Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File:                     ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier:          by/BN4llyWxrBfGSsbjbqdXCE0Ogag4jMi53DGdQpJI=
Subject key identifier:   97:BB:41:86:93:D0:08:78:55:F4:70:AC:04:86:76:86:B8:16:D9:D5
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer:       /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial:       0196B47D91837915957B366BBF6AE8CB1EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number:          09FA
Signing time:             Fri 09 May 2025 10:00:50 +0000
Manifest this update:     Fri 09 May 2025 10:00:50 +0000
Manifest next update:     Sat 10 May 2025 10:00:50 +0000
Files and hashes:         1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
                          2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: Ca2qlFYZQvOoZLeIKdt+FfLmO6M8Hr6Tj7XHYVxkmTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:7d:91:83:79:15:95:7b:36:6b:bf:6a:e8:cb:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
        Validity
            Not Before: May  9 10:00:50 2025 GMT
            Not After : May 10 10:00:50 2025 GMT
        Subject: CN=97bb418693d0087855f470ac04867686b816d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:71:14:da:8b:4c:cb:e6:ae:25:b2:47:48:
                    9c:bd:9e:47:c1:a2:54:88:f3:ee:fc:60:ea:94:23:
                    cf:fa:a9:55:ea:01:1c:b7:07:73:69:a9:9c:fa:e4:
                    f7:d7:77:d9:2e:98:77:bb:38:28:35:f1:d7:95:1b:
                    5c:18:8b:7d:15:c2:df:c1:49:be:6f:a1:a5:25:5d:
                    3b:ab:69:17:80:0b:4c:5e:d4:60:42:46:44:14:e9:
                    18:23:71:ae:53:ef:a4:17:72:98:3d:ea:72:5a:38:
                    65:32:5b:aa:59:ff:af:d7:3f:aa:26:a1:18:34:1e:
                    ce:85:5a:ca:d6:d7:23:f1:fa:dd:c3:a1:2a:7c:3e:
                    6a:b8:2a:0b:97:6d:44:56:48:a0:15:c9:7c:23:31:
                    3d:cb:90:61:07:fa:39:14:b1:6a:37:ef:96:04:30:
                    7e:a3:61:ca:84:a0:7e:60:94:27:31:00:c2:58:6f:
                    a0:dc:73:9b:6a:7c:f4:aa:79:f5:12:02:59:2a:fe:
                    dc:c9:da:fc:cb:cf:85:b7:f1:0c:64:71:09:21:f7:
                    d4:80:fb:36:91:6c:b7:6a:55:05:5d:6c:85:98:cf:
                    7e:d1:dc:45:25:20:d1:2f:5f:06:36:e7:95:37:b8:
                    bb:b7:d8:bc:53:ec:3e:81:3d:c4:68:6a:6d:ae:23:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BB:41:86:93:D0:08:78:55:F4:70:AC:04:86:76:86:B8:16:D9:D5
            X509v3 Authority Key Identifier:
                keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:66:a3:07:d7:fe:78:46:bd:fe:54:c4:28:00:4f:92:4e:
         97:e5:f0:33:23:a6:a8:d4:8e:5c:32:47:40:92:66:b8:7b:f0:
         e4:e9:0c:a7:82:86:d6:24:b4:c7:ce:7f:8b:09:85:b4:46:bb:
         5a:4f:02:1f:1c:6e:05:cd:d7:eb:78:6f:06:5a:0b:09:22:5c:
         80:86:88:55:3e:8f:0b:b1:b8:2f:bb:b3:cc:05:38:31:c7:0a:
         c0:94:d8:39:88:69:55:5d:e5:05:5d:08:14:42:f4:86:64:21:
         5c:23:04:5c:05:4f:ce:b2:7f:2e:a9:ef:36:9f:03:c4:1d:bc:
         11:9a:bd:30:e4:07:14:37:b6:49:51:46:65:c6:17:aa:c6:4b:
         dd:06:1b:54:da:39:ae:b3:79:89:0f:80:12:ca:e3:74:82:1a:
         17:e0:49:fe:67:cc:4b:d9:5a:51:39:c5:90:bd:fc:36:66:b8:
         58:82:0a:07:a3:37:b3:d8:cb:6e:e8:07:99:54:21:52:21:f2:
         c4:2e:96:48:70:5b:88:af:22:87:a5:5c:df:7d:73:ea:cb:e3:
         df:4e:91:4b:01:3e:8e:43:04:07:a9:fc:07:1c:21:d4:22:a1:
         58:35:11:73:e4:f5:63:6f:65:3b:a8:29:b9:ce:1e:e0:1d:38:
         28:6d:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:51:21 2025 by rpki-client