujFI5Yks97TnY9owGF4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZmVlNmMxZjhjYjIyNTAzOTI1YzFlOTI5MmJmZDE4MWNh
OTU5ODQwHhcNMjUwNjEyMDYwMDU4WhcNMjUwNjEzMDYwMDU4WjAzMTEwLwYDVQQD
Eyg3ZTBjOGQ3ODJkOTc2NTkyMDI5YTJmOGU1NTBlODk0YjEyNTNmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ajIeyKA+AMBYUKROwm9iutEhz1
6hlZoKwu1wSqgjaLJuiawXA6wiMvsNlI3fjqwGLeERiowxDQ6DK0BTcSk5ka0eEZ
hITF7FwM7BO8GjBELNBl+ln+Y1q+6qY9hTYRKWsfTm30M9jwj2xq9ujYs/pKlBbL
giRF7xefWeY2lXnd3Ek0thhjhzlf194G4lVrnsksxydDH5lES1WUCNEebHC53bgZ
HcxNErUEvHbQrjwbWwTIqUYusGU0vTpR6lho8f5of5XPxWPkiNL2OloTcrDPP4WW
sIlW66FzkxjJfC7fhDKtmcs4YZiTklnktTN/kVG33D6M+smWPxyow/N0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4MjXgtl2WSApovjlUOiUsSU/cRMB8GA1UdIwQY
MBaAFDj+5sH4yyJQOSXB6Skr/RgcqVmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYt
YjVlNGE2ZGNlMTk0LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYtYjVlNGE2ZGNlMTk0
LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpD4bsx8
tvcW0Ua3repnnm7s5IYyxnNDaQcHTU3LDT8sumwB3/dgIeMZn/X4n1AqMhij391b
uog9QZDl8/CbJM7BOyaTB2qkXz7eQ0Pt5D8atSWNkqzVjDftS0tgLrzIXEQKxXLg
wIYPrghrBYvcI2vesnW6jO5dWj2z2FtzQyjWlywYDtmDNAa18xJjbXRsBblnhMPi
Z1MzsinjkiYZjfknQknsqD0PTS0oOepS8RI4nWpWxLB0WRgZ9rGRxGAENxPWAosT
7WFAuuVXUl2hdzzumlmcZ1/QqgzWeLPghb2GxIdqHBQleOf1Oubuw7o3fdk4IYpU
Y20xVZW1a3TTOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:40:08 2025 by rpki-client