Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          b+ZAtwQHLlohFVOt5W+IvUYZ7920WbjKwSkJ3gw7nxM=
Subject key identifier:   1C:40:2D:E0:9F:57:5E:9C:B6:F2:62:76:72:4E:AC:03:8C:CB:9B:76
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       01975C49D6CE1CFCFA87751BE8C5BE4FC7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          158D
Signing time:             Wed 11 Jun 2025 00:00:32 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:32 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:32 +0000
Files and hashes:         1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
                          2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
                          3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: WmYZdRz88wkG8dWdHQpYqzouiY3cD2HdgQ9ljfY+n+M=)
                          4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
                          5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:49:d6:ce:1c:fc:fa:87:75:1b:e8:c5:be:4f:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: Jun 11 00:00:32 2025 GMT
            Not After : Jun 12 00:00:32 2025 GMT
        Subject: CN=1c402de09f575e9cb6f26276724eac038ccb9b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:c2:7e:3b:05:fe:95:12:3a:65:04:04:15:
                    c0:f6:a5:13:9e:27:65:b9:ed:cd:01:36:f4:b3:0b:
                    51:7a:01:90:ff:71:e2:1c:0b:61:68:4e:8f:77:9a:
                    0a:bc:31:c0:52:f7:40:df:62:a7:93:02:8e:bc:92:
                    b5:dd:76:64:31:4e:1f:0a:bf:89:3f:79:19:ee:08:
                    79:6a:49:9d:ea:17:4e:e1:69:5c:3c:0e:b6:36:2f:
                    c9:27:d1:ec:ec:b9:6b:6e:82:16:09:6f:e7:1a:92:
                    cd:f1:76:b4:2c:b7:76:7c:f9:e8:46:95:71:03:34:
                    75:f3:f1:77:6a:7d:3a:13:81:15:09:a0:d1:78:59:
                    58:27:8a:25:af:34:38:75:25:81:49:b5:f4:3b:1e:
                    a0:6e:a4:c8:1a:d5:ad:e2:06:59:9e:04:c1:85:77:
                    65:11:57:ee:b9:94:ed:36:e1:60:47:cc:c9:04:c1:
                    7b:78:4d:b1:82:30:87:ef:37:92:e4:6b:bb:f7:6b:
                    bc:17:c8:de:ed:49:66:fd:3a:a6:c2:3a:27:cd:96:
                    b1:c8:9a:43:6a:7d:6a:55:3a:4f:87:6c:07:03:98:
                    42:24:0c:dd:e7:2a:f4:ab:42:05:6b:06:fb:33:ec:
                    c4:00:72:d4:15:82:87:95:d0:00:6a:9a:2b:b1:ff:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:40:2D:E0:9F:57:5E:9C:B6:F2:62:76:72:4E:AC:03:8C:CB:9B:76
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:8e:e6:3b:ec:5c:60:72:dd:41:50:5f:83:27:1f:c3:b4:
         b6:72:30:f7:ca:36:0e:31:e9:9e:31:b4:a9:3f:78:6d:bd:b0:
         ab:57:7a:e2:b6:e9:f3:55:50:13:07:f9:f3:14:0f:24:ec:bf:
         77:a6:1f:90:b6:2e:27:17:84:95:55:56:48:8d:b8:aa:8a:66:
         ac:4d:b3:89:f8:c9:3b:59:bf:1e:d0:71:81:9a:bd:44:6e:0b:
         08:5b:5b:af:e0:d4:c4:77:43:4b:ea:58:7a:fb:60:e9:f7:7e:
         a1:9a:2c:46:76:5d:90:66:49:37:45:24:bb:b5:63:6e:c8:8a:
         d9:d8:43:07:be:ac:86:7a:12:2c:68:59:f2:0b:06:18:8e:e0:
         fb:b6:fa:74:9a:0c:3e:16:83:d0:ae:82:c5:bc:be:4e:e4:2e:
         6b:c6:e3:63:d3:61:76:bb:d8:39:aa:ba:08:65:4c:ca:ad:79:
         16:47:4f:36:87:53:95:31:9d:3c:46:03:c4:e3:22:fc:d7:2e:
         be:23:91:98:5e:6b:78:3d:82:17:c1:21:ff:a2:d0:d3:0f:4f:
         fd:6e:07:01:49:87:36:12:f5:f5:9f:16:0b:53:da:80:2e:02:
         b2:d9:b5:77:e3:f8:af:20:7c:96:3d:7f:e0:3e:fd:e6:bc:54:
         2a:c0:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:28:13 2025 by rpki-client