Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File:                     oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier:          CwLordvPIhCrv+nDRaxg4jkl6t5+u+Prv4jLR67iFC8=
Subject key identifier:   95:A8:88:03:71:A1:02:BE:11:FB:1F:69:52:D8:A4:FF:89:2A:42:B1
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer:       /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial:       0196CFF4B94C79CCCFF51743D3CA27B13573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number:          0F39
Signing time:             Wed 14 May 2025 18:00:43 +0000
Manifest this update:     Wed 14 May 2025 18:00:43 +0000
Manifest next update:     Thu 15 May 2025 18:00:43 +0000
Files and hashes:         1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: dx8Y5IADrfi5MrSBQPrAzdlH6VLsLFxmAao4qNkU3bA=)
                          2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:f4:b9:4c:79:cc:cf:f5:17:43:d3:ca:27:b1:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
        Validity
            Not Before: May 14 18:00:43 2025 GMT
            Not After : May 15 18:00:43 2025 GMT
        Subject: CN=95a8880371a102be11fb1f6952d8a4ff892a42b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:1e:07:bc:b5:0e:63:fd:16:be:23:f9:ea:
                    f4:73:38:b5:25:c2:22:cc:6c:66:fb:5a:86:7f:cf:
                    c2:31:89:73:3a:21:d5:f7:60:54:84:17:e4:63:06:
                    3d:d1:d8:f9:08:17:fb:c9:23:99:65:37:66:ba:ac:
                    69:97:55:45:2a:eb:92:12:77:0c:15:34:a4:01:dc:
                    87:3f:4e:d2:d6:44:71:d7:1b:96:71:bf:a1:0a:0b:
                    55:46:53:25:77:a6:77:6d:5b:b7:fb:1c:24:ec:7b:
                    76:e5:66:67:10:d4:dd:59:23:13:bb:6c:3a:43:f6:
                    c2:e0:1e:a9:a9:13:5e:7e:5f:d6:fe:b1:fc:39:0b:
                    73:a3:12:9a:4d:51:5d:3d:6b:7e:e3:98:3e:04:f6:
                    9e:a9:6d:02:91:a9:c3:0d:0a:63:04:11:46:aa:9c:
                    9d:62:f7:eb:32:1d:f4:c5:c9:13:10:17:58:73:9d:
                    38:a2:8a:4f:b3:57:9f:69:32:23:00:79:1f:5e:98:
                    2d:54:6d:ce:49:76:ef:85:d5:83:43:3c:9c:2f:f6:
                    df:bf:f8:19:8f:fb:57:37:53:50:33:98:19:dd:d7:
                    1f:64:38:c7:28:e7:66:f0:4a:5f:ea:b1:3c:5e:91:
                    8b:ae:10:af:eb:bb:d1:d0:4d:11:f7:f6:47:f1:17:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:88:03:71:A1:02:BE:11:FB:1F:69:52:D8:A4:FF:89:2A:42:B1
            X509v3 Authority Key Identifier:
                keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:61:ff:bb:bc:77:56:a9:ee:5f:5e:5e:33:34:a7:27:a1:d0:
         3f:73:81:82:00:2b:13:30:c8:50:c6:17:95:88:0c:19:86:c8:
         28:a8:9f:ee:2d:6b:73:ee:2a:2d:74:35:a8:f9:71:47:c5:a8:
         3d:51:31:e6:e6:32:59:32:d5:58:3c:a5:91:9e:ed:c9:e0:ab:
         fe:cc:b4:a1:b3:12:f6:b9:78:de:73:33:e9:ee:27:16:b3:76:
         2b:5e:e6:8c:ec:58:cb:30:c5:2c:f9:9f:29:13:6c:d8:5f:f2:
         23:da:7c:e1:b6:ba:81:c9:15:67:b3:b5:7c:d3:87:d8:b5:f1:
         6b:37:4b:19:65:ea:20:63:6e:61:c1:99:60:31:2d:5c:c5:9a:
         6b:26:0f:b8:a2:b8:78:4e:0a:e9:b5:2b:bb:dc:58:e3:63:e5:
         b1:74:61:b2:8d:60:4d:ac:75:c3:ba:3c:1f:c0:74:78:62:f3:
         bc:3d:95:41:bc:98:4b:f0:63:68:87:37:28:2c:c5:f4:12:74:
         99:9b:7c:43:a0:ce:58:f5:3c:1c:73:25:87:b7:65:71:ae:98:
         8a:5d:fc:f9:eb:10:75:de:7a:d6:a8:24:04:76:55:5e:31:a8:
         16:c3:79:24:a1:9d:d5:eb:54:e1:dc:43:4c:97:25:de:fa:46:
         7c:f8:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:29:41 2025 by rpki-client