Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          KUMSxcSR84i80mgXowhl5B0ozB9RSMBZBtvsDoTSifw=
Subject key identifier:   6B:D6:77:1D:9A:F0:6F:12:A0:6A:21:E9:A5:38:EC:43:7E:86:2C:15
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       0197B745A0DBAE352082B172DC0EDE95CF09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          0C2F
Signing time:             Sat 28 Jun 2025 16:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:22 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: FthISkFQA5CPSKoaje4Vo60Xn5Aw+rYuvYeJaHRog7c=)
                          2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a0:db:ae:35:20:82:b1:72:dc:0e:de:95:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Jun 28 16:01:22 2025 GMT
            Not After : Jun 29 16:01:22 2025 GMT
        Subject: CN=6bd6771d9af06f12a06a21e9a538ec437e862c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:a8:9d:e4:87:ce:2c:1a:f4:f6:14:6c:20:
                    19:aa:32:8f:5b:83:2a:75:1e:ba:82:d6:db:5b:93:
                    e3:d6:fe:53:01:dc:3c:05:4e:75:cc:05:f0:1b:77:
                    14:33:99:82:3b:0e:6b:a9:9f:a7:20:1d:07:7c:20:
                    5f:02:aa:11:e7:cd:91:2e:0f:a2:e9:b7:46:ee:a8:
                    3b:80:57:89:13:36:f0:b9:bb:ea:01:ee:2b:a4:06:
                    b6:61:04:0b:8b:9d:07:b4:7c:5e:f4:5a:86:d7:12:
                    ba:a9:b1:f6:64:fb:d0:b4:96:dc:22:e3:dc:b5:1d:
                    0d:a3:51:5a:67:65:ee:bc:1b:9b:95:05:27:8d:64:
                    77:98:b9:9d:17:1a:57:51:68:90:16:38:60:19:24:
                    7c:5d:f4:28:ee:0b:0a:67:74:61:08:62:2b:e6:9c:
                    b2:2a:9e:62:4d:c6:cc:43:b4:e7:c2:f1:6b:02:98:
                    a8:4e:d6:77:d3:c8:e9:0c:33:78:17:f6:bc:e9:aa:
                    b2:39:ef:8b:b8:c9:e8:3b:8c:7e:d3:64:31:f2:c0:
                    37:78:62:8b:c6:9d:dd:8b:65:2d:29:2c:89:b7:31:
                    d1:97:ea:0c:ea:17:a1:3a:44:5c:4b:c6:2d:13:66:
                    c4:05:d5:25:c6:0c:aa:05:dc:ab:83:d5:0f:65:82:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:77:1D:9A:F0:6F:12:A0:6A:21:E9:A5:38:EC:43:7E:86:2C:15
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a4:65:58:7a:51:75:ac:0e:0e:eb:e4:af:33:f5:39:a0:d0:
         d5:d0:cb:5c:3f:d3:6f:03:cd:a5:2f:87:3a:b2:57:a9:cb:15:
         3b:7a:4b:d0:13:93:5e:d2:a1:fa:e9:cc:69:49:c5:27:7b:95:
         79:fe:41:26:08:ed:0b:f9:46:bc:62:62:bb:b8:78:c9:cf:68:
         f5:8f:7c:a1:22:81:1e:8e:5f:70:4e:69:09:e2:34:6b:e1:ef:
         36:39:b6:5e:fd:7e:04:06:a1:8d:ce:a0:0e:45:a8:62:a9:26:
         5c:8e:3d:79:09:3a:7d:57:2e:e8:20:23:f1:9b:f5:47:81:10:
         91:e3:7d:f2:91:93:c2:96:b0:21:c4:9f:83:29:43:29:11:34:
         de:6d:a2:51:01:1f:57:ef:28:7a:9e:bc:3a:f0:09:8f:a2:0c:
         6a:aa:56:6a:6a:20:54:e0:2e:66:fb:9f:b1:56:d0:f1:ea:bd:
         4e:47:5e:0b:c3:8f:5d:cd:fd:c2:00:45:67:42:fc:9e:11:21:
         dc:34:19:51:ca:09:c3:80:7a:91:aa:9e:93:2d:b1:92:e4:3e:
         ba:22:78:8e:e7:6f:50:e5:0d:f3:4c:d0:1e:cc:54:17:96:9e:
         a3:2d:63:d1:56:9e:dd:31:24:9d:91:9e:8a:62:db:41:3b:c5:
         f7:18:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:33 2025 by rpki-client