Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File:                     O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier:          Gv2YH1rUNnkMMDsyj7DrjdYpmUoFeTiu90ciiHZ6sG4=
Subject key identifier:   A8:AD:E0:9F:E5:5B:25:C5:71:48:01:64:2E:AC:E9:F9:C1:BC:17:05
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer:       /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial:       0197B933EE62154478616AADCE993BD5E7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number:          0963
Signing time:             Sun 29 Jun 2025 01:01:17 +0000
Manifest this update:     Sun 29 Jun 2025 01:01:17 +0000
Manifest next update:     Mon 30 Jun 2025 01:01:17 +0000
Files and hashes:         1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: 6KLxKDCFmKu7lM1ylJxwG+ugJ0knEC1YLPp3JMAgp4s=)
                          2: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (hash: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:ee:62:15:44:78:61:6a:ad:ce:99:3b:d5:e7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
        Validity
            Not Before: Jun 29 01:01:17 2025 GMT
            Not After : Jun 30 01:01:17 2025 GMT
        Subject: CN=a8ade09fe55b25c5714801642eace9f9c1bc1705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:fe:0d:87:6c:5c:e3:f2:d9:5b:fe:8f:12:
                    c2:e1:87:68:df:ec:44:86:a0:be:4f:c6:43:80:80:
                    ba:0a:0f:e2:bf:0c:1e:fa:a7:a7:ea:e4:a2:a6:01:
                    34:94:4d:87:53:8e:b7:58:09:e6:45:73:5e:6c:1d:
                    d8:6e:35:4c:e4:69:cd:0e:bd:53:68:07:af:b6:d7:
                    9d:ae:5a:66:24:2b:1d:e5:58:30:52:ad:b8:d1:dc:
                    35:fe:f3:1c:9a:0a:65:06:cd:c3:7c:b4:3c:57:4b:
                    b0:b4:9f:66:0b:e5:eb:11:fa:25:0e:a2:2f:b5:ca:
                    6d:d5:9d:00:d2:73:6f:f2:47:2e:c4:10:88:1a:b9:
                    d4:fa:7a:8e:f2:ed:14:1a:df:6b:a2:4b:01:86:eb:
                    11:ef:89:15:7a:3e:ed:d0:dd:b4:e1:6c:1b:37:7c:
                    8b:a6:f9:4a:a3:b5:e7:65:c2:19:c7:38:d3:4a:e3:
                    3a:1b:6e:e9:cb:ae:48:a2:b4:6e:96:12:68:a0:47:
                    22:65:91:87:2f:8d:1d:bd:5c:f8:68:40:35:4b:a9:
                    1e:cb:14:1c:bc:e0:3c:b1:df:8b:8d:be:11:0d:7e:
                    a4:32:52:5a:65:da:8c:25:25:fb:b6:10:24:50:51:
                    cb:87:b9:2c:2b:c7:96:2a:ef:61:87:f0:be:cb:2a:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:E0:9F:E5:5B:25:C5:71:48:01:64:2E:AC:E9:F9:C1:BC:17:05
            X509v3 Authority Key Identifier:
                keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:0f:ab:54:13:fa:82:dd:30:52:7e:b1:a3:db:0c:c7:3d:
         76:ed:e6:9a:1a:db:e1:35:8b:6a:44:a0:b4:89:7e:c6:49:1b:
         18:37:f1:db:84:32:3e:fe:1c:85:68:aa:89:d6:63:26:70:99:
         92:69:64:fb:7c:09:f1:45:95:01:10:c1:ba:cb:cf:cb:6b:f4:
         c0:7d:9c:41:d3:a5:f1:ef:39:c2:b3:b4:72:c5:57:6f:bd:0a:
         b1:08:8c:8e:55:ba:c4:c1:35:a5:5f:6e:8a:91:51:97:b6:78:
         41:31:ee:7e:d6:f3:67:bc:0a:f4:36:81:4c:4c:3b:7c:0a:da:
         03:48:56:16:dd:3a:5d:0a:4d:8c:0f:4d:9d:b8:a6:2a:e0:7c:
         2c:9b:37:7b:5c:1f:5c:1a:f2:da:94:10:b9:8d:88:15:23:1e:
         07:da:e9:e3:12:c1:01:0c:1f:f6:ab:77:68:8c:e0:c5:fe:c9:
         8a:ed:f8:bb:36:28:2d:98:2b:78:03:70:b7:d9:32:7b:80:a5:
         eb:0c:72:e7:3c:99:48:04:5b:6a:a5:3c:ab:80:d4:fa:24:10:
         fb:c9:98:06:c6:bf:35:bd:53:91:68:6a:ed:58:0e:36:a4:a3:
         a1:0b:65:5a:f3:8d:0f:65:d3:b5:79:f4:1f:39:e4:ae:d8:4f:
         e6:a3:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:55 2025 by rpki-client