Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          duDacTRMwF2oB0egtXmXpU7GP6AQV1LcNQjKq1OAoVA=
Subject key identifier:   6C:04:09:33:E5:A0:6E:49:9D:CD:89:5F:12:0C:C8:9F:90:41:79:D0
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       0197B745239F0FD22B082C3354AD732EF83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          15E6
Signing time:             Sat 28 Jun 2025 16:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:50 +0000
Files and hashes:         1: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=)
                          2: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=)
                          3: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=)
                          4: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=)
                          5: 9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa (hash: xFBFRGfS3O+bazpDop3BgjkeDxLZtIdcjSO0Je/Hudk=)
                          6: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=)
                          7: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=)
                          8: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=)
                          9: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=)
                          10: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=)
                          11: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=)
                          12: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=)
                          13: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=)
                          14: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=)
                          15: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=)
                          16: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=)
                          17: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=)
                          18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: /Q7mzhHU7+BtqXAg2IlO31QE9yxhF9QlquY2qoZdRCU=)
                          19: r5S-ydArr63Zw0HTZogwZDHaYvQ.roa (hash: SZ15CUAbG/7okIjWK5fb0NUgHkxOTUMNwwLuvHLTw3U=)
                          20: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=)
                          21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:23:9f:0f:d2:2b:08:2c:33:54:ad:73:2e:f8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Jun 28 16:00:50 2025 GMT
            Not After : Jun 29 16:00:50 2025 GMT
        Subject: CN=6c040933e5a06e499dcd895f120cc89f904179d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:5c:15:f4:26:85:e8:e9:95:04:ea:e2:79:
                    3d:e9:77:fa:30:60:19:55:30:2d:17:38:48:46:16:
                    10:c3:e5:86:1b:33:98:17:d2:66:45:f5:99:3f:df:
                    3b:ed:bc:24:43:4e:04:6f:59:9a:b2:27:74:2b:ca:
                    1e:d2:11:bf:15:19:50:67:13:5f:3e:e5:1d:fb:e5:
                    4b:92:84:ca:d7:87:64:e6:ee:3f:51:31:af:3b:5b:
                    87:8e:2e:bd:1d:02:16:67:cd:a8:5d:b4:bc:86:ab:
                    d8:53:66:11:7b:42:27:98:f2:a9:cb:74:82:ea:05:
                    af:b4:40:f6:01:a9:e4:fb:40:1c:9f:06:e7:4b:06:
                    3a:7b:4d:97:52:be:24:1d:26:53:c6:e1:1e:19:20:
                    9c:7c:55:a0:4a:c3:e8:97:df:db:7b:f0:fc:14:f4:
                    3b:fb:92:fd:a3:87:65:f9:bb:72:3c:cf:4d:71:88:
                    29:a6:2f:b9:0b:61:33:cd:72:14:0f:e7:b2:33:3e:
                    b3:17:64:25:30:aa:9b:a9:e3:14:97:50:83:d5:c0:
                    25:44:84:20:2b:39:01:1c:d2:8d:00:9c:30:3f:66:
                    96:b7:d4:bd:48:f2:e9:05:46:0b:87:81:1a:82:50:
                    f0:92:65:2d:ee:34:6b:89:d7:a0:e1:8c:c5:d6:62:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:09:33:E5:A0:6E:49:9D:CD:89:5F:12:0C:C8:9F:90:41:79:D0
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:2f:e5:c0:42:e7:d6:70:da:2b:9c:c2:c1:8e:bd:40:c5:
         08:3f:04:42:2f:1f:66:b7:c2:50:67:34:04:80:2c:60:9d:91:
         75:7d:07:3d:9e:e5:7c:42:c5:39:8f:29:6f:f9:2c:6b:da:52:
         6e:f8:a8:49:49:0e:87:99:82:8c:ac:7c:c5:a9:5e:c9:af:bf:
         ab:8e:4a:1c:b0:e1:fa:3d:82:6a:65:fa:cc:ab:02:48:01:93:
         c1:ba:ca:d0:75:ab:03:7b:bf:47:a8:5f:5f:7e:fe:a6:c8:92:
         19:75:6f:69:3d:90:e1:85:1a:c8:68:ef:8a:18:fd:5a:68:69:
         84:59:5b:61:4b:e8:dc:85:e9:16:af:ee:de:7e:66:8b:65:82:
         a4:86:a0:47:dd:e5:2b:af:6a:78:3b:66:ac:87:20:e6:ba:fe:
         97:a7:66:c8:9b:b8:2b:0e:a4:50:14:a8:eb:30:1e:07:39:9b:
         76:6a:67:86:80:fd:1b:de:da:a1:91:5e:c3:9e:8b:42:4d:34:
         6d:47:a5:b3:44:ad:8f:6e:49:da:aa:cc:56:12:7f:40:d7:87:
         f9:97:66:c1:e3:b2:d5:aa:01:46:29:e0:af:9c:30:64:f1:59:
         2e:27:b7:44:61:9b:60:82:f8:86:58:37:de:95:29:1e:2a:84:
         23:f1:f5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:17 2025 by rpki-client