Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          IZeu9+HqtsNWcOff9g/7nsNsDNAu7TmlWq+6MA7V8kE=
Subject key identifier:   5C:1A:38:F7:09:5E:CA:4B:CA:5A:A2:C5:F1:4F:77:2F:85:44:E3:73
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       0197B7EA482A111C37B460B5FD428ABF8C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          1247
Signing time:             Sat 28 Jun 2025 19:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:13 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: 0zYqBsyITnitzmpIFxe99kMdzf+5TUrsp3DfzGRvLgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:48:2a:11:1c:37:b4:60:b5:fd:42:8a:bf:8c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Jun 28 19:01:13 2025 GMT
            Not After : Jun 29 19:01:13 2025 GMT
        Subject: CN=5c1a38f7095eca4bca5aa2c5f14f772f8544e373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:a3:f3:56:a0:0b:a6:96:eb:f8:4d:68:f9:
                    c5:62:b9:eb:d6:d2:52:96:03:b5:99:2c:6e:2c:72:
                    55:08:0a:90:20:03:89:f8:64:de:90:21:c0:9b:2d:
                    e3:a5:63:bb:9a:2e:43:89:85:51:75:30:e2:42:cf:
                    17:97:38:57:55:1f:d6:8d:f6:25:b3:c0:38:5a:53:
                    69:1e:41:c0:9b:fc:30:d7:6f:7a:dc:30:cb:a8:d5:
                    3b:20:dd:e3:1d:8b:ed:07:84:73:9d:a2:48:3d:00:
                    7a:e1:fa:17:5d:ff:42:97:0c:c5:65:17:14:e8:9c:
                    63:5c:64:20:de:8b:2c:e7:40:8e:fd:3c:08:94:4a:
                    d6:92:a4:03:44:01:58:01:bb:fa:42:c0:7c:d7:6f:
                    14:a9:fc:8a:68:de:c4:c7:d3:83:9f:ca:a6:ed:cb:
                    18:10:6d:03:eb:52:4a:1d:e5:61:6a:6b:37:bb:d2:
                    e5:a9:e1:9c:2c:24:56:0c:6d:25:81:e4:49:9e:22:
                    54:da:d6:49:82:b0:4b:b0:ba:cd:74:3f:9d:d3:cd:
                    00:f4:c6:64:2a:50:21:01:0e:f8:96:3c:11:f3:d1:
                    35:95:96:b2:1b:69:c3:e7:90:de:a9:fa:bf:20:d5:
                    47:da:03:47:07:05:8e:6b:2d:43:83:8d:2d:c4:01:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1A:38:F7:09:5E:CA:4B:CA:5A:A2:C5:F1:4F:77:2F:85:44:E3:73
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:18:28:96:fa:cc:bf:6d:2c:62:85:bd:e1:54:52:ce:b3:36:
         33:35:80:6d:ec:8b:ca:e6:fe:74:e4:a1:81:83:53:de:8e:b8:
         1c:0c:7a:68:62:af:72:a1:41:b6:29:32:50:cf:60:7b:77:2e:
         12:9e:30:4e:76:2a:e4:2d:19:f1:82:4f:be:94:77:8a:d8:c6:
         51:73:41:63:10:3c:f0:1f:30:45:b6:28:6c:53:ee:bc:97:85:
         bc:02:8d:49:fe:54:bc:10:bd:23:e5:fc:13:5d:b0:69:bb:3f:
         d1:41:c4:59:ba:71:e6:32:7e:0d:ec:b1:fe:99:47:3a:a5:17:
         56:73:e0:a6:4f:30:b4:22:ff:21:67:23:4a:74:39:0f:e4:64:
         88:b8:1d:b6:a7:78:09:46:da:a9:b7:53:9d:b5:74:3e:9d:c9:
         cb:41:60:d4:48:12:4b:e8:0e:9b:5d:16:a7:70:fb:a3:41:d8:
         e8:5b:98:52:fe:d4:fb:55:37:02:9a:b0:ea:6b:bb:9f:d6:59:
         02:9e:e2:34:59:71:91:20:be:31:a6:87:ef:2f:8d:32:a1:7d:
         ca:6b:63:9b:57:f4:4d:8a:45:b9:f1:4a:81:b6:26:6f:79:4e:
         9c:d5:63:2b:83:7b:61:3f:fa:25:56:a5:fb:40:93:59:0a:91:
         86:eb:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:18 2025 by rpki-client