Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File:                     oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier:          83o2TnnkIid1EddvJXdUsKcN2TohjJpm2KZJdHoOKpE=
Subject key identifier:   11:E0:40:AE:44:47:D1:EE:84:72:F6:2C:F5:E7:6A:87:D7:79:2F:7C
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer:       /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial:       01985231C2688F849563CCE7146F307CEBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number:          0778
Signing time:             Mon 28 Jul 2025 18:00:49 +0000
Manifest this update:     Mon 28 Jul 2025 18:00:49 +0000
Manifest next update:     Tue 29 Jul 2025 18:00:49 +0000
Files and hashes:         1: RgkGs56a3wBSH0Yhny04eNJEX3I.roa (hash: 1WUdRWIGnTtyys0okmGp0iV2hIZohfzABaDiV/G7uDo=)
                          2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: 7YcL9ABw2mfff6/NRqHxUJLnPGsQ1jMl69b2LtuYLjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:31:c2:68:8f:84:95:63:cc:e7:14:6f:30:7c:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
        Validity
            Not Before: Jul 28 18:00:49 2025 GMT
            Not After : Jul 29 18:00:49 2025 GMT
        Subject: CN=11e040ae4447d1ee8472f62cf5e76a87d7792f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:0b:b1:bb:d4:51:97:2a:6f:03:a6:6e:33:
                    b7:47:6f:66:a1:d4:37:8d:e5:3a:9f:ff:d3:27:bf:
                    6c:5c:56:0f:e2:35:3c:64:c6:49:ae:85:d3:36:b4:
                    d2:87:f4:7e:41:a1:a2:d6:59:37:4b:cf:ac:85:52:
                    6f:04:5f:76:07:81:ba:22:2b:55:87:a3:b8:3b:69:
                    50:ed:c2:63:9f:7f:7d:5d:fb:e4:92:b0:83:fe:4a:
                    e0:92:81:d7:af:63:45:1d:ba:e8:40:a5:c9:af:02:
                    a7:ee:b4:67:22:aa:8e:7c:1c:ec:00:13:29:1e:23:
                    60:02:36:51:28:d9:32:d1:6e:a5:b6:89:50:e9:8c:
                    53:60:de:c3:0e:93:a7:31:d3:72:08:7d:21:3a:9e:
                    a1:f4:b7:70:09:5a:13:4c:80:db:3c:ba:7e:e8:68:
                    f7:5b:1b:f3:ac:92:e8:4c:d1:39:d4:7f:3a:1d:dc:
                    70:e7:a7:00:5b:79:d7:60:9a:5b:c4:93:df:27:57:
                    e4:fc:25:00:29:0f:df:ee:6c:c1:cc:30:4a:9e:c9:
                    ef:45:a4:e7:9e:9c:9f:2f:95:41:3f:61:69:4d:eb:
                    6e:31:d4:83:6f:73:bb:30:29:13:47:d6:e0:4b:bc:
                    f5:7b:c4:40:d4:b3:93:8c:48:90:07:41:40:ce:9d:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E0:40:AE:44:47:D1:EE:84:72:F6:2C:F5:E7:6A:87:D7:79:2F:7C
            X509v3 Authority Key Identifier:
                keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:66:72:a4:66:41:cf:24:7d:6a:f8:c3:14:b5:4b:42:17:
         8a:cd:d6:db:ae:73:03:55:64:ea:5b:76:81:e2:66:59:c6:5e:
         a9:55:b3:1f:4c:97:d6:04:d9:7d:24:d3:ed:a6:80:97:5d:1e:
         fb:80:41:ec:16:6a:e4:46:f2:f0:33:c0:b8:1b:e9:14:b6:2c:
         47:b2:67:83:06:35:6d:47:9e:9d:aa:56:02:55:4b:55:9f:18:
         a9:f9:52:76:41:a1:7c:ef:1b:f9:fd:36:3f:6d:fe:8a:1f:06:
         1c:44:3a:40:84:2b:3f:5d:f7:69:b5:ef:d2:82:6c:af:3f:ad:
         b3:f6:c6:a5:98:68:6a:19:03:62:4a:a2:32:ca:49:d1:58:ac:
         20:12:47:3d:d8:12:e8:5f:61:20:b9:2b:46:f4:a1:0b:84:d2:
         bf:c2:3a:ad:fc:15:a6:97:56:f0:13:f0:0b:f4:5c:70:f2:28:
         8f:fd:c7:90:06:5d:86:6a:e1:8a:9f:0f:24:51:60:40:9d:93:
         5e:41:68:d9:65:3e:5e:8f:cd:52:39:66:5e:95:87:4f:29:18:
         95:d1:54:06:f3:b5:80:9f:45:a1:f8:73:b1:ec:9f:df:d1:0d:
         87:89:f2:3c:c0:63:1e:cb:04:fe:bb:f3:81:e3:80:c6:20:79:
         c8:97:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:49 2025 by rpki-client