Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File:                     obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier:          3dXGczIed5bzrwfeFyfL8+gtIX+Y74RygI0rj/AtazQ=
Subject key identifier:   A1:74:99:59:AB:60:FA:A7:9C:8B:5F:B1:DE:17:BE:02:D7:17:4C:3C
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer:       /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial:       019848F721EA69544E5DF432BA2916A210E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number:          1096
Signing time:             Sat 26 Jul 2025 23:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:12 +0000
Files and hashes:         1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
                          2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: vJJhpZkD+6WYBPKYcnEBu3DQJyghsqZMO5Z9RUigWe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:21:ea:69:54:4e:5d:f4:32:ba:29:16:a2:10:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
        Validity
            Not Before: Jul 26 23:00:12 2025 GMT
            Not After : Jul 27 23:00:12 2025 GMT
        Subject: CN=a1749959ab60faa79c8b5fb1de17be02d7174c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:d3:fb:eb:17:18:53:85:84:33:b2:e1:27:
                    f3:fe:75:9e:fa:54:3e:fd:23:1b:33:cb:64:83:95:
                    26:ae:a5:36:84:58:ca:4a:af:e5:ac:d4:32:0f:18:
                    98:50:bc:51:1a:1e:79:44:56:f0:e9:9c:96:8f:d6:
                    22:d2:c1:10:74:f5:67:32:3f:bd:b2:99:c2:35:0f:
                    8c:fe:80:59:a6:e0:9d:f4:70:76:09:89:33:80:af:
                    f8:c0:4d:5c:f6:70:7e:36:35:5f:cb:ca:e6:2d:7c:
                    1e:13:b0:4d:6d:1c:a5:58:98:5f:6f:9f:c9:9d:4e:
                    d4:38:25:2f:a1:4b:e1:f2:d3:9e:37:02:e5:d9:ab:
                    d9:e1:58:f2:9a:30:bb:99:77:cb:a2:e7:95:bf:28:
                    d7:d2:94:77:19:f7:8f:dc:7c:3e:25:92:5a:54:c3:
                    a6:52:03:07:b4:f1:c5:b4:c6:c8:41:28:e5:ea:67:
                    cf:9d:dc:e9:46:63:ea:f8:04:1e:fc:f9:f1:4e:af:
                    9f:8f:97:e1:bb:5c:35:1b:5d:6e:63:52:03:e8:aa:
                    92:91:99:31:dd:7d:01:5e:a7:cb:fa:96:66:3e:5b:
                    15:9b:ed:d1:36:b2:46:39:92:9c:30:29:2f:7f:cf:
                    09:43:0f:ec:8d:0c:a4:9d:f9:ec:e5:ab:ac:44:bf:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:99:59:AB:60:FA:A7:9C:8B:5F:B1:DE:17:BE:02:D7:17:4C:3C
            X509v3 Authority Key Identifier:
                keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:0a:0c:fb:c9:49:21:ac:34:8f:08:d5:7e:ba:ff:7c:aa:
         19:cd:b6:74:04:af:ac:d6:22:80:24:b3:cf:0f:67:e0:11:1d:
         a1:c5:36:a2:5e:01:b0:27:1d:d6:4a:a6:15:55:ef:b4:90:46:
         0e:fb:5d:83:a2:c8:bc:ed:65:df:c9:15:cf:4e:32:a4:d0:6d:
         8f:a5:d9:fc:32:e3:af:d2:27:2d:63:f5:50:e8:ef:aa:f9:4a:
         3b:6d:9b:5d:91:40:b8:cb:4d:92:c6:7b:f4:6c:1a:8c:ee:e8:
         2c:98:ea:ee:b6:75:a7:7a:ea:f4:8a:81:47:67:65:55:d6:dd:
         ec:fb:70:6c:bd:18:8d:6d:7b:94:bb:ef:cf:c7:41:5e:03:54:
         c4:88:d4:97:33:a5:29:d4:1b:ae:1d:b6:70:66:ae:fb:df:2c:
         4c:9d:1d:5f:e5:67:15:45:39:5c:eb:9d:c0:95:03:48:32:4d:
         cd:a9:aa:68:dd:4d:e3:64:fd:5c:29:fd:60:b4:6e:ca:1b:7b:
         76:ac:7c:ca:b5:f1:13:09:47:be:ad:3e:63:48:5f:38:3f:72:
         59:b1:a5:f3:90:c4:ae:71:e2:db:ab:84:84:26:91:06:44:f6:
         a8:d2:f3:3d:79:8c:dc:33:63:70:82:98:b0:03:0b:f6:21:9d:
         f5:74:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:27 2025 by rpki-client