Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          3dW4cvjqq1k8vJWrZQGUH7sFVm1lZ/aw3vsH9IouVfA=
Subject key identifier:   2A:80:87:2F:14:0A:6B:1E:E8:99:9F:5D:3D:D9:2B:A5:BD:82:51:EC
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       0196BD128922F9414D21AE8DF0891F576A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          1539
Signing time:             Sun 11 May 2025 02:00:30 +0000
Manifest this update:     Sun 11 May 2025 02:00:30 +0000
Manifest next update:     Mon 12 May 2025 02:00:30 +0000
Files and hashes:         1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
                          2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: zQbvRKJ9V+XP14kW4gFVpj12GpM+ZZ+QoMR1htwbY4w=)
                          3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
                          4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:89:22:f9:41:4d:21:ae:8d:f0:89:1f:57:6a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: May 11 02:00:30 2025 GMT
            Not After : May 12 02:00:30 2025 GMT
        Subject: CN=2a80872f140a6b1ee8999f5d3dd92ba5bd8251ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:63:dd:33:14:61:1d:1f:09:63:3d:6d:8a:
                    14:40:9a:ef:17:6a:71:d6:f1:12:65:df:78:66:d5:
                    2c:ec:9c:07:d6:a8:4d:26:70:bb:5e:1a:43:df:1e:
                    35:80:7f:88:46:da:c3:5a:cb:09:75:8f:f3:a2:8e:
                    40:8a:66:2e:8f:17:b4:33:80:51:b9:89:56:a7:0e:
                    0c:67:72:66:60:ff:4d:1c:73:9a:28:0a:14:db:b1:
                    f2:dd:47:58:96:4a:87:e3:86:8b:6e:37:f2:7b:50:
                    50:84:bd:0c:4a:39:69:d5:b0:f2:1b:91:44:ff:dc:
                    ac:63:82:b5:44:d5:26:c0:42:bd:1c:54:6a:d3:23:
                    ad:d1:67:c4:bb:04:74:6a:32:2a:26:c2:c3:52:09:
                    e2:e8:aa:60:1e:19:f1:50:90:6e:93:72:58:cb:96:
                    02:3a:6f:11:a5:94:3e:a4:93:27:17:a9:7b:3b:cd:
                    f7:5b:7c:7c:70:99:71:9e:aa:b0:cb:84:35:8c:de:
                    8d:9d:55:b3:9a:a7:30:fb:a3:08:91:00:ef:ec:45:
                    37:b4:43:0e:d5:22:96:8e:ae:c7:78:16:61:3e:a2:
                    46:9c:21:57:67:b9:64:f9:1e:15:2e:d5:c1:60:84:
                    a2:e8:1e:f6:4b:ef:8b:43:24:4f:e3:20:9e:7e:12:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:87:2F:14:0A:6B:1E:E8:99:9F:5D:3D:D9:2B:A5:BD:82:51:EC
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:fc:bc:52:2e:c4:5e:54:37:91:38:ad:db:e6:51:a0:b6:
         af:b3:4e:0f:d6:a0:88:fc:2d:ac:66:c5:67:ca:c9:cc:8d:50:
         6f:93:16:14:45:51:ee:46:f5:f7:eb:54:7e:7e:16:99:3a:fb:
         e8:e6:84:52:1b:73:60:d0:34:9b:10:a2:21:f4:55:92:f2:61:
         d1:ec:ea:a0:e8:9b:90:e9:7b:53:d7:75:91:c7:1b:17:f6:0f:
         82:e9:63:0c:d7:1d:ac:16:a4:45:6e:6c:62:5e:36:0d:9d:71:
         d0:a2:69:a0:55:89:3f:bd:fb:b9:a5:ff:a4:eb:01:5f:c3:fb:
         e0:ed:83:87:ce:3e:a4:0f:54:b1:12:4c:5c:2f:96:b7:ea:50:
         7b:d9:0e:d3:3b:31:fd:eb:b2:40:61:f1:36:d6:26:e3:5e:ea:
         95:c0:55:28:6d:ac:f1:38:b6:04:50:37:15:b8:46:8d:41:ca:
         bb:83:c3:d3:fd:db:1d:e7:4b:0e:11:32:de:f4:b5:79:80:e7:
         9f:1a:48:56:f8:8a:17:6c:86:10:3b:94:23:40:29:9d:fe:73:
         f1:8c:f5:d0:b8:0b:a9:87:b9:57:dc:dc:bb:de:e7:37:9a:b9:
         97:a6:26:26:c1:1d:43:4a:70:e3:a5:e1:f3:90:cb:e4:70:10:
         4d:7d:d5:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9Eoki+UFNIa6N8IkfV2oyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjUwNTExMDIwMDMwWhcNMjUwNTEyMDIwMDMwWjAzMTEwLwYDVQQD
EygyYTgwODcyZjE0MGE2YjFlZTg5OTlmNWQzZGQ5MmJhNWJkODI1MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvZj3TMUYR0fCWM9bYoUQJrvF2px
1vESZd94ZtUs7JwH1qhNJnC7XhpD3x41gH+IRtrDWssJdY/zoo5AimYujxe0M4BR
uYlWpw4MZ3JmYP9NHHOaKAoU27Hy3UdYlkqH44aLbjfye1BQhL0MSjlp1bDyG5FE
/9ysY4K1RNUmwEK9HFRq0yOt0WfEuwR0ajIqJsLDUgni6KpgHhnxUJBuk3JYy5YC
Om8RpZQ+pJMnF6l7O833W3x8cJlxnqqwy4Q1jN6NnVWzmqcw+6MIkQDv7EU3tEMO
1SKWjq7HeBZhPqJGnCFXZ7lk+R4VLtXBYISi6B72S++LQyRP4yCefhIi+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqAhy8UCmse6JmfXT3ZK6W9glHsMB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHof8vFIu
xF5UN5E4rdvmUaC2r7NOD9agiPwtrGbFZ8rJzI1Qb5MWFEVR7kb19+tUfn4WmTr7
6OaEUhtzYNA0mxCiIfRVkvJh0ezqoOibkOl7U9d1kccbF/YPguljDNcdrBakRW5s
Yl42DZ1x0KJpoFWJP737uaX/pOsBX8P74O2Dh84+pA9UsRJMXC+Wt+pQe9kO0zsx
/euyQGHxNtYm417qlcBVKG2s8Ti2BFA3FbhGjUHKu4PD0/3bHedLDhEy3vS1eYDn
nxpIVviKF2yGEDuUI0Apnf5z8Yz10LgLqYe5V9zcu97nN5q5l6YmJsEdQ0pw46Xh
85DL5HAQTX3V5A==
-----END CERTIFICATE-----
Generated at Sun May 11 08:48:56 2025 by rpki-client