Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          6KqERUG1h/n/iKQuMfbNwsSKiU9bPftS4P8qx/JF4mA=
Subject key identifier:   D2:07:A1:82:7A:7E:65:0C:06:3F:9E:A4:BA:AF:BC:8A:39:F2:C4:6B
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       0197CD5F004031336B2CADDD7B7BE62DDA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          05D9
Signing time:             Wed 02 Jul 2025 23:00:44 +0000
Manifest this update:     Wed 02 Jul 2025 23:00:44 +0000
Manifest next update:     Thu 03 Jul 2025 23:00:44 +0000
Files and hashes:         1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: WLjYFlgiLrNCibbVecz6HL5NaUp+AMTpDvqjsJQ1z1g=)
                          3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:5f:00:40:31:33:6b:2c:ad:dd:7b:7b:e6:2d:da:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Jul  2 23:00:44 2025 GMT
            Not After : Jul  3 23:00:44 2025 GMT
        Subject: CN=d207a1827a7e650c063f9ea4baafbc8a39f2c46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:88:1f:79:f2:52:8d:00:43:71:94:7b:b0:
                    e6:2d:44:49:51:23:87:75:00:c5:e6:45:39:83:a9:
                    07:7d:97:af:85:ac:cd:0b:df:7c:a3:84:7a:d2:33:
                    83:05:40:35:8f:4a:e2:de:92:d6:39:d9:74:89:ea:
                    fe:df:47:0f:b3:4f:08:a7:04:49:1c:2d:2b:59:e6:
                    a7:86:86:9b:0e:87:fc:b1:67:1f:f4:80:f9:fc:4e:
                    62:2a:9d:60:9c:c1:e0:57:48:b5:b1:7b:95:3b:7f:
                    a4:ed:e8:c7:b4:45:df:24:7a:6d:e0:c7:32:b8:47:
                    b2:7a:ff:ad:c0:de:4c:1d:7a:e0:b2:f8:1a:05:c2:
                    8a:5a:c9:eb:1e:e9:a1:10:4a:bf:09:b0:09:ad:52:
                    13:f2:99:89:15:95:f3:6d:a1:4a:38:81:08:97:cd:
                    a4:8b:c6:a4:20:d1:3c:dc:e0:84:15:4e:7e:f2:27:
                    df:b4:c5:b0:82:a4:a4:01:3e:37:71:0c:c7:fd:62:
                    e7:0c:ac:70:49:66:39:76:f6:4c:a5:68:c9:c0:da:
                    83:13:77:94:fa:26:e3:a2:01:cf:5f:6b:b1:98:72:
                    5e:b7:b1:e3:74:66:40:11:86:98:5b:dd:85:cc:f5:
                    31:02:57:dc:8a:f6:e0:c5:02:ec:08:63:42:a7:b2:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:A1:82:7A:7E:65:0C:06:3F:9E:A4:BA:AF:BC:8A:39:F2:C4:6B
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:d5:6a:6b:e8:c3:09:dd:c9:99:46:a3:6b:bc:59:39:9e:
         64:08:60:7b:8f:4e:10:8a:cf:2e:0a:17:6f:a1:4e:9a:2d:87:
         ce:39:1b:90:ab:62:ee:7e:d9:e7:fd:a5:4c:59:02:ea:3f:6b:
         9c:5d:dd:0b:b0:c3:07:2b:03:39:3d:c2:15:e3:df:2b:fe:ba:
         35:4d:d7:19:a6:24:9d:15:06:77:24:48:c9:cc:3b:8d:49:f8:
         77:a4:18:2e:4a:d4:3b:5a:46:04:bb:b9:11:cb:18:cc:c9:25:
         fa:fd:96:c6:ae:12:c5:03:c7:dc:96:bc:8e:8a:b6:00:40:bb:
         a9:83:37:6d:c2:09:18:95:7f:61:d5:2c:23:8c:38:bb:87:a1:
         2e:47:39:1a:05:c3:48:cb:e3:b6:52:25:3e:0c:cd:e5:ca:4e:
         4d:7a:c4:de:16:8d:7f:65:f8:90:ac:51:d7:ef:66:d9:00:59:
         91:99:6a:7f:0e:8b:b3:c6:56:08:1f:96:0f:7e:74:1f:66:e3:
         ad:da:4e:4e:98:9e:dc:dd:59:4a:40:16:97:df:bb:0c:d8:b4:
         7d:c7:bd:6a:57:1f:20:26:a7:a5:f7:a8:d4:6a:45:ab:50:7d:
         f1:6f:2a:d3:d8:2d:42:ff:b7:e8:f2:75:c4:8b:47:12:46:46:
         62:97:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:49:05 2025 by rpki-client