Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File:                     OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier:          kgBJAOOjBYxhNuE8fP8QD/ROw8xsLqoeCFI4i6R7Zyw=
Subject key identifier:   93:7E:66:01:4F:E1:AE:3F:2E:7F:C3:AA:4D:B0:55:D1:E1:4C:B2:52
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer:       /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial:       01974C69126AD2E1BD581A28D03598B80011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number:          147C
Signing time:             Sat 07 Jun 2025 22:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:43 +0000
Files and hashes:         1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=)
                          2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=)
                          3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=)
                          4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=)
                          5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: RZWcs4boSWzafCaSmw3aAm7758xke4WnpZ8dDMwNF5w=)
                          6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=)
                          7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=)
                          8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=)
                          9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=)
                          10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:12:6a:d2:e1:bd:58:1a:28:d0:35:98:b8:00:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
        Validity
            Not Before: Jun  7 22:00:43 2025 GMT
            Not After : Jun  8 22:00:43 2025 GMT
        Subject: CN=937e66014fe1ae3f2e7fc3aa4db055d1e14cb252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:1e:db:9e:e7:d7:97:a2:e5:fc:f6:25:c5:
                    b3:ad:9d:e7:c7:54:71:91:9b:f7:e6:90:d1:59:78:
                    8a:ca:41:fc:95:d2:c8:c9:2b:fb:ae:8b:30:7f:e4:
                    08:74:7c:57:af:0f:8c:ba:ce:c7:59:23:86:b5:1f:
                    75:5e:c2:27:04:2d:74:bf:30:c8:ba:6e:81:6f:ab:
                    4f:c1:b5:37:0f:5b:fd:52:79:05:a7:24:f9:6e:9a:
                    3f:ed:6e:6c:50:30:1a:3d:15:ed:21:c7:7d:75:c6:
                    2c:2d:aa:c1:31:8c:06:30:fa:d5:3d:d9:50:f2:ec:
                    f7:cc:53:e1:65:94:2b:83:16:ad:36:7a:ed:ff:24:
                    5d:6e:c0:e9:88:9b:dc:38:b3:5a:73:23:5b:20:d3:
                    e9:ca:72:2b:e3:ea:8d:4d:4f:14:ff:83:42:28:dc:
                    c5:f6:af:85:f2:9f:be:5b:36:28:82:d0:45:26:e5:
                    92:e3:92:79:ab:14:21:ff:6e:8b:da:9a:b6:8e:d1:
                    67:f4:70:01:38:46:90:ad:7b:6e:4d:c7:c5:06:68:
                    96:50:58:f2:ad:dc:84:f5:03:3e:c2:c0:77:8a:a2:
                    52:9c:f8:a5:96:bd:f9:9f:08:5e:73:8b:9f:58:36:
                    29:de:2c:7e:d3:68:9f:ff:64:d9:49:a4:1a:44:79:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:66:01:4F:E1:AE:3F:2E:7F:C3:AA:4D:B0:55:D1:E1:4C:B2:52
            X509v3 Authority Key Identifier:
                keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:ff:70:2c:3f:f2:b7:b9:c0:3e:79:4e:f1:e8:01:c5:a0:
         db:81:ea:5a:68:3a:ec:ba:da:34:29:da:76:f1:6e:49:e6:42:
         15:5f:27:cb:53:8d:bb:b8:17:19:c5:4b:1a:3f:97:6e:36:1a:
         15:62:73:40:45:43:00:36:a7:b6:cc:c6:64:a2:a4:8c:38:7c:
         fa:da:46:b6:d7:0b:63:b3:2c:ed:4d:8c:da:08:72:38:95:0d:
         0f:ab:c7:b0:87:81:b8:8a:55:06:99:32:2f:2c:07:3e:6a:ab:
         57:52:99:72:2c:ab:80:fb:bf:e0:4d:7c:1a:cf:a4:02:f5:59:
         0b:db:aa:89:ba:91:23:46:6a:3c:6f:64:02:88:c4:a2:f1:f8:
         a2:5b:2c:09:48:7b:47:f2:6c:7b:ec:80:c4:45:7e:aa:e1:86:
         59:50:0a:15:e0:58:41:88:4a:b7:61:aa:97:4c:b2:e1:f6:3b:
         c2:36:8f:ce:a5:4c:82:9b:0d:46:d4:de:f9:bb:a6:2b:ac:9c:
         cc:c4:1b:25:e1:20:b0:9a:b7:0e:4b:f1:8e:5a:91:59:63:bd:
         b5:6e:80:87:be:5f:fc:36:ee:2f:cb:ed:d6:ae:a6:05:dc:f3:
         47:42:10:d3:0c:33:8c:f6:af:6b:ef:d4:bd:f4:f3:50:5d:ce:
         8a:84:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:35 2025 by rpki-client