Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          gY+tXVtOjieKsMu9BlSNVK54pfI9GJ1+w2CyOuWnM1o=
Subject key identifier:   59:FE:AA:D6:D0:66:2E:34:C5:F1:8E:4A:A7:64:99:80:C5:2F:BE:0D
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       01984A41535CD983FCDFEF3D8396784B593E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          1606
Signing time:             Sun 27 Jul 2025 05:00:51 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:51 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:51 +0000
Files and hashes:         1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
                          2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
                          3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
                          4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
                          5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
                          6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
                          7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: R6GswYy+WYyu/5yXwDAEc7NeoYjcQg+iZwI68W4c6qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:53:5c:d9:83:fc:df:ef:3d:83:96:78:4b:59:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Jul 27 05:00:51 2025 GMT
            Not After : Jul 28 05:00:51 2025 GMT
        Subject: CN=59feaad6d0662e34c5f18e4aa7649980c52fbe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:94:ab:75:99:57:3d:b2:a2:f0:d6:b5:0e:
                    cf:60:59:6e:99:fc:6c:f5:7f:0d:b4:82:c2:18:ba:
                    5e:49:6b:74:89:b1:96:46:cc:b3:66:8f:85:54:9a:
                    76:85:95:81:e9:c0:c9:fe:16:5c:c5:f1:a6:d7:46:
                    30:f2:7a:43:8a:75:d6:79:c2:c8:44:eb:21:1d:91:
                    9e:7b:1c:af:2d:2f:bd:59:2d:5a:49:c6:7b:82:9b:
                    2e:6c:bb:84:7b:5e:64:64:f2:cf:e2:3f:61:7e:e7:
                    00:27:5e:73:c3:81:91:4b:a9:8f:83:7e:86:83:73:
                    60:88:a3:43:4a:68:87:3a:33:88:d7:fb:13:59:a3:
                    e5:f5:99:5d:a8:a4:e0:b1:30:fa:f2:d6:28:3e:61:
                    00:3f:99:8f:0f:43:fb:c8:95:37:3b:9e:78:b3:68:
                    b2:1c:e6:1a:e1:c6:7b:53:e2:d2:9b:5f:d1:36:c1:
                    0b:6a:17:dd:67:b4:d6:b9:77:5c:d8:b0:03:44:2f:
                    61:25:44:d2:87:dc:33:91:3a:25:35:27:09:a4:f7:
                    3e:8b:26:fe:3f:2a:fc:be:aa:7b:4d:24:98:d8:44:
                    92:9a:48:d9:1e:23:6b:b6:09:ef:3b:96:45:21:8d:
                    ee:31:2d:f4:7d:0d:26:14:b7:a4:e0:cf:e9:c5:2a:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:AA:D6:D0:66:2E:34:C5:F1:8E:4A:A7:64:99:80:C5:2F:BE:0D
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:ba:95:35:56:94:5b:55:41:5b:6e:93:2b:45:6b:57:40:
         ea:24:e7:43:b8:8e:72:27:2c:50:61:16:99:c7:f5:9b:50:e2:
         4e:08:dc:00:6b:ec:b0:df:31:33:e0:1e:e1:21:45:6b:89:14:
         fb:b2:19:11:bd:09:9b:23:5f:bf:4c:94:4e:75:dc:4d:61:58:
         aa:9e:62:dd:fb:c0:e0:22:ff:92:2c:74:bd:f7:52:4c:15:f7:
         cf:9b:99:aa:2d:65:ac:c6:f1:be:d6:65:50:be:82:be:fe:f8:
         0a:f2:9a:c1:83:a7:ef:fc:c6:0a:07:d5:5e:70:47:64:24:14:
         3e:0b:69:b1:be:01:ae:01:31:18:87:40:ab:d7:35:21:6b:02:
         56:ad:db:d2:6e:c1:8d:f2:ef:19:1a:f4:32:67:be:e0:48:5a:
         3b:ed:85:91:b4:b1:19:65:f0:d9:eb:d3:8a:db:c5:f3:51:9e:
         54:c0:40:c4:17:95:1f:ff:41:8e:c3:29:f1:6f:97:5a:12:1d:
         24:b9:f5:19:3f:c4:f3:04:69:ea:d6:94:13:20:49:2b:cf:e4:
         d2:73:63:a8:95:b4:bd:d5:3f:ca:8d:95:bd:ec:34:d3:32:65:
         88:87:cd:f4:6c:bd:7a:8f:e1:d2:47:e1:30:9d:8b:68:d6:5a:
         8f:c1:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:39:35 2025 by rpki-client