Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File:                     oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier:          NPTgTolJmnDsyzdzrzbWRC+HQovTv8Ta9JdzH7N6IW0=
Subject key identifier:   1A:5A:39:14:B5:34:93:49:BB:54:6E:79:D6:4E:09:78:9A:12:D2:DC
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer:       /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial:       019848F751CAF3C2A796B1A570ED797D81BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number:          077B
Signing time:             Sat 26 Jul 2025 23:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:24 +0000
Files and hashes:         1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
                          2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: RWXa80yy7ttYJQrcFvEaB1gzVYpNFNYhb7imDwr0S5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:51:ca:f3:c2:a7:96:b1:a5:70:ed:79:7d:81:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
        Validity
            Not Before: Jul 26 23:00:24 2025 GMT
            Not After : Jul 27 23:00:24 2025 GMT
        Subject: CN=1a5a3914b5349349bb546e79d64e09789a12d2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:a2:c2:0b:81:ec:51:29:fb:fc:0c:3a:45:
                    99:ed:fe:54:6e:8e:cf:55:98:19:8d:7d:4b:15:cc:
                    94:6b:3a:ae:39:d5:8c:0c:50:53:e6:20:ed:9f:3a:
                    34:03:87:4a:7d:67:5e:ab:4d:bd:3f:d3:fd:31:91:
                    fc:13:01:2d:35:e2:80:81:11:fe:67:a8:02:fd:47:
                    d2:64:a6:3a:b2:b0:05:c4:47:c4:f6:12:c0:d1:e9:
                    43:bc:7e:58:67:8b:fb:55:e9:60:14:ec:64:29:e3:
                    21:45:9c:89:12:55:d4:8a:00:29:1b:c5:c0:32:57:
                    78:65:02:2f:70:5f:5b:cc:b2:63:cf:2a:25:0b:94:
                    9f:4c:30:c6:73:04:ca:b1:cd:10:fe:6a:5a:86:f6:
                    04:6f:92:d6:d0:a4:92:e6:23:d7:a5:d3:c4:2e:77:
                    09:91:bf:b5:9a:ba:2d:f1:d5:6f:12:82:e0:bb:3f:
                    99:de:1c:2e:fb:2a:0e:63:5c:91:e7:ac:61:68:d7:
                    f9:61:1d:de:82:b4:48:2f:1f:2f:ae:98:b9:c8:51:
                    f3:10:6d:c1:48:ef:a0:99:2b:53:0c:e1:3d:ad:71:
                    27:e9:27:4c:87:3e:aa:41:41:aa:89:95:35:0e:fa:
                    9e:44:3d:1d:82:66:94:d2:d4:b6:bb:de:f8:af:c7:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:39:14:B5:34:93:49:BB:54:6E:79:D6:4E:09:78:9A:12:D2:DC
            X509v3 Authority Key Identifier:
                keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:71:c2:28:41:0f:a5:df:bc:0c:78:9c:26:01:f9:ae:c1:8f:
         58:ea:25:e6:71:97:86:03:6e:d7:69:67:69:c5:82:64:64:5e:
         cf:34:ad:46:9a:dc:d1:d4:3d:78:96:f8:22:83:00:3f:9a:6f:
         bc:ea:f3:f9:54:d5:0c:fd:29:ca:38:3f:24:2d:0d:28:89:1a:
         80:cf:81:3f:c8:95:48:b2:b0:f8:4f:c0:36:be:de:50:f1:75:
         71:17:a1:4c:75:8b:90:17:dd:ae:07:bc:33:ac:b9:6e:b7:f9:
         c9:93:23:a9:8d:ad:53:08:57:86:0b:d7:33:af:35:de:64:2a:
         93:e7:9f:e7:26:d5:29:ca:f2:d9:49:8c:ab:96:f2:01:ce:50:
         60:fa:ce:8d:c3:5d:fd:a4:03:e4:df:d8:57:f3:2f:34:4a:16:
         93:b1:2c:ae:6a:78:0f:ee:1d:95:c3:7c:9b:21:6f:34:bd:09:
         1a:28:1b:14:34:a7:f7:0c:1d:c6:ca:ce:d0:39:2a:d1:e5:5b:
         9b:b2:c4:d7:6f:7c:05:4f:73:58:21:20:93:7f:df:d8:4e:a1:
         04:47:bb:48:82:7a:8f:64:58:74:c6:b3:a6:17:08:33:e9:ab:
         ac:d4:3c:1b:80:dd:1b:46:8e:6b:6c:f1:a2:7d:fd:2e:cc:2b:
         8d:da:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:39:48 2025 by rpki-client