Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          5q5sovNb9IdO026+ct356M0rvqQ64ufvGpdr8Mq8/MM=
Subject key identifier:   03:43:4E:AB:82:11:5E:A6:A8:C5:78:D7:39:90:5F:1D:89:71:FE:8A
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       0197B857B087AF21A791C37138B2E8DF96EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0F92
Signing time:             Sat 28 Jun 2025 21:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 21:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 21:00:43 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
                          3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: iqO7+0/DUeQugGYybaJcpIDChjZjv0IKWnV8IOFRBh0=)
                          7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:57:b0:87:af:21:a7:91:c3:71:38:b2:e8:df:96:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Jun 28 21:00:43 2025 GMT
            Not After : Jun 29 21:00:43 2025 GMT
        Subject: CN=03434eab82115ea6a8c578d739905f1d8971fe8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:23:1c:aa:fb:14:1c:ba:a7:2d:4d:26:3b:
                    e8:38:3d:a1:a9:2f:4c:55:7b:bb:55:52:22:7f:e0:
                    63:e7:4b:f3:fb:4b:dc:16:21:72:3a:0b:52:f1:d8:
                    3c:3f:88:2b:65:db:51:da:e0:52:a6:2a:dc:84:5e:
                    6a:b0:a7:d7:12:d6:1d:d9:dc:a6:a5:81:52:cf:c4:
                    c2:9e:58:9b:4a:2e:af:5f:95:bd:d5:2f:49:ca:90:
                    56:c1:31:5e:92:03:83:d5:4c:f7:cd:de:f0:84:f6:
                    bc:d5:3e:e8:ca:50:46:78:f0:0f:ce:3c:3e:e2:84:
                    f0:ca:0a:60:11:84:27:d5:3a:cf:d5:d9:cb:32:dd:
                    fa:fd:1e:40:74:9b:a6:3d:18:dd:ed:40:b7:89:a3:
                    ea:9c:a2:04:bd:93:00:9b:d1:43:3c:42:c4:38:99:
                    6a:34:62:0a:17:bd:de:ca:80:6e:1f:a7:80:41:58:
                    ce:9c:17:47:de:f3:19:78:d1:3c:ed:b6:e0:59:f3:
                    d2:cb:f7:8a:96:9b:d2:d6:00:bb:cf:98:89:f9:18:
                    09:d8:1d:f7:5e:cd:86:bf:cf:17:0e:fd:53:31:35:
                    bc:5c:5c:6a:c9:19:8f:d6:08:e5:a2:51:fb:71:80:
                    6d:b8:e4:31:40:b4:9d:98:e0:a6:69:a6:d2:e8:c2:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:4E:AB:82:11:5E:A6:A8:C5:78:D7:39:90:5F:1D:89:71:FE:8A
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:41:5d:62:da:f2:33:1d:be:d6:47:06:5f:bc:5a:4d:a6:db:
         1d:37:69:0a:47:76:b3:32:5d:a2:48:3b:ca:8d:3a:b6:e2:b3:
         83:5f:0e:2e:2d:e9:c3:a8:63:c3:0f:32:44:97:51:77:53:b4:
         f3:4b:2d:b2:4c:3d:3a:b9:9d:9f:16:a0:e0:10:70:a1:3d:6b:
         a7:b9:36:2e:33:a3:93:34:ea:5d:8a:04:e3:31:f5:9b:cb:3a:
         d0:64:d9:df:51:f4:11:41:d8:b7:2a:43:ea:11:ca:26:d1:c5:
         2a:da:43:e9:cb:ad:c3:f9:ee:4f:75:c3:bf:0b:cd:a6:5e:00:
         bf:2f:18:db:1f:51:cd:90:f1:42:f5:fc:94:f8:97:a3:79:e8:
         6b:c7:1b:89:3b:e1:b2:54:95:d3:3b:3e:d7:9f:61:f0:ae:a4:
         6f:6f:44:f0:f5:4f:ec:2d:00:20:69:d2:77:a8:35:40:c5:b0:
         d3:a1:bb:45:ba:af:6c:9a:38:f9:06:65:fe:91:95:93:4d:1d:
         4a:a1:05:ce:31:0e:1b:6f:8a:c2:1e:3a:f4:f3:c9:5d:78:da:
         2a:c5:26:94:e4:dc:b1:4f:30:10:b9:f7:58:99:33:8a:39:86:
         bb:d0:95:45:16:f4:74:10:33:bf:b9:9b:7e:76:06:67:84:3a:
         7c:bc:b6:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4V7CHryGnkcNxOLLo35bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD
EygwMzQzNGVhYjgyMTE1ZWE2YThjNTc4ZDczOTkwNWYxZDg5NzFmZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGojHKr7FBy6py1NJjvoOD2hqS9M
VXu7VVIif+Bj50vz+0vcFiFyOgtS8dg8P4grZdtR2uBSpirchF5qsKfXEtYd2dym
pYFSz8TCnlibSi6vX5W91S9JypBWwTFekgOD1Uz3zd7whPa81T7oylBGePAPzjw+
4oTwygpgEYQn1TrP1dnLMt36/R5AdJumPRjd7UC3iaPqnKIEvZMAm9FDPELEOJlq
NGIKF73eyoBuH6eAQVjOnBdH3vMZeNE87bbgWfPSy/eKlpvS1gC7z5iJ+RgJ2B33
Xs2Gv88XDv1TMTW8XFxqyRmP1gjlolH7cYBtuOQxQLSdmOCmaabS6MIzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANDTquCEV6mqMV41zmQXx2Jcf6KMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0FdYtry
Mx2+1kcGX7xaTabbHTdpCkd2szJdokg7yo06tuKzg18OLi3pw6hjww8yRJdRd1O0
80stskw9Ormdnxag4BBwoT1rp7k2LjOjkzTqXYoE4zH1m8s60GTZ31H0EUHYtypD
6hHKJtHFKtpD6cutw/nuT3XDvwvNpl4Avy8Y2x9RzZDxQvX8lPiXo3noa8cbiTvh
slSV0zs+159h8K6kb29E8PVP7C0AIGnSd6g1QMWw06G7RbqvbJo4+QZl/pGVk00d
SqEFzjEOG2+Kwh469PPJXXjaKsUmlOTcsU8wELn3WJkzijmGu9CVRRb0dBAzv7mb
fnYGZ4Q6fLy2dg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:32 2025 by rpki-client