Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File:                     ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier:          AhPsFuUJPSmMb/V1BFqexnmSEkxNrx2XSSbeqBL6u28=
Subject key identifier:   38:58:34:5A:98:68:8B:D7:59:00:35:36:A6:D5:F4:3F:19:43:82:97
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer:       /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial:       0198481C0635B69B8A02819188544DE0C259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number:          1592
Signing time:             Sat 26 Jul 2025 19:00:52 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:52 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:52 +0000
Files and hashes:         1: KVm2tYPFHZBApahJuh-yFMOKwBk.roa (hash: wUvjfCvCqFvECtRMSyawvlGReq6AkWwtmpZ7EFcDmTk=)
                          2: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: IbxioiKH+3LIBbac7juTTOp6FZC7bfFv63gYTZ2/dMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1c:06:35:b6:9b:8a:02:81:91:88:54:4d:e0:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
        Validity
            Not Before: Jul 26 19:00:52 2025 GMT
            Not After : Jul 27 19:00:52 2025 GMT
        Subject: CN=3858345a98688bd759003536a6d5f43f19438297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:71:db:ed:55:9a:e5:f4:2b:86:46:c1:91:
                    dc:40:53:42:2d:dd:6b:6e:af:46:4f:6b:77:75:f7:
                    f4:f6:76:6d:00:81:29:58:10:fa:de:32:4f:d3:e9:
                    67:da:60:35:e5:8f:5a:c2:0c:fd:0c:39:e2:01:43:
                    1b:5f:62:c2:6f:51:eb:92:6a:0f:5f:e2:58:68:f9:
                    49:0d:c0:42:4f:8f:25:b5:ab:21:be:3f:22:99:43:
                    5f:b1:45:98:bb:d3:1b:76:6e:59:a6:3f:0a:98:1b:
                    a7:fd:6b:41:1c:ba:74:d1:da:a1:21:0e:af:df:89:
                    82:60:79:71:dc:c5:34:5a:0e:d2:b8:12:8d:43:fb:
                    c7:3e:23:81:7e:12:17:e3:da:5b:e3:6a:e0:b2:8f:
                    20:10:e7:44:f7:92:8e:07:ca:c6:57:34:ef:bb:f7:
                    22:d4:af:8d:19:bf:22:91:b7:5b:c6:e4:68:e3:c4:
                    78:94:69:6e:24:7a:c5:7f:c8:21:11:37:39:da:ae:
                    7a:c1:79:a9:37:9e:fa:de:a8:af:5e:f5:1b:d0:9b:
                    e5:28:fd:ed:9b:28:0a:d1:76:42:e1:d7:b3:42:3c:
                    7f:d6:62:8c:cb:6d:47:66:3c:76:21:0a:37:22:a1:
                    5a:58:82:a9:40:d3:44:da:5e:22:47:fa:10:95:39:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:58:34:5A:98:68:8B:D7:59:00:35:36:A6:D5:F4:3F:19:43:82:97
            X509v3 Authority Key Identifier:
                keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:23:79:94:30:cc:17:59:af:42:52:6c:50:8f:8a:62:98:
         58:16:bf:88:ae:86:90:8a:ed:01:41:1f:26:90:a1:58:38:2b:
         cd:6e:4b:4f:53:fa:ee:a7:6a:76:e6:40:9f:8c:35:5d:a7:f2:
         1f:c8:10:df:b0:aa:f9:2b:23:c7:a7:45:77:06:1d:1d:47:be:
         45:1b:d5:27:1f:38:a0:ef:9f:94:50:5e:96:3f:2b:db:bf:e8:
         03:33:96:9a:5b:54:b1:11:18:52:73:30:48:8a:ef:9e:57:bc:
         ce:01:01:b9:44:f0:79:66:5c:66:06:8c:04:72:f6:0d:84:98:
         7b:c7:bd:87:75:ad:14:83:7f:c0:3c:de:e9:c7:32:dc:17:45:
         73:05:1c:f2:38:c0:ac:76:c3:06:8b:0d:f2:db:a7:67:b9:fe:
         a6:48:72:e0:c9:0d:aa:f8:7c:97:5d:54:5c:e5:f1:bd:21:af:
         77:89:97:fe:7e:07:5b:43:5d:65:e6:8e:c7:5b:2f:6a:98:cb:
         a6:71:0e:82:3b:51:48:4f:32:38:29:45:20:8b:ad:0d:41:7f:
         94:54:e1:67:8c:f8:5a:6f:98:98:10:ad:c0:c1:96:f8:7e:a1:
         2d:e5:0f:3a:19:e0:ec:ee:8f:75:38:47:28:72:70:9e:49:93:
         08:e8:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:14:24 2025 by rpki-client