Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File:                     Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier:          dNBNVX8BlXfgAfSb6wOWXWz9rWriKhcicPvEq8K4D0w=
Subject key identifier:   F0:7D:8C:D8:5F:15:93:2C:79:71:CE:9C:3F:49:93:07:36:B3:E3:C2
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       01983427F9A510D06B48086C41E47A784DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number:          1610
Signing time:             Tue 22 Jul 2025 22:01:31 +0000
Manifest this update:     Tue 22 Jul 2025 22:01:31 +0000
Manifest next update:     Wed 23 Jul 2025 22:01:31 +0000
Files and hashes:         1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=)
                          2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=)
                          3: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=)
                          4: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: Il8+/64Cvoev+Je7/cYfyogZ0/LIYQfbyUFcnFrUAeg=)
                          5: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=)
                          6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=)
                          7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=)
                          8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=)
                          9: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=)
                          10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=)
                          11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=)
                          12: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=)
                          13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:27:f9:a5:10:d0:6b:48:08:6c:41:e4:7a:78:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Jul 22 22:01:31 2025 GMT
            Not After : Jul 23 22:01:31 2025 GMT
        Subject: CN=f07d8cd85f15932c7971ce9c3f49930736b3e3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:e4:74:fb:06:31:b3:c3:1b:f3:b0:67:31:
                    70:bc:4d:71:af:3a:9f:5c:65:fb:9b:98:0f:c9:8a:
                    1c:a2:14:00:20:7e:ae:ce:e2:cc:36:9a:2a:25:19:
                    21:14:ab:26:26:71:1d:87:91:9d:d9:23:33:d2:e6:
                    68:57:44:91:2a:0f:1a:71:07:d8:27:6c:eb:38:52:
                    e1:9b:21:02:dc:18:1e:96:b3:a1:d4:83:09:83:ae:
                    f0:4a:81:63:ed:77:11:dd:9a:3c:fd:e3:d7:c4:64:
                    89:1e:05:64:ed:b0:f1:d9:e6:bc:1e:53:7c:1e:43:
                    8b:60:4d:bb:ff:38:e2:ea:8e:51:9c:7c:55:d1:b2:
                    29:21:bc:ba:84:77:1d:c0:69:d2:5a:f9:38:98:bf:
                    1b:e6:8e:e3:61:a1:1d:2d:b0:d0:16:1b:fb:88:8c:
                    a7:17:c4:80:07:1d:4f:fe:b2:b9:85:bb:2c:85:0e:
                    aa:d2:1d:66:9c:bd:31:6b:27:66:a2:c2:df:e1:56:
                    6d:57:b1:ac:f0:59:3f:4e:cf:a0:4f:15:8e:f4:e2:
                    fd:0b:df:93:65:83:53:ae:fc:99:5d:07:3b:f9:b3:
                    af:a4:07:77:af:f6:15:cc:53:82:5c:42:30:5e:9d:
                    c1:67:e8:c8:ed:27:74:c8:c9:a0:07:39:ad:54:92:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7D:8C:D8:5F:15:93:2C:79:71:CE:9C:3F:49:93:07:36:B3:E3:C2
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5f:87:7f:ce:5c:c7:93:e4:ce:a1:0d:3e:23:7e:bb:86:6e:
         0f:e0:9b:ee:cb:76:be:20:aa:b8:4d:0f:20:ee:67:d8:b9:0c:
         7d:3f:91:1e:77:25:3f:f9:e3:95:2a:2b:3a:ae:25:4f:b5:09:
         f4:d9:bb:ab:db:b2:4a:ae:c2:98:e4:a2:e1:fe:98:0e:50:bb:
         de:9e:39:39:b5:a4:2e:3f:d1:ff:19:bf:7a:b0:f2:56:d4:f9:
         74:1c:48:3f:4a:7d:8d:b9:94:e4:85:67:c9:ed:33:30:54:9f:
         1e:4a:b8:49:0b:a2:95:3d:96:d6:ed:14:c8:57:de:7d:ed:b0:
         2d:06:7e:55:22:9e:40:31:64:c3:df:38:0f:a8:3d:1c:f2:f1:
         82:84:0e:fc:c3:76:dd:0c:4f:58:4a:50:34:2c:a8:43:b3:93:
         01:69:fb:aa:cc:ef:b7:c5:ba:5e:cd:2e:bc:1a:d6:1a:9a:29:
         f2:89:56:75:ec:9d:14:eb:35:d7:85:41:72:15:6f:66:33:53:
         ec:ff:24:11:fc:27:55:44:9b:3f:d5:b0:a1:2a:da:30:64:e5:
         bf:fd:8b:86:de:cc:10:bf:45:81:7f:cc:8f:f7:e3:37:86:17:
         fa:15:b2:15:38:a8:dd:34:90:70:b4:bf:04:e4:fe:68:63:e9:
         b8:dc:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:08:38 2025 by rpki-client