Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          XtlOkfEu1LLmBWIvuj9sznpv3nqYiGLjmxV4MqYrlBA=
Subject key identifier:   76:09:10:49:9B:BB:95:0E:62:5F:4D:E1:F0:6B:09:6F:81:21:09:56
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       0197B7B3424109BFBC9DD991952709694D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          12DF
Signing time:             Sat 28 Jun 2025 18:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:07 +0000
Files and hashes:         1: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (hash: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=)
                          2: 4HzcAwAp_NPUTKmqOpFk6fNukP8.roa (hash: MU7p381OLfrUgZeXEX4ypzzCidzVAcWbQDWLKu/+t9s=)
                          3: QJH1xkQhD8ZqrUTpIxRVC-9iWsg.roa (hash: k8wK85RayUQhoeFyh00R6U1ww1Aske+9ky6WjpJEXWs=)
                          4: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: bUi4TODW/wBbFoWe3eDBWmmm0erXaeoEmqR7mQh3eL4=)
                          5: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (hash: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:42:41:09:bf:bc:9d:d9:91:95:27:09:69:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jun 28 18:01:07 2025 GMT
            Not After : Jun 29 18:01:07 2025 GMT
        Subject: CN=760910499bbb950e625f4de1f06b096f81210956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:7b:c1:10:91:28:af:ca:10:d7:16:b4:8f:
                    3c:00:8d:79:04:80:b1:20:a0:ab:b9:83:02:c2:7e:
                    4d:64:7e:e1:37:7e:8c:18:ff:7c:b0:9d:82:73:4f:
                    e1:7e:ff:5e:1e:a5:88:61:3f:cf:2d:6a:2c:95:4a:
                    a8:87:cb:3d:00:eb:1d:17:3f:b9:df:81:cd:0f:25:
                    13:5c:27:26:44:fa:73:e1:d4:81:1b:c3:80:0a:9e:
                    c4:48:6f:c7:47:dd:80:e1:ab:a8:a1:ff:cd:48:2e:
                    1e:7a:51:81:fd:48:9d:a1:30:f2:0b:e2:ce:01:cd:
                    39:7e:fd:68:bb:12:76:cd:8a:cc:2d:36:ac:0c:61:
                    2b:45:c9:b4:9e:82:d7:96:29:82:9f:0e:5c:20:97:
                    88:a4:68:14:94:d7:a5:5c:13:13:92:25:d9:d9:e8:
                    ae:ea:2a:cb:02:01:4d:56:ef:fa:a8:d1:9c:b2:7e:
                    62:99:7e:15:b3:43:75:72:33:aa:d2:e1:32:a7:1f:
                    9f:29:a1:44:67:22:0c:90:5e:cd:f3:9d:02:f4:65:
                    05:99:3f:11:8a:51:14:31:cd:c1:29:7f:3b:8c:6f:
                    d0:10:cf:b9:81:eb:37:40:31:04:f5:24:23:a7:96:
                    82:88:bf:9a:22:e5:68:27:35:e5:08:3c:9a:20:1d:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:10:49:9B:BB:95:0E:62:5F:4D:E1:F0:6B:09:6F:81:21:09:56
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:33:1f:7e:88:5e:88:cd:ea:44:f1:07:bb:30:7e:e5:d4:43:
         85:01:72:97:b5:82:39:cc:47:ed:e9:99:08:f6:49:46:73:d1:
         b6:97:28:c3:6f:00:8b:57:7d:75:e4:9c:f7:97:68:e7:ba:7c:
         51:7b:d0:77:23:4a:99:1b:3a:87:e9:7e:68:e3:57:dd:06:27:
         79:23:c5:e8:a5:e1:c6:67:98:ec:47:96:f7:f9:fe:06:ec:ea:
         fd:91:51:09:02:fd:e9:f3:3e:9d:f4:c3:e5:6e:a7:19:57:b9:
         26:a5:99:a3:e0:9a:1c:64:45:a4:b2:a6:99:1c:c0:a3:a2:80:
         8f:76:b5:f0:22:af:59:28:df:70:72:91:09:03:3b:70:9d:9a:
         be:4c:95:c7:59:ca:a5:0b:e5:42:08:f3:dd:d1:4c:1f:ec:2f:
         f2:19:72:01:a0:76:c1:5a:42:b3:e1:de:60:7a:66:d0:bc:84:
         e4:d2:1c:26:b7:56:2d:c6:ba:12:6a:8b:6b:34:9e:7b:9e:b2:
         29:bc:b5:69:6d:2d:66:96:51:7c:0a:93:a1:1e:5e:85:61:e7:
         2d:f2:61:19:ae:a8:93:07:d0:71:96:64:47:b7:22:bf:8b:84:
         bc:0b:db:18:6a:c6:fe:f4:79:07:96:26:af:46:40:85:bf:46:
         f8:f7:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:07 2025 by rpki-client