Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File:                     OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier:          g9Wox1ND4cYO/6n/ib9f8CXyBeBMqymrfE8sx57dynU=
Subject key identifier:   F4:10:D2:F0:17:F2:67:A0:B9:19:16:9B:20:00:23:84:7D:B9:47:53
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer:       /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial:       0197B70EF8CFA715CC34A17B829E97B76CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number:          0DA4
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: NeV7+69YHapwUj7fsFD576os99lpt0Q8laABFFCb0oY=)
                          2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:f8:cf:a7:15:cc:34:a1:7b:82:9e:97:b7:6c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=f410d2f017f267a0b919169b200023847db94753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:55:ef:6e:95:57:e5:3a:80:10:45:59:58:
                    45:c3:a7:11:6e:bc:31:69:a8:cd:4c:60:5c:47:73:
                    15:e7:9d:f8:3c:1a:7f:45:56:28:cb:19:88:06:4a:
                    97:21:e5:32:91:77:77:26:8b:98:1f:54:06:e3:6a:
                    f6:44:0e:96:cf:e1:77:f9:95:52:44:ce:80:71:9f:
                    36:0f:ba:ac:6e:36:36:1a:05:34:98:25:27:f5:10:
                    44:24:1e:aa:16:dc:a5:cf:30:6e:38:7f:e6:b3:14:
                    cf:19:1b:13:53:b3:8e:ff:e6:f3:06:65:8c:ec:a4:
                    3e:3a:4e:51:0b:5b:54:15:0f:31:16:b7:c6:f0:47:
                    c9:d8:f4:d6:b5:50:07:95:d1:4c:3b:60:28:ea:54:
                    3d:dc:e7:81:e5:cc:16:04:48:89:1f:c9:1d:4d:d6:
                    93:13:7f:85:52:9b:15:eb:90:65:7a:65:45:62:26:
                    e2:e8:99:ab:73:57:97:bb:ee:39:14:46:f2:44:4f:
                    d7:29:c1:09:e7:ed:0d:b9:69:a7:89:96:87:20:43:
                    1c:3f:3b:55:27:71:e7:96:9a:4e:d1:2c:57:16:bb:
                    a2:11:5c:17:71:45:74:e4:99:28:f1:f4:89:d0:ec:
                    2d:fa:95:42:93:ff:f1:de:57:16:63:e1:5e:e6:42:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:D2:F0:17:F2:67:A0:B9:19:16:9B:20:00:23:84:7D:B9:47:53
            X509v3 Authority Key Identifier:
                keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:3a:71:3f:6d:f2:eb:67:b7:74:ec:31:11:e2:8a:35:08:
         f0:ad:4a:50:0b:e6:b9:df:37:8f:d3:73:c8:c9:a5:e3:f7:4a:
         ad:8a:d8:3d:74:ba:1c:88:5d:79:0d:69:7d:4f:8b:6c:9f:8c:
         64:b5:0a:da:4c:6a:5d:19:ac:26:e1:31:88:5a:f8:a9:73:85:
         76:32:53:9b:5e:a6:87:0f:71:19:bb:d1:9c:43:b7:31:67:59:
         a1:fe:5d:6a:e2:69:f6:e4:99:3f:82:ef:e1:0b:70:ad:f9:c4:
         73:6a:e4:3a:9e:18:b5:91:a0:83:70:eb:10:04:a9:34:63:94:
         96:4b:31:fa:3a:4e:15:a2:92:7d:bc:c2:98:b0:ab:79:d0:e6:
         05:47:6d:15:92:e5:d7:72:8e:86:33:24:4a:31:07:79:bb:22:
         4e:f8:37:01:63:dc:6e:59:99:32:0a:6a:59:de:cc:54:59:1d:
         25:16:87:92:e9:4a:5e:ec:a6:3c:2d:63:a9:05:56:a3:84:37:
         26:1b:dd:fa:5e:2f:8c:4d:c6:db:f7:5f:2c:9f:c0:be:c4:f6:
         75:d4:77:62:70:af:2f:93:bd:8e:46:a9:f8:3d:db:64:17:25:
         30:54:4d:13:32:f1:8e:4a:44:e6:40:35:c8:20:f0:85:ed:e1:
         58:32:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:16 2025 by rpki-client