Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File:                     oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier:          UWfu1qAr7SzobEJgbNktaxMkpsOquc9Wfngqhzw8oac=
Subject key identifier:   76:82:D3:E3:53:B0:CC:D8:0A:BF:D4:81:A4:1E:5C:E8:73:D5:4E:5C
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer:       /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial:       0198466449CD6767EAA400D21FD5FC93F972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 11:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:34 +0000
Files and hashes:         1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: G3lXVqHgec/zMHmKthQ5dhO9rIxGQDKiXx/wOWef8QA=)
                          2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:49:cd:67:67:ea:a4:00:d2:1f:d5:fc:93:f9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
        Validity
            Not Before: Jul 26 11:00:34 2025 GMT
            Not After : Jul 27 11:00:34 2025 GMT
        Subject: CN=7682d3e353b0ccd80abfd481a41e5ce873d54e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:6b:2b:22:8f:52:54:03:da:8f:9b:c0:0d:
                    a1:98:15:28:5a:c9:7f:11:76:b8:f2:57:6d:05:7c:
                    29:92:42:e2:fb:ad:84:f2:54:35:2d:b8:d0:67:6f:
                    c9:11:d6:0e:22:64:6c:e6:5d:82:b9:b5:bf:3c:45:
                    d9:60:c7:d8:c9:79:c3:5e:37:91:77:99:48:f3:69:
                    ef:19:44:73:3f:d5:21:05:9e:69:bf:51:a5:64:9e:
                    85:49:46:e9:07:73:a1:af:1e:37:88:c0:48:7b:e0:
                    16:43:85:2f:b7:ea:dd:c6:20:c6:4f:25:64:ef:27:
                    dd:bd:60:25:8d:c4:99:2b:77:15:93:66:38:75:ef:
                    9b:5f:00:74:d2:0f:94:ba:11:bf:3c:b1:5c:67:00:
                    34:8e:48:e3:5e:e1:23:72:01:4e:e3:14:79:f7:75:
                    5a:fd:dc:d3:c6:b0:37:c5:bb:37:fa:76:ee:97:6f:
                    cb:be:75:8a:1f:75:e3:cb:f7:39:ce:ec:a9:5f:29:
                    c7:d0:45:90:db:6a:39:ef:41:a9:16:ab:38:c9:03:
                    d3:c7:2b:1d:1e:02:23:1d:22:e0:c8:be:aa:f6:58:
                    b3:4f:37:fd:0b:ac:28:a7:d4:ac:b0:c8:82:89:36:
                    c0:5b:d2:74:9c:6e:65:dc:f0:8a:a3:c4:a3:b8:bf:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:D3:E3:53:B0:CC:D8:0A:BF:D4:81:A4:1E:5C:E8:73:D5:4E:5C
            X509v3 Authority Key Identifier:
                keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:ba:0c:6b:2f:9a:ae:dd:ec:f3:c4:66:13:3a:65:fc:29:
         9e:c1:56:da:80:1a:25:d2:e0:d2:42:f5:6e:55:37:a4:96:9e:
         e2:f9:92:54:1f:0f:b7:05:23:b3:9c:b9:9f:74:9b:3f:dd:71:
         aa:3c:75:99:67:05:4f:01:47:2b:57:72:1e:65:e8:f5:bf:9a:
         50:2d:df:b5:ed:0f:e7:08:38:9a:7e:76:db:aa:53:63:c0:97:
         c4:56:dd:fe:2a:0f:77:9a:42:40:c2:27:e7:0b:0a:a8:cb:b0:
         83:79:8a:aa:67:35:44:4a:08:77:46:a9:af:29:13:5c:45:12:
         bb:b5:dd:44:86:e4:19:aa:66:51:bd:2d:bb:a3:08:35:7d:09:
         21:eb:87:d1:a1:71:2f:df:65:89:51:10:e2:09:24:a0:87:a0:
         ce:9c:d4:87:87:0f:c9:0e:fb:c0:01:f9:e3:18:7a:bd:d7:17:
         aa:d3:67:72:02:f9:5c:fa:63:42:4f:bc:0f:6c:65:5e:0a:0c:
         43:52:dd:9a:f7:f6:e0:82:0b:f2:45:57:34:24:b1:cd:82:d1:
         2c:f1:69:ab:48:77:a6:36:56:bd:5d:46:de:cf:56:42:a0:a8:
         62:86:ad:88:67:46:34:4e:c9:b3:e7:c7:72:a5:db:9d:17:2e:
         f9:87:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:24:43 2025 by rpki-client