Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
File:                     o2CNaw6ApkMPtq9D-uFooOgBH-4.mft (raw, json)
Hash identifier:          Cv7I5OJgroLF1Bhx60x+Ywq7z9B+jpxKin5VJu5DdTo=
Subject key identifier:   E8:01:55:84:54:C7:E6:F7:78:68:6B:A3:B2:44:77:91:14:A0:85:70
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Certificate issuer:       /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial:       01969E9B3DE38A0416D139AE1C4E87982F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
Manifest number:          0AC7
Signing time:             Mon 05 May 2025 04:01:35 +0000
Manifest this update:     Mon 05 May 2025 04:01:35 +0000
Manifest next update:     Tue 06 May 2025 04:01:35 +0000
Files and hashes:         1: 1-zT9mAEBlOTW17BpRdhhq5CBopo.roa (hash: fOlZL/jmt7x24Mq2vq6+5+VHvePQon8h2vdvdk/CniI=)
                          2: 2jdvbPuVX3DvnSLzJ7PbPhY084M.roa (hash: TmyuM6Y9MB09UaiU4ubKUXZL1rxE4bCb1tGRI62YtN0=)
                          3: BjXm0XT4BTtEmIMPFFa63S__K7c.roa (hash: ETSjvpbNZrkoFW+0i09JYHs/YF4PfB7NXGdhRYyZxZs=)
                          4: Y8I7Cdrc3qJFqRL0cpCQD0-SJXM.roa (hash: kJVt9rCeoDhUmKwMAQa4mtxvjszoPS2OFInBbvhBp0I=)
                          5: o2CNaw6ApkMPtq9D-uFooOgBH-4.crl (hash: soDRoV9W2AcpYhzNlprRPtTF1b1O8xjptWdzdlqC624=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9b:3d:e3:8a:04:16:d1:39:ae:1c:4e:87:98:2f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
        Validity
            Not Before: May  5 04:01:35 2025 GMT
            Not After : May  6 04:01:35 2025 GMT
        Subject: CN=e801558454c7e6f778686ba3b244779114a08570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:f0:69:2d:30:7f:1c:ce:31:9d:79:51:3c:
                    24:2c:c1:97:1c:f2:7b:a9:0f:30:36:5d:2a:d0:64:
                    6b:04:75:5b:dc:bc:f8:c9:b7:63:3d:10:fc:ca:c2:
                    63:f7:f6:61:3f:c2:08:75:4c:6c:df:c2:54:72:79:
                    84:f1:45:56:65:35:7a:28:b2:03:78:13:a5:09:e7:
                    61:07:04:5a:9a:39:70:24:59:68:fb:06:2f:70:f4:
                    34:20:c2:be:72:e8:94:60:81:bf:09:d6:a5:8c:4c:
                    ff:c9:e2:ee:26:c3:e7:68:e4:e3:03:af:2e:3a:35:
                    84:9f:c9:e4:35:3a:5d:d3:0d:07:9e:8e:36:21:fd:
                    fc:af:a1:3b:05:45:bb:42:e7:67:48:38:cf:76:3e:
                    32:05:5c:62:bb:92:5b:69:d9:0b:e3:3b:d5:d2:2d:
                    d4:f7:58:90:4a:5f:2b:8c:90:a1:4b:26:5c:08:1a:
                    6e:5a:32:61:c3:1b:28:81:f4:17:66:8f:69:d5:41:
                    50:6e:40:79:94:f4:40:02:0d:ce:47:9e:6c:4e:3c:
                    3d:c6:9b:80:f8:53:3f:39:f7:75:4c:da:07:6b:b2:
                    a4:d1:85:4a:52:ae:43:90:9e:8b:3e:f6:16:1f:fc:
                    64:46:c3:2e:18:ff:74:4c:f0:b0:35:b9:d6:41:a5:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:55:84:54:C7:E6:F7:78:68:6B:A3:B2:44:77:91:14:A0:85:70
            X509v3 Authority Key Identifier:
                keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:84:3f:fa:d0:d0:10:a4:bd:2a:5a:6c:0b:5e:d0:8c:a0:
         1c:86:35:86:92:0a:79:48:3e:07:84:89:a1:1c:ab:19:91:c5:
         ff:a5:c9:36:0a:c4:54:7d:88:70:d0:38:a1:2b:15:48:20:8e:
         19:c7:64:86:c3:c9:84:3c:b2:86:a1:81:6c:ca:67:46:51:f6:
         45:98:57:4a:25:89:fd:95:a6:68:fd:06:2a:d1:5a:84:ce:48:
         e8:4b:fd:54:00:82:52:29:cb:61:1b:58:ac:fb:42:be:a6:48:
         90:23:44:69:a9:68:aa:9b:19:d4:39:ab:84:c1:d0:64:5b:b1:
         57:e2:72:39:3e:83:61:03:a9:9d:e1:cb:61:03:aa:88:0a:61:
         ef:c2:d3:3c:96:28:a9:db:23:87:09:71:fa:03:81:5b:e8:71:
         ed:70:d5:25:50:fe:f7:f6:09:53:de:ec:a6:ac:57:9f:4e:1a:
         cc:9d:7b:f3:c6:93:8f:19:eb:df:42:d4:f1:37:7d:11:a8:7c:
         e6:57:29:9f:68:f9:79:8d:2a:31:f0:ad:89:5b:4d:9b:91:79:
         29:a0:db:dd:69:50:e7:2f:b4:fa:37:bb:b9:be:ba:c1:1d:b1:
         72:b3:8b:0d:86:29:8a:fc:8b:6e:93:81:70:b9:13:5e:b2:8d:
         7b:0f:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:39:10 2025 by rpki-client