Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File:                     oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier:          5+JJCnP5qclZbzJb0Bx50d0ItHu4zNfx1vUok4lcIvw=
Subject key identifier:   63:E5:E7:56:9F:9C:3F:1B:8F:AC:00:BE:0A:58:85:26:F3:97:98:96
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer:       /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial:       0197469E32A940A2047F2D475256302F344B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number:          1320
Signing time:             Fri 06 Jun 2025 19:01:02 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:02 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:02 +0000
Files and hashes:         1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: dr5NmpQhaefZpuCFlwHCUwbhwFu6e9McFqRgCxjH5RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:32:a9:40:a2:04:7f:2d:47:52:56:30:2f:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
        Validity
            Not Before: Jun  6 19:01:02 2025 GMT
            Not After : Jun  7 19:01:02 2025 GMT
        Subject: CN=63e5e7569f9c3f1b8fac00be0a588526f3979896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:52:9f:a5:ef:a5:fc:f7:4e:e7:f3:7e:fa:
                    89:06:76:c6:f1:f9:e2:5a:e3:52:a8:4d:51:65:dc:
                    33:03:5d:5d:3a:9f:50:8a:f9:bf:a8:f6:61:b7:82:
                    5a:e4:20:9e:d1:73:16:62:20:a3:f0:96:29:68:1c:
                    0e:e6:4d:12:e9:84:d9:f1:36:19:92:b5:29:84:70:
                    8f:c5:ae:a0:6e:e8:8b:ea:ed:1f:8b:2b:bd:c8:3e:
                    17:ba:6d:10:9e:d5:36:15:af:ba:98:9b:61:2e:9f:
                    74:12:51:48:1c:0b:48:4e:34:3a:9a:7c:0c:53:7e:
                    ae:d3:b7:62:6f:1d:82:58:8f:9c:73:fe:c4:f8:27:
                    3d:9a:73:31:9d:0e:c0:72:50:36:2e:80:0c:e4:f5:
                    60:8f:57:a8:02:08:a3:d7:36:d1:59:b8:67:ba:5c:
                    ac:06:d5:2a:9b:a0:f6:6c:da:4b:f6:a9:fc:da:50:
                    49:70:2f:4a:4d:7d:d1:e2:d7:0a:de:7a:d3:e3:f2:
                    fa:5d:0c:17:db:ba:75:a5:52:e8:d7:86:fd:79:31:
                    c2:79:f0:be:2a:7e:be:8d:68:e0:a9:b7:30:19:65:
                    c1:b7:25:5c:74:6b:78:6a:26:e6:67:ac:dc:33:64:
                    53:61:09:08:c0:e8:8e:60:b3:d2:89:e8:02:95:82:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E5:E7:56:9F:9C:3F:1B:8F:AC:00:BE:0A:58:85:26:F3:97:98:96
            X509v3 Authority Key Identifier:
                keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:68:1b:60:d5:9a:60:2b:90:67:cc:cf:20:56:a4:c0:b3:
         c0:ed:74:7f:f6:48:1a:5f:0f:97:fd:9f:4a:56:3c:83:7e:8a:
         55:25:a0:3a:ca:c4:10:ed:d0:68:6e:13:37:9b:32:1c:56:65:
         a5:03:7e:b0:92:74:34:b5:89:96:38:70:55:ce:24:58:b9:ce:
         ac:6d:ad:07:3f:fd:52:8a:4d:0f:4e:39:88:a6:90:12:79:97:
         8f:f7:e8:63:ba:25:bc:d1:83:ed:74:37:a3:00:86:f8:dd:0d:
         cc:48:91:1c:8a:99:f6:dc:10:c0:76:39:e3:d7:f3:3d:15:16:
         03:18:ff:72:70:14:74:9d:69:d9:82:db:43:ac:52:a0:a0:b5:
         9d:dc:4a:ff:d9:62:f7:02:7f:77:3f:3b:86:1d:eb:17:1f:ba:
         69:37:eb:7f:9d:03:4e:61:13:1f:37:57:4f:ee:d4:1b:1b:cc:
         04:ab:d4:5a:73:d8:2e:65:21:7b:d3:6f:4c:3f:89:2e:9f:f3:
         a1:8a:73:f9:86:67:c5:10:68:1d:bc:66:87:bc:b8:7d:6c:80:
         8f:b8:65:a0:b7:0a:23:85:27:46:47:0e:b7:37:82:7d:69:d4:
         9a:dd:bd:4c:f2:e5:9d:ee:54:24:05:f2:df:a5:4e:b1:5d:e4:
         72:e2:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:18 2025 by rpki-client