Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          mexryGrX+L62zys11OSEZXKqqipcRaZp4I/PXbrcw2w=
Subject key identifier:   85:8B:B9:78:F0:17:D0:01:82:46:43:FF:88:22:06:CB:53:C1:55:9A
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       0197B820D2B2057138D6900630C3C1ACB46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:48 +0000
Files and hashes:         1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
                          2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: efBd1hwjs+4bPFJ4KgKc/AW/0siKtCBjFkuGWYo7EmM=)
                          3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
                          4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:d2:b2:05:71:38:d6:90:06:30:c3:c1:ac:b4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: Jun 28 20:00:48 2025 GMT
            Not After : Jun 29 20:00:48 2025 GMT
        Subject: CN=858bb978f017d001824643ff882206cb53c1559a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:4c:9a:a2:c6:2c:43:1e:40:ed:d9:f0:0b:
                    3f:03:5d:a7:63:ee:14:c6:b4:11:a4:e0:88:72:b9:
                    d7:c9:cf:11:16:92:9c:4b:22:2b:5f:03:91:20:f4:
                    a2:d0:6d:35:a8:5c:91:dd:0a:25:23:e7:2f:5c:ef:
                    a8:39:b6:4e:f8:b7:f6:14:ee:c6:39:42:59:59:88:
                    0d:3a:19:c3:2a:68:42:42:f5:51:da:ed:8d:11:4e:
                    bf:91:ce:f6:0b:69:7e:d5:8e:f9:fc:ca:bc:e5:41:
                    9e:fc:f2:97:82:09:20:a1:82:b4:3b:b1:53:f1:c1:
                    93:eb:61:7a:46:ea:25:a4:61:5b:e7:bb:79:ea:95:
                    f7:48:e3:d6:73:e8:33:e4:f6:e7:f0:0b:f3:79:22:
                    41:a4:5b:fe:5f:d6:ba:72:53:52:8c:0a:f5:28:8e:
                    77:6e:b6:a2:3e:a1:87:0a:30:4c:b6:18:18:ec:d5:
                    07:e2:19:d5:45:57:23:19:00:6d:a2:0b:96:a4:c7:
                    21:bd:ee:89:a6:cd:cf:cf:1f:d3:18:6c:eb:c0:30:
                    61:ae:73:b8:74:ce:5b:8b:6b:3e:25:01:1c:3c:a1:
                    1e:3e:a5:68:42:3d:11:09:c0:ba:c0:24:d5:a8:17:
                    83:e2:31:79:35:b4:ac:e8:d2:47:56:1a:b3:2f:e7:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:B9:78:F0:17:D0:01:82:46:43:FF:88:22:06:CB:53:C1:55:9A
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:c7:6f:51:f8:de:41:7f:3c:90:d2:ee:1c:c5:b2:ab:e0:
         9d:03:b0:3e:1f:f6:b6:10:af:01:7c:c4:41:78:9d:01:90:48:
         88:fd:9c:ca:9d:d5:8b:c4:ec:c2:0e:ab:cb:6d:2b:82:29:70:
         48:c8:cf:6b:16:16:e8:49:76:54:2a:c4:a3:0a:3e:9e:30:56:
         cd:2f:43:65:a1:01:53:ab:a7:e4:b3:49:df:66:c9:4c:12:8e:
         30:bd:33:7c:08:58:aa:e1:19:85:fa:59:e9:67:22:bd:26:8a:
         ea:cc:7d:80:12:f3:8e:5d:f9:06:7e:69:76:10:4a:0f:c1:db:
         d2:7e:09:72:85:1a:0f:e6:0f:6b:97:f6:48:5e:3d:f1:0b:57:
         c3:0f:5c:d9:85:51:5a:82:0d:a1:e4:e2:8a:1c:34:4a:ce:38:
         7b:d3:90:26:19:b9:5a:cb:28:f1:ee:fb:b7:a0:b0:f9:f5:a7:
         a0:2d:91:69:c4:31:c3:af:e1:ac:3d:ed:33:7d:f2:5d:56:f6:
         67:fb:17:72:62:31:93:5d:dd:9b:99:b2:6b:c8:c0:27:18:96:
         0e:6d:6e:b8:fd:36:cd:5c:a5:25:47:c8:80:94:ba:d1:c8:ba:
         51:0c:2f:aa:f9:d7:3f:10:dd:70:13:95:0b:9a:27:26:c7:3e:
         53:30:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:06 2025 by rpki-client