Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          W5Mlw9jIyD9SlmlLV/nO/Zhj65gNR9WsMv5UzOOGDI0=
Subject key identifier:   DF:5B:AE:D1:18:E7:81:A7:BA:AE:23:0C:02:36:8D:C0:34:B4:3A:C6
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       0197B6D7C01B857149BBD2941E4CC9E84C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          02B5
Signing time:             Sat 28 Jun 2025 14:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:22 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: B2NRmqx2LCpHkpSAgsYjAwHmJWMhZeVzRtfPyS3Pt68=)
                          2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:c0:1b:85:71:49:bb:d2:94:1e:4c:c9:e8:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Jun 28 14:01:22 2025 GMT
            Not After : Jun 29 14:01:22 2025 GMT
        Subject: CN=df5baed118e781a7baae230c02368dc034b43ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:3d:b5:8b:ef:fd:75:62:93:76:f1:e0:d2:
                    bd:e8:ba:c8:d4:71:36:5b:f5:66:d2:a1:b4:ce:e9:
                    23:ba:82:43:21:d9:57:0e:75:77:01:78:9d:6a:98:
                    86:6a:18:08:f8:ff:71:02:e4:56:ec:47:76:d8:03:
                    4c:f7:ac:55:d2:04:a9:5f:82:63:7c:93:9e:03:c9:
                    1c:fb:08:c8:3f:48:67:f0:e8:cc:ad:60:c1:74:45:
                    1e:4b:8c:b0:66:7a:1a:97:2a:00:94:70:07:04:0f:
                    ff:5b:22:aa:89:0a:f5:61:97:98:37:43:2b:03:1c:
                    22:e6:9b:d4:44:1c:1e:bd:1b:32:1a:5c:84:f6:e1:
                    42:b3:25:aa:5a:9a:09:aa:9b:5f:f8:ed:8c:82:e8:
                    96:9d:08:98:c8:6e:92:90:4d:4a:63:65:fd:a0:a3:
                    2d:15:c8:fc:38:68:47:78:12:2e:69:6c:c7:4d:5a:
                    6c:92:1e:21:5c:64:8e:9f:a7:9f:47:2f:93:39:f3:
                    be:a2:67:86:1f:19:39:df:00:f7:76:08:da:67:5f:
                    b8:35:31:ad:fe:e6:fd:66:cb:22:8e:5a:cf:99:67:
                    83:9e:bf:4f:ed:48:75:55:7a:5a:58:39:b6:74:b9:
                    e3:d3:de:3a:08:06:be:53:4c:fb:d8:0b:e3:46:8e:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:AE:D1:18:E7:81:A7:BA:AE:23:0C:02:36:8D:C0:34:B4:3A:C6
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:43:29:ed:2c:b7:81:8f:53:84:93:47:76:c8:b5:64:1c:b8:
         aa:b7:81:93:19:88:a7:ff:d6:24:dd:b7:8e:ce:6d:1a:a9:b6:
         b8:ad:1f:cd:54:40:38:d5:34:b0:83:ac:24:48:8a:9b:cb:1a:
         bf:fb:21:e6:45:c4:6b:b8:a3:9f:74:e8:c7:2b:4c:16:60:5b:
         42:b9:d7:2e:e4:6b:00:75:8c:fa:36:aa:47:f9:8c:3c:68:28:
         c8:1e:7b:e9:39:5b:c4:02:5c:19:9d:48:8c:9d:57:ce:ae:89:
         2d:41:4f:99:ab:59:0c:00:4f:8c:67:47:95:42:95:29:86:9c:
         ab:d8:5e:93:07:f7:84:ae:43:1d:7a:72:ab:97:ce:52:5a:85:
         30:0a:35:47:e0:17:d3:e5:15:12:ac:de:18:18:5e:85:f3:f1:
         c6:05:b7:a7:eb:1d:b8:7e:5e:81:42:dc:a2:ea:8b:b0:13:73:
         a7:de:f8:9c:51:ae:f2:a7:32:ed:4e:0a:28:3b:2b:a4:15:5e:
         e2:20:8e:83:40:e9:af:70:52:2f:be:68:04:e6:99:e4:cc:94:
         1e:fd:b0:fd:32:f3:dc:e8:e8:f8:86:00:cd:4d:c3:a2:68:4a:
         a4:a1:f5:1d:f5:7a:35:da:50:ee:9d:d0:97:0d:40:0b:b7:b7:
         64:b4:28:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe218AbhXFJu9KUHkzJ6EwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTIwMzMzN2IwY2QwNmZjZmMwNDU1ODhmMDk3Y2JjMjQx
NTNhNzUwHhcNMjUwNjI4MTQwMTIyWhcNMjUwNjI5MTQwMTIyWjAzMTEwLwYDVQQD
EyhkZjViYWVkMTE4ZTc4MWE3YmFhZTIzMGMwMjM2OGRjMDM0YjQzYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3A9tYvv/XVik3bx4NK96LrI1HE2
W/Vm0qG0zukjuoJDIdlXDnV3AXidapiGahgI+P9xAuRW7Ed22ANM96xV0gSpX4Jj
fJOeA8kc+wjIP0hn8OjMrWDBdEUeS4ywZnoalyoAlHAHBA//WyKqiQr1YZeYN0Mr
Axwi5pvURBwevRsyGlyE9uFCsyWqWpoJqptf+O2MguiWnQiYyG6SkE1KY2X9oKMt
Fcj8OGhHeBIuaWzHTVpskh4hXGSOn6efRy+TOfO+omeGHxk53wD3dgjaZ1+4NTGt
/ub9ZssijlrPmWeDnr9P7Uh1VXpaWDm2dLnj0946CAa+U0z72AvjRo7f/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9brtEY54Gnuq4jDAI2jcA0tDrGMB8GA1UdIwQY
MBaAFDgSAzN7DNBvz8BFWI8JfLwkFTp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgt
YzVjNjRiMTM0MjFkLzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80Y2Y1YWQtYTZjYS00NGZmLTlkMTgtYzVjNjRiMTM0MjFk
LzEvT0JJRE0zc00wR19Qd0VWWWp3bDh2Q1FWT25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0Mp7Sy3
gY9ThJNHdsi1ZBy4qreBkxmIp//WJN23js5tGqm2uK0fzVRAONU0sIOsJEiKm8sa
v/sh5kXEa7ijn3ToxytMFmBbQrnXLuRrAHWM+jaqR/mMPGgoyB576TlbxAJcGZ1I
jJ1Xzq6JLUFPmatZDABPjGdHlUKVKYacq9hekwf3hK5DHXpyq5fOUlqFMAo1R+AX
0+UVEqzeGBhehfPxxgW3p+sduH5egULcouqLsBNzp974nFGu8qcy7U4KKDsrpBVe
4iCOg0Dpr3BSL75oBOaZ5MyUHv2w/TLz3Ojo+IYAzU3DomhKpKH1HfV6NdpQ7p3Q
lw1AC7e3ZLQoPg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:51 2025 by rpki-client