Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File:                     oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier:          oMmgsrCxYsmlj8F6zwXHIPgMc3+qfEeHPvWenCztx/c=
Subject key identifier:   79:97:D5:7D:0D:66:CF:D5:36:D7:A0:E2:78:6C:E7:C2:02:C4:14:6D
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer:       /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial:       01976AE18AAC9FA67EB1049870C7B9536617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number:          1028
Signing time:             Fri 13 Jun 2025 20:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 20:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 20:00:55 +0000
Files and hashes:         1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
                          2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: gVjq02BpBWz2V4BJ/htzn0RV4NLFU8yakOJO5CbXNMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:e1:8a:ac:9f:a6:7e:b1:04:98:70:c7:b9:53:66:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
        Validity
            Not Before: Jun 13 20:00:55 2025 GMT
            Not After : Jun 14 20:00:55 2025 GMT
        Subject: CN=7997d57d0d66cfd536d7a0e2786ce7c202c4146d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:71:14:53:00:a8:1d:5d:52:ef:2f:11:cb:
                    1d:f3:05:af:05:ff:97:fa:1d:bc:31:5e:b6:fe:2a:
                    ef:6e:c6:97:9f:b5:dd:12:bf:62:13:a0:fa:a8:2c:
                    d0:14:75:7c:ac:aa:d5:1a:98:96:94:05:90:0d:e6:
                    17:aa:f6:2f:eb:f3:a6:88:54:4d:9b:e4:1a:93:7a:
                    ea:7f:98:f9:66:24:c9:52:86:90:74:26:22:88:89:
                    2a:30:68:19:49:89:32:b7:ed:f5:e6:1e:b1:e4:41:
                    99:3d:6f:9b:4b:11:fc:10:46:39:0f:5b:3e:0d:9d:
                    58:fc:b0:0d:03:bb:30:a4:11:02:33:d1:ae:46:c3:
                    8c:48:d1:9a:8f:59:5f:2b:04:6a:dd:97:02:60:e5:
                    9c:af:7d:54:12:7c:94:c8:50:5f:4a:f3:fc:99:dd:
                    ae:90:47:44:d9:cd:63:40:cc:d3:5f:c0:50:a8:3d:
                    78:a7:68:03:46:52:dc:bc:9b:61:d1:07:59:1c:97:
                    2f:69:ce:85:33:65:8f:52:bb:7f:f2:60:5b:ea:53:
                    3f:ad:a5:96:2c:27:47:6d:a2:6e:1d:5f:8c:c0:1c:
                    ea:06:b8:55:e7:53:a9:77:6a:e1:9d:16:8f:8e:18:
                    90:6d:94:f6:1a:a9:d7:77:d5:bd:af:0d:49:be:1a:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:D5:7D:0D:66:CF:D5:36:D7:A0:E2:78:6C:E7:C2:02:C4:14:6D
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:cb:b3:f1:1f:52:1c:c1:9a:1b:b3:90:d8:fa:bf:dd:23:82:
         e2:c3:58:9b:84:5a:aa:b8:13:5c:9e:e8:c5:58:ea:1b:aa:e2:
         8b:2c:32:ba:09:cd:d1:ce:e5:2c:a6:55:85:26:8e:b4:9d:aa:
         2e:b8:53:c1:16:3b:40:fd:1e:3c:57:c5:e9:2c:f6:0f:71:dc:
         0d:ef:93:f5:e1:a2:ef:ea:af:df:ce:15:be:36:b1:ef:b4:14:
         ae:b2:c5:f5:07:64:a1:db:f8:f9:53:60:2d:05:59:bb:53:cf:
         67:88:4e:25:76:b0:6e:13:6a:ba:43:0a:73:34:1d:d5:09:92:
         a0:c5:b1:78:6f:a4:74:29:08:a5:ad:2c:ab:83:57:55:9c:97:
         b0:76:45:18:b3:56:60:1d:2d:6f:75:b1:6c:a7:6d:ba:c4:c9:
         4c:50:91:69:20:b7:ee:93:56:48:b4:f8:3f:90:52:af:13:89:
         a2:92:9d:0e:70:c2:c7:55:7f:b1:fd:56:e6:d4:c2:82:70:cc:
         d8:d2:c2:dc:f2:d2:d5:29:34:2f:12:42:d4:45:bc:f2:3a:4a:
         9d:cf:3a:0e:d8:7a:81:c4:84:42:d8:e9:00:d5:31:50:ac:79:
         99:12:b1:e0:f2:20:82:ee:ba:e1:66:2e:a4:06:f9:aa:0d:d7:
         5b:2b:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:58:35 2025 by rpki-client