Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File:                     oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier:          HxbCwpuAYo2/PJpBonsnDf+W09PRQKLxyi6iN+Twnvk=
Subject key identifier:   66:EC:79:53:FB:81:B0:5A:1A:BB:DF:5D:DC:87:1F:81:B9:10:56:36
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer:       /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial:       0197C98276003E99C8364DB661CBC81418F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number:          0792
Signing time:             Wed 02 Jul 2025 05:00:59 +0000
Manifest this update:     Wed 02 Jul 2025 05:00:59 +0000
Manifest next update:     Thu 03 Jul 2025 05:00:59 +0000
Files and hashes:         1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: 4HB7n69oGi/aKZ4T5Yl7JqmBjQ4vTNtNx+kP6/LiuSA=)
                          2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:82:76:00:3e:99:c8:36:4d:b6:61:cb:c8:14:18:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
        Validity
            Not Before: Jul  2 05:00:59 2025 GMT
            Not After : Jul  3 05:00:59 2025 GMT
        Subject: CN=66ec7953fb81b05a1abbdf5ddc871f81b9105636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:6d:a2:2b:c5:0f:a3:48:cb:69:f3:74:92:
                    60:93:e8:b4:06:4c:76:f7:fe:8e:68:4b:41:1c:34:
                    88:0c:da:a7:80:bc:8b:aa:67:67:9b:2b:fe:ef:71:
                    0a:f6:0c:41:bd:e7:1d:0b:52:f5:0f:fb:92:6a:14:
                    80:d0:a6:2c:5d:6f:59:1d:ab:80:4f:ad:59:ce:f0:
                    f2:76:07:63:a9:13:75:ab:dc:6e:0b:1d:72:16:5c:
                    e7:bf:2c:38:99:cd:1a:17:ad:5b:39:68:d7:24:bc:
                    d8:d2:81:24:0d:5c:63:49:cb:4b:49:1c:f3:27:80:
                    66:f1:97:58:f4:0b:e6:6c:0d:f9:f5:98:1b:12:2b:
                    aa:b5:0b:2b:d4:27:33:ba:ca:eb:82:f0:08:13:91:
                    02:37:26:44:43:ee:4d:a8:91:b8:8d:78:b5:59:fc:
                    e6:c4:cd:5b:8f:83:fc:63:61:a4:11:d9:d3:4f:4d:
                    41:93:a8:28:95:4f:13:fc:45:0c:f6:3c:13:f9:8e:
                    04:6c:f0:f2:b4:24:b0:4e:f0:fb:47:cc:3c:44:1b:
                    17:c7:be:a0:fb:e7:99:ef:a2:87:97:77:d9:d1:90:
                    58:93:f6:1f:d2:72:bc:37:5c:44:77:c2:5d:fa:be:
                    32:05:0a:99:f7:5b:a1:b2:a5:96:8f:19:78:3c:55:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:79:53:FB:81:B0:5A:1A:BB:DF:5D:DC:87:1F:81:B9:10:56:36
            X509v3 Authority Key Identifier:
                keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:7f:75:a7:e2:16:ce:7e:3e:9b:aa:49:39:7c:4e:ee:06:
         61:d1:8e:9b:86:6e:ef:14:a2:0c:da:0e:94:d7:15:97:f4:dd:
         3d:77:f3:5c:dc:05:80:fc:92:0a:9f:c4:f9:04:33:65:3e:22:
         81:28:6e:a6:98:22:fd:cc:06:81:59:b6:ef:b5:e2:31:24:c5:
         ee:ff:34:17:95:13:5e:4f:d5:35:55:b9:3c:be:e0:2a:8c:3c:
         1c:95:9c:92:4e:8a:a5:09:2a:2a:6c:5f:0c:93:2b:9b:86:c8:
         c6:f5:a4:75:bb:48:74:82:a8:d5:e8:30:99:b1:b7:36:80:cc:
         48:d3:d8:1c:2e:c1:bb:71:3a:46:1c:c2:cd:b2:1a:80:18:a3:
         c9:35:a4:18:6b:5a:96:3c:3d:1c:e4:53:f1:be:df:90:9e:7a:
         5c:4c:31:8f:f9:3a:2d:8d:17:17:e1:f2:57:a6:c6:57:95:26:
         ab:13:53:ae:d2:e0:59:09:58:03:31:0d:ae:ea:29:3c:58:12:
         b3:81:d3:94:f3:fb:ee:59:2d:d2:73:82:76:e1:b3:45:a4:31:
         81:cf:81:74:d4:30:08:64:df:4c:99:91:59:9d:65:12:29:ce:
         73:e5:89:b7:d7:1a:41:45:cf:5a:39:f3:74:aa:d3:5d:ba:4c:
         7b:81:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:19:36 2025 by rpki-client