Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          AiKdGoZFEmgOtRsyc8XMDtUlSv4CXLtydmmLPND+D9E=
Subject key identifier:   6B:48:E1:16:19:39:AA:A0:91:82:E5:82:85:61:7A:34:53:55:4D:1D
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       0197499ED21855C72147790F5D502BD527D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          12A6
Signing time:             Sat 07 Jun 2025 09:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:34 +0000
Files and hashes:         1: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (hash: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=)
                          2: 4HzcAwAp_NPUTKmqOpFk6fNukP8.roa (hash: MU7p381OLfrUgZeXEX4ypzzCidzVAcWbQDWLKu/+t9s=)
                          3: QJH1xkQhD8ZqrUTpIxRVC-9iWsg.roa (hash: k8wK85RayUQhoeFyh00R6U1ww1Aske+9ky6WjpJEXWs=)
                          4: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: bQOwhwdMogyGBitWqU6/OwMLMk2/pPm4PI1eDLM8I8Q=)
                          5: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (hash: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:d2:18:55:c7:21:47:79:0f:5d:50:2b:d5:27:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jun  7 09:00:34 2025 GMT
            Not After : Jun  8 09:00:34 2025 GMT
        Subject: CN=6b48e1161939aaa09182e58285617a3453554d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:bf:b4:72:29:c6:0f:86:24:1e:a1:5d:4a:
                    6e:29:f2:47:08:a3:98:be:f9:c7:e8:71:eb:ca:e7:
                    89:d2:b1:6f:b8:1d:d8:54:e4:4e:f4:54:43:03:cc:
                    80:51:34:60:01:c2:52:ed:04:39:99:51:48:e9:89:
                    58:e3:5a:f5:f6:57:4e:5c:e2:e2:b3:23:17:a0:87:
                    be:4a:93:d8:11:26:2d:2e:5d:96:84:e7:ea:00:05:
                    9a:a0:e8:25:b9:a5:1d:27:4d:62:3c:ab:8c:af:c5:
                    c5:3f:e8:c8:ca:68:7a:55:bd:18:fa:ee:fe:f6:bd:
                    63:37:0a:fa:bc:97:e7:9c:f7:d8:99:d3:f2:a0:b3:
                    54:fb:3b:82:ad:ea:21:64:a7:1c:19:f5:4b:17:b9:
                    af:5e:a5:b3:0f:9c:3f:e0:24:02:8a:7f:e8:3a:15:
                    84:00:27:e5:98:67:53:f0:43:83:7a:a2:8e:a2:f9:
                    52:74:2b:73:d1:e8:d4:b2:b9:ca:18:6c:25:8e:cd:
                    33:e2:de:5f:be:49:1f:ab:25:33:fd:98:1c:a3:7f:
                    32:44:4d:a2:6f:65:5e:ff:bd:b1:8b:e2:c3:4b:d7:
                    c4:46:4a:e2:3c:2d:35:9f:8b:d2:ef:5c:76:73:7e:
                    fd:f7:88:9f:ff:90:1d:8a:0b:32:12:30:0e:d0:7a:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:48:E1:16:19:39:AA:A0:91:82:E5:82:85:61:7A:34:53:55:4D:1D
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:50:f6:15:46:28:cd:97:96:4c:49:23:86:2b:53:d5:88:b1:
         89:0c:b1:76:a3:63:a4:70:43:2d:27:53:30:b1:e6:72:f7:62:
         03:a8:ac:b9:4c:90:cb:18:9f:ca:59:40:7f:6a:97:1d:39:11:
         7b:c3:3d:18:da:25:1a:57:04:04:b7:51:31:6d:8c:94:bc:04:
         63:4a:da:ae:81:d0:0e:21:25:06:d1:46:6e:cb:da:f4:67:5c:
         23:ef:e1:78:2b:43:11:0f:a0:6f:48:53:e1:20:a4:b7:5f:b4:
         e3:59:67:31:cb:b1:8e:77:0b:e5:8e:ee:e0:90:a7:a6:0e:a2:
         4e:f0:d0:ab:1c:13:6e:bd:9e:55:76:93:9a:fe:fd:ed:24:78:
         e8:89:0d:9b:db:d5:c3:6e:80:02:58:d0:d3:16:69:df:2f:66:
         f9:98:d5:77:56:7a:df:e6:48:84:d7:80:76:67:85:b0:42:c2:
         22:27:df:a2:61:b6:d7:ea:8f:8d:f5:d1:83:31:d4:b1:27:35:
         22:3c:b9:b1:de:c5:1d:65:78:a6:7c:d2:29:21:2b:2d:77:73:
         60:68:98:66:55:d8:46:27:07:03:b4:bd:cc:e3:f0:b6:c4:6c:
         7d:79:a7:13:9d:f4:fd:b7:69:78:21:5f:f7:e9:e7:ec:cb:75:
         40:08:ef:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJntIYVcchR3kPXVAr1SfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM5NzFhMzJjMDY5MmM0ZTM0MmU5MTE3OTA2NjI0NzBj
ZjMxYjIwHhcNMjUwNjA3MDkwMDM0WhcNMjUwNjA4MDkwMDM0WjAzMTEwLwYDVQQD
Eyg2YjQ4ZTExNjE5MzlhYWEwOTE4MmU1ODI4NTYxN2EzNDUzNTU0ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWi/tHIpxg+GJB6hXUpuKfJHCKOY
vvnH6HHryueJ0rFvuB3YVORO9FRDA8yAUTRgAcJS7QQ5mVFI6YlY41r19ldOXOLi
syMXoIe+SpPYESYtLl2WhOfqAAWaoOgluaUdJ01iPKuMr8XFP+jIymh6Vb0Y+u7+
9r1jNwr6vJfnnPfYmdPyoLNU+zuCreohZKccGfVLF7mvXqWzD5w/4CQCin/oOhWE
ACflmGdT8EODeqKOovlSdCtz0ejUsrnKGGwljs0z4t5fvkkfqyUz/Zgco38yRE2i
b2Ve/72xi+LDS9fERkriPC01n4vS71x2c37994if/5AdigsyEjAO0HriiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtI4RYZOaqgkYLlgoVhejRTVU0dMB8GA1UdIwQY
MBaAFL/jlxoywGksTjQukReQZiRwzzGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUt
YzRkY2M3ZjZiN2RmLzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUtYzRkY2M3ZjZiN2Rm
LzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1D2FUYo
zZeWTEkjhitT1YixiQyxdqNjpHBDLSdTMLHmcvdiA6isuUyQyxifyllAf2qXHTkR
e8M9GNolGlcEBLdRMW2MlLwEY0raroHQDiElBtFGbsva9GdcI+/heCtDEQ+gb0hT
4SCkt1+041lnMcuxjncL5Y7u4JCnpg6iTvDQqxwTbr2eVXaTmv797SR46IkNm9vV
w26AAljQ0xZp3y9m+ZjVd1Z63+ZIhNeAdmeFsELCIiffomG21+qPjfXRgzHUsSc1
Ijy5sd7FHWV4pnzSKSErLXdzYGiYZlXYRicHA7S9zOPwtsRsfXmnE530/bdpeCFf
9+nn7Mt1QAjv7A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:59 2025 by rpki-client