Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File:                     oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier:          fXPt4+i2N8TPz4N0NZCakGA/sEmkw+bt+jbyx9ZkeSg=
Subject key identifier:   68:27:0D:E2:33:40:86:01:90:81:12:CC:34:38:89:06:31:A2:B2:64
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer:       /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial:       0196A98BA58EB7AEB5EF41C1878F0B51D13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number:          152A
Signing time:             Wed 07 May 2025 07:00:23 +0000
Manifest this update:     Wed 07 May 2025 07:00:23 +0000
Manifest next update:     Thu 08 May 2025 07:00:23 +0000
Files and hashes:         1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
                          2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: hpJ2CDQJxyQ7/zr1JFox4NUUHO8Z0xOgziFf1+R1dcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:8b:a5:8e:b7:ae:b5:ef:41:c1:87:8f:0b:51:d1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
        Validity
            Not Before: May  7 07:00:23 2025 GMT
            Not After : May  8 07:00:23 2025 GMT
        Subject: CN=68270de233408601908112cc3438890631a2b264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:d9:4f:e8:65:6d:76:af:ac:b3:af:ca:12:
                    56:18:14:e8:3d:07:3a:d3:57:47:39:f2:c8:45:9b:
                    a8:2a:e3:3b:72:94:7c:ff:84:50:ad:03:94:d2:f9:
                    72:cb:d7:ad:55:77:54:d0:b6:ea:32:f1:d5:c5:a1:
                    43:0b:61:89:ae:b6:b6:00:c4:e8:a5:3c:ad:89:1c:
                    29:20:4c:5e:ce:60:d2:57:91:39:d6:0b:aa:7b:bd:
                    14:03:e2:1d:5e:29:e0:78:4b:b8:e6:d9:c7:20:b8:
                    a6:41:5f:39:44:3f:b3:e8:cd:c0:9d:a7:d4:2a:80:
                    78:13:d1:66:4f:34:b9:10:e4:ab:d7:a1:e7:b8:2f:
                    c6:7c:d7:00:56:d0:f7:f6:d3:38:f6:c3:d6:b6:d4:
                    54:5f:0b:02:9a:fa:5a:e1:6d:57:f0:17:e0:f0:84:
                    6d:e2:9a:4f:a5:c6:a0:7d:4b:cb:cd:4a:6a:e8:a5:
                    26:bf:95:54:ac:4d:0b:8b:0a:32:1d:2c:1b:85:3c:
                    32:85:8b:33:e3:1e:d3:e9:ba:7a:69:41:38:65:84:
                    4c:84:2f:0d:1c:86:61:d1:03:7f:a4:31:b7:90:78:
                    ee:86:05:ba:48:44:0d:2d:7d:70:b9:0f:a0:d6:0a:
                    29:0d:54:f4:a8:b9:96:54:95:84:18:ed:d9:d2:9d:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:0D:E2:33:40:86:01:90:81:12:CC:34:38:89:06:31:A2:B2:64
            X509v3 Authority Key Identifier:
                keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:64:8e:5b:5c:24:f9:e5:17:36:11:eb:26:c4:86:48:70:a9:
         83:bc:80:96:3c:3d:ad:63:61:9e:53:93:8a:22:82:89:a5:44:
         67:c0:b5:ce:61:1f:f0:33:f4:6c:9d:26:b4:a5:9d:49:b1:e6:
         06:ab:c2:bc:43:64:8a:aa:48:9e:2d:75:bb:04:1c:df:0d:16:
         af:05:74:c1:fe:c1:b1:21:57:9d:69:96:c5:e5:95:14:fc:18:
         95:cf:72:2e:c2:21:87:04:0e:80:87:3a:f9:8d:c4:c2:d3:a2:
         e9:6a:54:a2:b4:0d:47:cd:ac:73:f8:67:56:c8:ae:89:f2:97:
         7f:51:37:ba:59:12:cf:d5:bc:71:fb:08:4b:ba:80:bb:35:88:
         9e:c0:2f:a6:a9:7b:42:bb:1f:47:da:5f:7c:54:de:f0:a5:c4:
         7f:c4:a9:ae:13:d8:b0:16:a6:82:5c:2f:0b:a8:e1:25:bc:ff:
         bb:3d:96:3b:cb:1c:bd:45:0a:2d:53:7b:8c:6d:cc:65:63:08:
         6b:bc:85:b3:2d:a5:1e:e4:4f:17:6b:af:3e:3e:8f:69:c4:93:
         2e:e1:77:5c:fa:e6:7b:e6:be:ea:3f:91:95:78:24:f1:38:8e:
         9b:7c:23:2f:1a:c5:2e:e3:7b:a5:8a:14:be:ab:ee:d2:fb:36:
         10:04:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:28 2025 by rpki-client