Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          wDq9tC4Dw9rnB1h7sJRwn233frQfDMapoGD8zIk57Bk=
Subject key identifier:   0B:77:21:24:9D:08:5F:C0:2E:06:8F:F6:30:33:4B:55:33:2D:B4:90
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       0197B70EE7BBD2B870B14385208D8F316F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 15:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:36 +0000
Files and hashes:         1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
                          2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
                          3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: 9FhawLOwRdYdLtIWySYLhUwgUWUAkvjy2385XME++S0=)
                          4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e7:bb:d2:b8:70:b1:43:85:20:8d:8f:31:6f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Jun 28 15:01:36 2025 GMT
            Not After : Jun 29 15:01:36 2025 GMT
        Subject: CN=0b7721249d085fc02e068ff630334b55332db490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:10:68:1b:39:80:9a:c9:31:06:c4:df:19:11:
                    8b:4b:96:cb:f2:53:1d:34:28:1f:ff:f3:82:2d:21:
                    cb:7e:5d:ae:e0:86:15:bb:a2:23:01:49:0a:70:b2:
                    a5:d2:1c:ff:31:ea:2a:78:8c:ba:0c:40:34:5b:c9:
                    f6:78:03:48:5d:0b:72:10:b9:71:2a:94:82:0d:fa:
                    4b:df:c2:95:d8:9c:22:32:e4:13:68:9f:94:a4:f6:
                    a6:7b:4e:28:dc:af:38:3f:4f:bf:ed:45:39:5f:47:
                    bd:51:d1:ea:90:6e:8b:2d:0b:12:82:16:17:73:0f:
                    5d:25:0c:07:69:a3:01:8a:b8:b0:8f:68:af:44:fc:
                    9f:81:fa:76:a8:d9:19:8f:c4:ac:bd:2b:a6:fb:bc:
                    66:51:4e:be:21:12:38:bf:f6:79:e5:9c:f5:4f:c2:
                    04:93:13:53:ed:56:9f:59:cb:08:34:47:fb:0d:85:
                    4d:bf:9f:27:17:6b:cd:36:48:e1:49:a0:b7:a7:af:
                    b1:66:5c:4e:11:0b:e7:32:29:aa:16:ff:47:80:e6:
                    44:5b:d1:5c:39:4f:6b:7d:d4:f9:0a:e7:5b:47:65:
                    e2:df:39:df:d0:00:e6:bc:db:64:a2:e2:a6:0c:40:
                    04:5d:c8:dd:c5:64:32:27:f0:46:98:a3:b1:1b:47:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:77:21:24:9D:08:5F:C0:2E:06:8F:F6:30:33:4B:55:33:2D:B4:90
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:70:4a:01:28:d0:4e:78:f1:75:c7:bc:0e:b3:0d:21:8c:
         c6:a5:39:aa:8f:c3:c3:4a:01:49:dd:18:9c:ca:6b:9a:02:9e:
         ec:64:b7:90:75:0e:c6:e2:a3:3b:43:9d:c7:04:38:93:1e:08:
         ed:dc:4c:9c:1a:90:fc:6d:1b:41:15:bb:ae:37:f4:9d:25:15:
         dd:ae:2a:28:04:6c:d8:55:bc:79:21:2e:c5:ab:db:c4:c6:0c:
         13:1f:a1:94:d5:6c:e6:a2:5f:23:30:00:e7:81:12:17:c3:86:
         dc:21:21:4f:ca:5c:df:75:7d:d2:52:93:09:35:1c:46:13:42:
         0c:8d:c1:4c:b2:98:36:fa:51:75:b6:f0:12:0d:ea:ee:23:8b:
         cc:2b:33:4c:d9:9a:6a:f2:3f:55:4a:3c:1c:45:d8:f2:58:4a:
         14:5a:7a:6a:31:3b:32:bc:6a:81:09:0a:fc:96:a8:87:5a:e8:
         26:aa:db:9b:50:fd:77:38:da:71:b6:22:0d:b9:a3:fd:f9:5e:
         1c:94:61:68:44:d0:ab:a4:3a:f9:6d:75:a5:f5:62:6f:80:dc:
         bb:2f:d0:9b:d4:be:03:4f:fa:f6:e3:13:d7:7e:cd:38:c4:1a:
         4d:77:65:c7:8d:2a:c8:9a:cc:2b:54:0b:20:e7:92:ac:81:95:
         14:97:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:49 2025 by rpki-client