Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File:                     b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier:          WRQpGp8Fr6wrfxn8l1bngJyllkjZ7XCthuocI5cJ6lE=
Subject key identifier:   5B:33:EB:BB:63:69:0F:25:B3:CF:4A:34:C8:CB:DD:E8:4E:78:22:B4
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer:       /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial:       01984AAF53E5596CE08BDF690A5EF76D44D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number:          1594
Signing time:             Sun 27 Jul 2025 07:01:00 +0000
Manifest this update:     Sun 27 Jul 2025 07:01:00 +0000
Manifest next update:     Mon 28 Jul 2025 07:01:00 +0000
Files and hashes:         1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
                          2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: ycO572kQTeimJZsroWCXPLyi/qTQBnJcZefTNpq9M3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:53:e5:59:6c:e0:8b:df:69:0a:5e:f7:6d:44:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
        Validity
            Not Before: Jul 27 07:01:00 2025 GMT
            Not After : Jul 28 07:01:00 2025 GMT
        Subject: CN=5b33ebbb63690f25b3cf4a34c8cbdde84e7822b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:a4:95:f3:49:64:5c:84:6d:88:80:54:68:
                    80:d5:07:49:de:0b:be:58:1a:eb:b9:ff:89:46:cd:
                    3d:88:d4:b7:31:b7:db:90:9c:36:9a:ce:58:be:c8:
                    53:b8:9e:48:a1:8d:e2:f1:ab:6e:dd:2f:b0:ab:29:
                    ce:b4:0e:97:72:df:52:00:a7:78:3b:5c:66:53:36:
                    e0:5f:b5:72:3f:14:55:7f:fb:66:ed:92:3b:85:be:
                    ee:82:21:97:9d:17:bb:4c:93:df:31:81:10:24:0e:
                    36:62:16:39:e9:2c:9b:fc:06:68:d0:7b:a8:32:63:
                    52:59:e3:52:c3:4a:93:3d:9f:54:c5:ac:7a:9c:c8:
                    82:19:ac:b6:87:c5:14:eb:e4:1d:95:2e:1e:af:03:
                    fe:59:36:09:5b:1f:87:ec:21:9b:31:90:dd:a5:44:
                    47:89:d9:ff:41:ea:62:e5:68:67:2d:66:13:1a:60:
                    bb:c6:a9:18:fb:1d:b9:4b:45:eb:71:46:fa:e6:62:
                    00:a2:a2:15:83:32:75:28:b6:6a:66:11:86:2d:69:
                    f0:dc:83:72:0c:70:0b:15:01:21:50:56:44:7a:bd:
                    dc:b9:ec:34:50:55:c0:a6:53:59:ea:92:07:48:64:
                    83:dd:ae:27:30:1b:c4:02:6d:d9:40:39:61:ed:33:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:EB:BB:63:69:0F:25:B3:CF:4A:34:C8:CB:DD:E8:4E:78:22:B4
            X509v3 Authority Key Identifier:
                keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:18:38:9a:37:a2:8b:71:21:f0:16:53:67:f3:81:cc:7b:
         29:76:4d:e9:04:99:22:ce:7c:46:5c:23:37:f7:95:76:f1:f8:
         5f:5b:54:63:4b:ee:b5:e5:6c:e4:13:64:c7:ef:ba:34:00:06:
         40:b3:b7:28:29:17:4a:a4:dd:fa:00:10:91:a4:02:2d:12:1e:
         14:99:56:63:21:59:1b:50:77:57:53:2c:57:4c:7b:0c:0a:ad:
         d3:c7:a5:7a:65:b4:6d:c6:ce:33:f4:6d:ac:fd:cd:0e:8d:db:
         b8:7b:d3:e7:32:2b:a9:b2:ee:20:9d:97:b6:e3:37:3e:a6:d2:
         04:ff:df:cb:52:40:83:2f:96:5b:8b:d7:6b:42:ad:50:7a:f8:
         80:ea:22:97:f9:6e:ec:ae:06:0c:53:31:58:26:de:4e:b4:33:
         90:9f:03:85:dc:2f:66:3d:38:03:8d:5b:0f:8c:cd:ae:5d:73:
         fa:fc:76:df:a7:5c:34:41:d3:68:66:ec:a8:b0:17:7e:7b:9c:
         5b:6c:d6:d1:f0:54:bb:36:8d:6a:bd:ab:c1:d2:d1:55:c2:bd:
         18:3b:c6:4d:e8:bf:c2:aa:ac:99:4f:37:16:93:80:c0:49:a3:
         04:56:81:00:80:0b:9c:fb:0f:52:67:ed:2b:7e:e3:e4:39:2b:
         fd:00:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:49 2025 by rpki-client