Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File:                     O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier:          7Ss8gOC/JO8/pmOfcWWf9wx50eJFm3JY6Qu1qfOU27o=
Subject key identifier:   70:EB:DE:DC:11:83:35:0E:A7:96:22:93:46:94:5C:6C:84:17:55:65
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer:       /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial:       01984965157ABC59345E616BBFD77E6A7B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number:          1350
Signing time:             Sun 27 Jul 2025 01:00:17 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:17 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:17 +0000
Files and hashes:         1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: PhxBaNWBu3xw23YuGdNDKwKmvb2OZC/YBcfEH/kZtMU=)
                          2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:15:7a:bc:59:34:5e:61:6b:bf:d7:7e:6a:7b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
        Validity
            Not Before: Jul 27 01:00:17 2025 GMT
            Not After : Jul 28 01:00:17 2025 GMT
        Subject: CN=70ebdedc1183350ea796229346945c6c84175565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:0e:c1:06:0f:94:56:5d:3c:fd:73:04:18:
                    f4:7d:6c:f7:4a:c3:6e:bd:41:7a:b3:59:2a:32:45:
                    d6:a2:5f:5e:ef:84:8a:16:a5:23:50:cc:da:a8:24:
                    c4:d0:73:5a:56:4c:45:90:5a:d1:51:9d:58:1e:e1:
                    7b:ae:1e:d9:67:88:72:46:2b:dd:fc:4f:c9:7d:9a:
                    a7:5a:45:4f:ca:77:b2:51:54:0b:20:4a:6b:98:de:
                    1c:c4:fa:2a:7a:18:36:59:39:56:a3:4a:be:89:73:
                    ef:ee:b2:f9:49:1b:5c:dd:4d:da:e3:40:98:42:f7:
                    7d:6f:f0:bb:03:2c:75:2f:e1:dc:2e:ff:9c:a7:c1:
                    cb:f3:5e:0d:4e:23:aa:cd:49:23:14:30:ba:2c:26:
                    73:de:de:ce:d3:f2:e1:33:12:14:86:b5:be:c2:83:
                    c7:dd:c1:a9:7a:2f:65:6c:01:52:b6:68:33:3d:ba:
                    bf:c4:28:08:93:61:77:46:ff:09:de:8c:4d:7a:21:
                    bc:e7:50:4b:9e:19:e4:33:a2:9b:38:3d:ba:26:ac:
                    51:83:95:c4:ff:01:29:d9:49:e2:d7:04:02:9a:3e:
                    df:89:e5:6d:31:4e:9b:33:dc:d5:52:ff:43:99:79:
                    20:52:e9:b2:19:82:30:c8:0b:f3:eb:7d:53:a9:ed:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:DE:DC:11:83:35:0E:A7:96:22:93:46:94:5C:6C:84:17:55:65
            X509v3 Authority Key Identifier:
                keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:0f:c6:0c:ba:dd:3c:05:1c:12:a5:fe:39:34:06:bf:6b:
         96:6d:38:ca:3d:c9:d9:03:25:3f:20:5b:00:62:1b:55:2f:0d:
         04:33:5a:86:be:e0:8c:40:d9:94:4a:4d:3f:c9:29:80:3f:dc:
         54:a8:72:37:6e:9d:45:1a:c5:e0:97:81:df:fd:64:3d:ef:8a:
         c0:6d:6d:22:d1:fb:04:75:f6:bc:a6:7f:bc:b8:13:ae:bf:23:
         f7:58:a0:b0:a7:db:03:a6:d0:9f:01:76:e6:6d:d4:66:15:7a:
         61:19:3c:0d:5f:e5:21:98:47:ff:fc:f1:8c:40:1a:a9:22:7a:
         20:9e:71:c5:b9:f5:01:6c:61:dc:b0:0b:c0:1a:41:18:18:5a:
         52:61:df:10:e4:f1:df:19:eb:2e:7a:90:3c:0b:a5:a0:70:a0:
         ba:74:88:e1:4a:d5:39:b4:ec:64:7b:98:13:5b:63:4d:ea:08:
         ea:cf:99:34:e4:2e:ef:53:3c:c6:61:00:f8:d5:7e:e9:cb:1d:
         1d:7e:47:35:a4:b5:48:54:4f:d7:37:9c:8d:61:5a:8e:83:24:
         c8:83:42:ef:95:34:82:ef:1e:0f:6a:ca:dd:3c:db:f1:63:a2:
         9b:c1:dc:c8:91:ee:7e:36:77:df:d3:53:1f:43:db:54:42:c0:
         8c:f2:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:10 2025 by rpki-client