Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          gGm15Pvch6b077B9vy/WXQHEVSDQuR70OeXOuiFhJKs=
Subject key identifier:   2C:00:5D:A3:5E:C8:C0:0C:8D:DA:83:52:83:D4:2E:EA:8E:0F:E6:E1
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       0197B77C36509AD34F49B6C75F441C68164B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0B8A
Signing time:             Sat 28 Jun 2025 17:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:00 +0000
Files and hashes:         1: FLJVwq3wzQuxp8jY2tLAT-Rnh-Y.roa (hash: BIb7Su95oQINtrVuibHjqkXlgWcfxoPczkywr4wwUxM=)
                          2: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
                          3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: CLvqpJeWQW+AmzVoQNEInL2H0izxKBWMbOUMRbitTHw=)
                          4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
                          5: atNz0WdRnHANtOvahe4tYSXD9RA.roa (hash: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=)
                          6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
                          7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:36:50:9a:d3:4f:49:b6:c7:5f:44:1c:68:16:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Jun 28 17:01:00 2025 GMT
            Not After : Jun 29 17:01:00 2025 GMT
        Subject: CN=2c005da35ec8c00c8dda835283d42eea8e0fe6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:ba:a2:9e:81:41:f1:ac:e3:ac:2d:58:36:
                    94:a9:46:1e:0f:57:67:ea:4c:75:b8:cd:46:39:db:
                    2e:e6:11:f3:5d:d8:64:c9:56:9a:7f:ea:85:19:34:
                    76:fb:22:aa:a0:c9:b0:22:15:5e:63:8c:cf:ed:7b:
                    24:8e:2a:40:6d:cb:4d:b9:80:fe:ab:42:56:66:a2:
                    82:e4:74:b9:a4:bd:88:e1:5a:41:37:38:0c:43:f0:
                    f3:74:98:0d:68:51:41:a9:f8:32:a5:3e:98:b5:d0:
                    fd:a5:81:45:0a:a3:da:ab:01:4b:a3:eb:22:15:31:
                    eb:0f:90:7b:76:7f:d7:4f:bc:3c:77:92:74:48:d8:
                    92:78:93:39:5d:fa:de:a2:a4:ec:05:01:23:f2:e6:
                    cf:f2:61:71:af:30:9e:bc:34:e2:ea:1f:db:8c:30:
                    33:0a:74:cb:21:3c:9e:bf:f3:a9:54:64:7b:5e:99:
                    60:36:c9:b5:d7:d1:a5:7e:ab:5a:90:39:a2:04:a9:
                    a3:0b:b1:a2:13:a6:82:ba:9e:5e:2c:13:f7:51:d8:
                    18:89:84:e3:ce:19:d0:1d:30:0f:e7:3f:36:66:57:
                    14:38:43:15:2a:41:01:e6:93:4c:6f:ad:53:6c:2b:
                    9d:05:51:d4:3e:e9:28:8d:37:99:69:1a:bf:59:6b:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:5D:A3:5E:C8:C0:0C:8D:DA:83:52:83:D4:2E:EA:8E:0F:E6:E1
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:b7:a5:69:b7:0a:a3:bc:06:ad:f5:5e:92:b5:7b:6b:6b:
         0c:60:1a:d7:54:45:71:a9:4d:1c:6d:3f:f6:78:3c:51:46:76:
         90:a8:0c:99:9b:22:9e:41:cd:1a:d1:86:ec:e4:1d:a6:eb:db:
         91:ac:ff:19:18:cc:27:5d:23:6f:a8:12:0d:fc:92:3f:20:66:
         2c:f2:69:82:dd:a9:66:e4:13:c6:a4:af:67:2b:04:b7:70:b2:
         01:15:c0:17:04:6f:c4:97:27:f7:da:8e:1e:0b:5c:c5:5c:47:
         52:8b:e3:19:52:b7:0a:ee:c1:11:d6:44:4e:81:d7:20:cb:b3:
         1d:ed:a2:52:fe:9e:55:3b:d0:6d:87:05:79:7d:56:b8:e7:1a:
         fd:b1:04:f3:9d:dc:51:84:a4:38:1c:62:da:b2:d0:63:65:87:
         0c:38:8f:d3:8e:64:e6:4d:fb:c6:7c:0a:96:fb:d7:5f:37:8d:
         79:ca:fe:05:de:c8:44:e5:0c:f4:ea:d6:15:32:0a:9f:04:88:
         7f:66:71:f0:18:6d:c5:c7:9b:41:72:b2:30:1f:a1:c2:ea:b9:
         03:39:bb:da:77:24:3f:47:96:67:90:10:76:93:ea:78:25:48:
         b3:9c:88:39:77:9d:5a:42:5b:ec:d8:a0:65:36:d0:50:b1:09:
         8b:62:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:38 2025 by rpki-client