Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          HhXIVjQ8Lh/lwOjgQvVfL/DfXX+uHtTeOICTRHU6f+M=
Subject key identifier:   1B:C7:41:2A:FD:49:07:AC:AF:63:CA:E2:41:61:DC:D7:EA:CD:D1:E5
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       0197B70EBB36180FA1C797E2E4AE4D985A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 15:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:25 +0000
Files and hashes:         1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: 7vdO8F32r7uDbiO3bf+WFY2pwF0eUwmrQBEeALxAIWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:bb:36:18:0f:a1:c7:97:e2:e4:ae:4d:98:5a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Jun 28 15:01:25 2025 GMT
            Not After : Jun 29 15:01:25 2025 GMT
        Subject: CN=1bc7412afd4907acaf63cae24161dcd7eacdd1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:b5:96:da:f5:f3:ac:16:d9:05:3c:d9:ab:
                    9c:41:de:38:50:c6:ec:67:92:66:ee:6d:23:10:3b:
                    7b:be:7b:29:73:2f:6d:3d:77:a2:bd:23:1c:af:5f:
                    28:48:da:56:19:1c:e6:50:0f:1e:5f:23:22:f8:18:
                    11:a4:f2:bd:01:78:b8:7d:ea:bf:4e:19:52:07:41:
                    ea:4a:a9:e4:d2:53:e1:bf:18:f2:a7:5e:b6:d2:28:
                    6f:67:85:74:02:a3:4b:30:85:cc:f5:f9:62:2e:94:
                    c6:12:cf:d2:c3:11:68:47:d9:af:7c:0b:6c:58:20:
                    d3:9e:46:0c:57:f8:7b:c5:45:eb:9d:b2:b7:f5:8a:
                    b8:89:90:74:fd:f6:d9:c3:00:d0:f7:b1:94:88:91:
                    16:68:5b:c1:ab:ed:05:5d:de:81:a4:4d:45:5c:24:
                    91:b5:ca:b1:a5:38:c3:f7:0f:c7:8f:d0:84:ab:70:
                    07:c5:a9:f9:79:3e:03:2f:a1:98:0f:aa:5b:fc:6a:
                    e0:90:6a:70:d6:2f:2d:e0:01:49:20:41:b1:68:1f:
                    3c:4d:dd:25:0d:54:5e:81:1b:0e:f6:26:67:23:2e:
                    f0:57:29:57:fa:c5:e0:5e:60:0e:69:95:9f:01:a7:
                    d5:ec:e1:30:85:6c:83:da:12:fe:08:52:a3:e9:0c:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:41:2A:FD:49:07:AC:AF:63:CA:E2:41:61:DC:D7:EA:CD:D1:E5
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:d7:2a:e6:be:d8:ef:02:8b:c0:4c:de:6b:d6:3e:87:86:
         a3:55:d4:07:64:a6:33:4a:b1:f6:da:85:f2:ed:28:97:58:d9:
         78:f5:9f:d5:1f:2a:8f:8e:bd:3c:78:ad:a3:65:05:58:64:42:
         b7:5f:47:91:9b:2c:9c:83:2b:d5:1c:e2:cf:6e:3f:d3:2d:69:
         6a:4b:9b:50:cd:45:a7:c5:2a:2d:7b:13:03:28:0b:04:bb:05:
         25:ae:b1:c5:a8:df:b2:97:60:53:bc:a4:5b:9b:09:6f:63:03:
         67:d7:7b:ba:97:5f:ec:00:71:19:50:d2:14:57:25:b2:e7:de:
         9f:b9:d3:86:06:2d:08:a7:aa:9a:da:30:f9:ae:9a:a7:75:3f:
         b4:fc:31:98:f8:b6:8d:30:31:a6:03:71:70:38:26:20:f8:51:
         f2:11:53:82:9e:45:58:45:40:9b:03:fc:29:a0:9c:e7:3e:14:
         f8:9b:63:aa:78:3b:a6:19:29:44:b7:00:9f:d1:4c:23:62:aa:
         f1:72:81:56:33:e9:d7:b4:1a:0c:de:21:17:bc:64:8c:99:6a:
         87:04:bc:43:39:76:12:3f:1d:a7:e5:59:3d:ba:e0:7f:9c:b1:
         9c:85:c5:b9:88:42:16:80:75:c5:2a:bf:d2:b7:e9:84:f4:92:
         7c:9a:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:20 2025 by rpki-client