Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          9ZNR/IcBYZbP9rnVsUU0zx6FQ1BglvU4FGRPBlhNe+I=
Subject key identifier:   82:42:B1:46:72:F4:C5:AD:EE:DD:C5:2C:05:C9:96:66:F9:00:34:CE
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       0196AFFC94DB79215F14A7A58978373EC7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          155B
Signing time:             Thu 08 May 2025 13:01:27 +0000
Manifest this update:     Thu 08 May 2025 13:01:27 +0000
Manifest next update:     Fri 09 May 2025 13:01:27 +0000
Files and hashes:         1: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=)
                          2: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=)
                          3: 8iIqri7IvcauWOTMINZhQiLRKvo.roa (hash: RyqX7TgKsmeFBvLMMu3I/bH8LRWEmU571C2kQM35LYo=)
                          4: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=)
                          5: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=)
                          6: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=)
                          7: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=)
                          8: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=)
                          9: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=)
                          10: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=)
                          11: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=)
                          12: VR1tTYIEPbA9zeDbxQ93FneaFLY.roa (hash: sqw13GqX10l/sEQWjuYoScnDkRovS+UsjnWdhPW+FNE=)
                          13: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=)
                          14: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=)
                          15: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=)
                          16: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=)
                          17: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: BHutRnU58E5sk1oA5t01ASYPkSQKTvNvbYwSP4IS6lA=)
                          18: pvGlYdNhKz2pnhUHBDmhS1PrNEE.roa (hash: WH1w7Slb9loDXTZ8TzAepbgAGDtyJ5MDMVLNLiV34H0=)
                          19: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=)
                          20: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fc:94:db:79:21:5f:14:a7:a5:89:78:37:3e:c7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: May  8 13:01:27 2025 GMT
            Not After : May  9 13:01:27 2025 GMT
        Subject: CN=8242b14672f4c5adeeddc52c05c99666f90034ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:74:da:1e:72:b3:0d:80:13:d4:4b:12:72:
                    fc:d5:0e:93:3a:1f:4e:fc:ce:7a:46:b3:1b:7b:61:
                    f5:7e:2d:1b:9d:4f:3e:5c:01:fd:eb:fb:2d:aa:c3:
                    1f:e6:8e:4f:44:ed:96:97:c7:ec:85:cc:70:09:ea:
                    9c:58:18:45:f8:e6:a4:21:a4:9d:c5:0c:ec:e2:2b:
                    f3:4f:08:21:bf:21:54:c8:de:87:73:76:7e:ce:37:
                    c9:88:31:16:58:f5:9d:55:85:d3:8d:de:76:54:1e:
                    e4:11:63:a4:ec:fe:29:07:ac:c6:26:20:eb:ea:7f:
                    eb:12:5f:8b:c7:87:d5:c4:e4:f2:ca:bd:d9:c2:4b:
                    ee:61:7f:f6:c7:21:dd:3d:65:02:46:db:d0:f2:e4:
                    79:83:b6:de:ea:48:fd:ed:c6:eb:4f:b4:5c:22:78:
                    38:a7:ce:66:aa:52:38:3f:51:c6:d4:64:90:15:dc:
                    db:2e:d7:af:8f:a4:5e:77:17:a0:59:04:96:10:82:
                    ee:5b:b6:a6:39:b9:5f:f0:d4:ea:d0:7c:5f:55:f1:
                    0b:08:ac:06:82:37:ff:0b:5f:15:db:d8:b8:df:36:
                    be:4f:6f:22:c2:96:ba:a3:56:66:b7:f4:c5:1f:4d:
                    70:87:5d:17:44:6d:f7:78:80:c5:75:5e:13:0f:70:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:B1:46:72:F4:C5:AD:EE:DD:C5:2C:05:C9:96:66:F9:00:34:CE
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:cc:e2:93:b2:b7:d5:83:6c:d0:56:e6:56:bc:e7:c5:0c:
         5c:89:08:3a:bf:e7:08:cf:12:5e:3e:a1:d6:ad:9e:66:6c:3d:
         88:e6:67:c4:1c:e4:07:09:0a:e5:ac:22:7c:99:5b:69:cf:41:
         3d:e7:6d:86:87:da:74:16:70:e2:09:41:e2:71:9f:e1:23:14:
         87:12:f2:8b:b9:f5:17:96:ed:fe:b9:5f:13:3e:42:12:31:4d:
         09:68:85:90:06:d1:1b:64:90:7f:7a:74:55:c1:9d:8a:23:c4:
         d1:0f:1a:c5:6e:3e:7b:f5:4b:cd:28:37:0d:28:30:7d:a4:50:
         ac:7d:1d:d9:87:3a:ab:d1:f9:b0:5c:ae:7c:ab:39:7d:e0:8c:
         d8:46:5b:8e:d5:63:3a:78:d1:2f:36:1c:b9:d9:2a:28:be:40:
         99:60:f2:e0:60:31:1f:3b:09:60:1f:bb:8b:5f:01:3b:10:ee:
         1e:d0:54:63:64:f1:f2:7d:e1:32:d7:fe:be:3b:81:25:91:42:
         73:7b:04:37:d9:5d:e2:fb:b8:d9:86:37:d0:81:b1:2c:31:60:
         ab:4c:67:9d:6c:85:f9:f9:f1:4d:22:4c:36:44:36:ea:c2:07:
         03:e5:af:75:33:a1:16:b1:ac:15:de:d6:7b:90:40:1b:f5:ff:
         ac:f4:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:51:29 2025 by rpki-client