Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          oiPSU3ISx970+grVtg22ywq7zNuy1ozagfxgLcmQjOE=
Subject key identifier:   2F:F7:C1:15:33:5B:15:6E:09:8F:77:50:37:01:9D:56:61:F0:44:A5
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       0197B77CB2AACA53049DA9957E27026BF004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          0FED
Signing time:             Sat 28 Jun 2025 17:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:31 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: AXJ1cQiR7ZxcXcK84EJtpTLXRDFzdEaermyITeIpbaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b2:aa:ca:53:04:9d:a9:95:7e:27:02:6b:f0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: Jun 28 17:01:31 2025 GMT
            Not After : Jun 29 17:01:31 2025 GMT
        Subject: CN=2ff7c115335b156e098f775037019d5661f044a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:63:09:a8:17:01:46:e9:89:8d:04:94:e7:
                    71:7a:45:16:64:fe:95:f2:ac:9f:29:ea:e0:8d:ba:
                    e8:3d:22:de:40:60:d8:26:86:6d:8b:1e:c5:24:ec:
                    4d:a9:0c:86:4c:87:c7:a5:78:d7:8f:51:46:16:4e:
                    a4:1d:ab:f7:f6:40:31:6e:96:04:b3:8d:07:ae:50:
                    50:4d:58:08:de:71:ab:5e:e4:08:fe:8e:c6:09:b6:
                    b7:5c:27:0b:e5:91:0f:cb:83:3b:28:f9:ff:6f:01:
                    92:0c:cc:3b:7a:0f:c6:38:9c:61:4f:67:b5:c0:40:
                    6e:69:3e:17:08:4f:6a:8b:5c:34:be:6d:b8:c6:bd:
                    a3:33:81:88:c7:0d:7d:db:2a:44:47:38:37:15:22:
                    c3:93:4b:62:0a:f0:23:8a:51:ab:22:7f:f4:b7:dd:
                    54:cc:9d:38:d9:e0:6b:8f:e1:c5:e7:9b:b8:1c:52:
                    d4:b5:ca:2d:b5:f9:24:30:cd:74:25:f0:e0:83:a9:
                    9b:cc:5e:4f:6f:83:8e:c0:21:52:79:9c:31:9e:e0:
                    ca:4e:c1:26:30:09:b7:a9:9a:c1:15:e5:d2:7c:23:
                    4d:16:0b:cb:b8:f6:9c:8d:6d:88:ae:5a:d9:9b:bf:
                    29:92:18:7a:46:7f:5f:78:ea:56:3b:66:2d:34:a4:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:C1:15:33:5B:15:6E:09:8F:77:50:37:01:9D:56:61:F0:44:A5
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:c0:3f:ba:d9:11:84:20:bf:41:48:92:da:20:04:14:60:
         ac:ee:df:f6:1b:e7:95:87:ef:fc:77:13:28:91:d1:7d:48:a2:
         85:36:fe:d9:b1:ad:9a:5a:0c:37:7a:79:70:ed:93:2c:75:c1:
         81:2a:58:1f:f7:73:46:02:b0:4d:c5:8b:fb:2a:31:31:bf:90:
         d5:3d:c3:18:e9:45:ea:96:32:ae:51:84:b9:32:34:ee:35:0b:
         93:29:74:aa:40:d4:24:d2:da:d7:5c:b9:84:e9:f3:c5:82:32:
         e4:c7:da:66:b8:10:af:fc:79:c9:40:43:4e:f3:8e:eb:f4:5d:
         94:67:55:af:84:3f:c2:d2:a3:eb:ae:56:13:90:3f:fb:6f:87:
         b1:39:a4:8e:9f:31:ba:49:73:99:af:10:a7:ee:2c:7e:00:af:
         c5:ea:7f:65:73:c9:71:07:7f:2d:c0:c1:eb:36:5b:89:fa:8a:
         21:fe:a8:88:5d:e8:2f:88:4e:17:20:0f:66:2c:bf:1c:b8:c1:
         3f:5b:45:b2:d9:d3:fb:a9:15:84:84:09:6f:c6:45:4a:7e:02:
         ef:57:dc:76:58:ce:3d:9f:c7:9b:3e:23:91:01:f9:dd:de:56:
         c7:54:b9:26:8f:ce:d4:1a:12:73:d8:16:aa:4a:01:74:7c:ea:
         91:53:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:25 2025 by rpki-client