Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File:                     oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier:          LJJiri0AI3DpL+cWfa5dpsf9SVDt2QSxfXr1jsTlyEY=
Subject key identifier:   05:99:C4:A4:7A:FD:32:5B:77:E7:36:BA:04:3D:D8:D7:4B:21:DE:1D
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       01974AE8A11EA9928AF5A33767F2AFE7A97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number:          026D
Signing time:             Sat 07 Jun 2025 15:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:48 +0000
Files and hashes:         1: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: PHv67+Bo1+2haIGvPezStiLArFa1b5Yvt2LmfGVelrI=)
                          2: vlLT27bJ2fd88umItQkeTf_ulKk.roa (hash: g1ccNVtlB2xSMwJbNSiNXXcODVJm6ozAEqNANBxK8LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:a1:1e:a9:92:8a:f5:a3:37:67:f2:af:e7:a9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Jun  7 15:00:48 2025 GMT
            Not After : Jun  8 15:00:48 2025 GMT
        Subject: CN=0599c4a47afd325b77e736ba043dd8d74b21de1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:32:9c:5f:75:37:51:08:a1:f1:1d:12:10:
                    52:92:29:12:8f:dc:04:1a:0c:bb:e1:d7:7f:09:b5:
                    fa:01:df:5a:01:2f:79:b1:58:3a:86:a9:62:db:53:
                    2e:64:4f:ba:93:03:54:ee:c9:75:ec:8e:63:77:72:
                    b5:27:d1:8e:ee:32:94:92:29:b8:c9:92:de:31:c2:
                    b0:6b:56:ee:e6:9e:76:b1:48:ea:7b:1b:15:6c:fd:
                    b5:67:94:40:65:44:28:6b:c5:14:8f:71:c9:8d:7b:
                    e6:63:c5:13:d1:b4:c4:f8:a2:03:c0:ed:63:6d:8c:
                    f1:c2:4a:67:53:eb:5a:3a:18:82:d7:07:7a:23:ac:
                    9a:ed:c1:5a:aa:ac:a7:f1:79:77:dd:2d:7d:ce:c7:
                    fa:4b:99:2e:5e:18:1b:ee:e3:fd:be:34:ae:9e:b8:
                    1e:0f:5c:7a:cf:7e:4a:08:cd:76:fd:58:16:fd:ed:
                    b9:8d:97:5d:ce:3b:fa:32:64:93:d4:88:62:b9:2c:
                    90:6d:38:82:0c:99:28:37:d9:ca:8e:7e:39:4f:e2:
                    40:b1:33:d4:58:49:cb:3f:1c:74:f4:cb:87:5c:90:
                    ac:d9:2b:d0:eb:8e:9b:de:bd:c8:7d:d0:ee:b2:5e:
                    e3:4b:ee:2a:d2:86:82:92:fc:7e:de:55:08:60:8d:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:C4:A4:7A:FD:32:5B:77:E7:36:BA:04:3D:D8:D7:4B:21:DE:1D
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:19:c1:26:7c:6b:22:26:66:57:af:2b:83:74:71:fa:79:
         ea:45:95:d9:cd:98:b4:2f:14:60:49:a1:68:5f:7f:81:99:3f:
         32:f1:69:45:9a:05:40:37:ff:27:6e:8a:71:7c:0c:f4:4b:01:
         0e:2a:89:a2:09:1f:71:85:80:03:3f:0c:61:2d:56:d5:27:53:
         5d:67:1a:7c:a9:a1:bc:7c:a9:53:82:c8:2a:3c:d4:cd:2a:c4:
         21:24:10:de:8b:bc:6c:a8:f5:6d:7b:53:81:87:38:60:7f:de:
         eb:2e:74:db:76:86:b5:08:cd:62:31:fc:a9:1e:96:50:3f:b2:
         8e:9e:b6:16:5c:93:b0:03:42:e3:c1:c0:1e:b8:4d:0d:b6:51:
         47:15:04:a8:27:2e:25:1f:45:d7:cc:23:c3:24:ee:1e:40:5b:
         fd:13:c4:5a:6a:55:f7:ca:29:cc:b0:45:b7:73:7b:a3:c5:ec:
         c8:35:79:15:6b:fd:15:4e:23:33:be:98:d0:44:a7:af:2c:5f:
         42:b4:fe:9f:11:e1:de:5f:35:90:90:83:10:00:27:cb:3a:c0:
         a7:36:51:e0:c4:b2:62:60:ae:b4:68:c2:2f:b7:ae:3d:f2:cd:
         9a:3b:8e:8f:39:4d:5a:16:21:88:7d:17:66:d6:25:99:ec:f4:
         01:c4:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:07 2025 by rpki-client