Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          vPh7hQJ+RDRm2NB7IdaMjfG/4LHrnbwEXDhmkEs79VE=
Subject key identifier:   29:45:2F:3F:42:A3:57:7A:37:04:FD:EB:2A:6D:7E:AE:73:87:73:BA
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       01976B4FF14693579D8FC72D97AFF1FA2DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          129F
Signing time:             Fri 13 Jun 2025 22:01:30 +0000
Manifest this update:     Fri 13 Jun 2025 22:01:30 +0000
Manifest next update:     Sat 14 Jun 2025 22:01:30 +0000
Files and hashes:         1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
                          2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
                          3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
                          4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
                          5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
                          6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: Li+S64FxgXGlIVSA7yVLPoskG6dFy/C3SSFTnBV/3X4=)
                          7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
                          8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
                          9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:4f:f1:46:93:57:9d:8f:c7:2d:97:af:f1:fa:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jun 13 22:01:30 2025 GMT
            Not After : Jun 14 22:01:30 2025 GMT
        Subject: CN=29452f3f42a3577a3704fdeb2a6d7eae738773ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:35:b0:11:46:73:c8:c5:a8:2b:c4:94:f8:
                    02:20:f3:1c:f8:0c:a8:1b:15:c2:86:f2:e6:66:0e:
                    0e:f7:49:e0:d0:9e:1d:93:d3:e9:68:e0:7f:10:87:
                    1f:19:af:80:93:0f:fe:90:9d:96:10:66:c4:fb:42:
                    6c:44:36:ea:2e:26:43:cd:d7:27:a1:a3:f0:25:d2:
                    ec:f3:a3:e2:49:5a:9b:6b:c4:83:50:b9:00:63:df:
                    c6:52:67:ff:8d:32:db:32:34:85:97:ab:dc:0d:f1:
                    f2:35:9d:e6:f2:76:95:e5:1e:c4:7d:b9:36:d2:d4:
                    77:1f:a4:e6:ba:5f:64:93:ed:87:49:3f:35:ea:8a:
                    ee:09:6b:c4:23:40:10:b7:93:fa:f8:4d:4f:26:22:
                    73:8a:51:9a:b3:6d:ba:9b:8a:df:0c:f0:d6:a4:97:
                    fd:d3:73:b3:58:28:35:2a:9c:94:f4:f7:4e:82:40:
                    28:0d:c7:c5:12:75:22:4c:d5:63:d0:57:8b:f6:87:
                    73:e5:26:2b:a8:d4:eb:ec:fb:3a:36:1e:97:de:1c:
                    d7:41:82:9c:f8:6b:e6:cb:ba:16:10:66:98:64:35:
                    c2:75:b9:f5:88:9d:ae:71:7a:88:35:78:b5:c3:e7:
                    2f:29:52:ce:be:69:b9:85:20:da:04:ab:00:c4:eb:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:2F:3F:42:A3:57:7A:37:04:FD:EB:2A:6D:7E:AE:73:87:73:BA
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:01:dc:81:dd:7b:46:e4:35:dd:ac:c1:0c:28:55:3c:23:
         1e:2d:24:be:b1:b4:4a:f2:ac:98:a9:19:65:05:94:c3:26:67:
         3b:86:0c:57:05:67:c5:db:44:7a:c5:00:7e:69:e0:df:1e:9b:
         dc:7f:9c:0f:93:28:36:e2:ea:be:80:c9:83:f7:01:72:45:13:
         d1:92:98:9c:42:b3:b9:e5:bf:2c:f5:d6:17:98:4b:de:d8:e6:
         2e:61:e8:41:89:17:8c:4f:62:c3:a5:0b:3f:e3:3b:69:0b:dd:
         db:62:7c:99:d8:ad:ee:b7:0a:69:20:99:d7:a5:2f:9a:04:e8:
         79:cc:51:eb:79:8c:79:5d:ec:cb:8d:03:55:12:a0:20:69:bd:
         04:bc:a1:1f:8f:33:92:78:f0:1f:df:b7:5c:ef:c8:be:be:43:
         3d:61:51:41:3d:95:d1:ff:15:db:47:a9:0f:68:0e:28:97:18:
         98:1f:60:f6:e9:30:c6:31:d5:07:15:61:d7:4a:d4:52:e3:25:
         9e:5f:cd:39:3d:9b:6b:ec:68:19:f3:fc:98:8f:2a:de:ec:96:
         82:3e:44:c1:32:96:09:e6:db:3a:21:54:72:4e:f4:69:6d:46:
         f9:ec:de:03:6c:ea:d7:a0:51:5d:00:42:b7:dc:42:5b:05:71:
         bf:3c:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:38:35 2025 by rpki-client