Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          444kkNMUABCFeB59ZQE/iKlPn+zYNqCtDms+VfbuxgY=
Subject key identifier:   16:2A:97:77:E6:38:E7:11:C4:2B:E3:AD:C9:D2:9E:78:AE:A0:25:87
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       01984DB055DE10DC7F5135F7F2D07428E30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          0758
Signing time:             Sun 27 Jul 2025 21:00:58 +0000
Manifest this update:     Sun 27 Jul 2025 21:00:58 +0000
Manifest next update:     Mon 28 Jul 2025 21:00:58 +0000
Files and hashes:         1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: P172wiVPeoyllJ+pTtqgqOqS/y3+OogbHQ8RgkzOAn4=)
                          2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:b0:55:de:10:dc:7f:51:35:f7:f2:d0:74:28:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: Jul 27 21:00:58 2025 GMT
            Not After : Jul 28 21:00:58 2025 GMT
        Subject: CN=162a9777e638e711c42be3adc9d29e78aea02587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:1d:02:77:2d:09:19:d2:5f:62:ec:7a:60:
                    1a:64:b4:0a:9f:ab:57:37:6f:37:8c:c7:41:85:8b:
                    c3:04:fa:dd:bc:c6:4a:c9:5e:f9:54:a6:ef:00:44:
                    e2:db:9a:11:90:98:03:be:4f:93:e1:c4:c1:77:10:
                    9a:28:f9:08:16:ed:90:48:9a:0f:2c:ff:de:db:10:
                    c5:c8:79:ab:f7:89:52:2f:1a:e7:ae:2d:e1:67:ec:
                    4d:9b:47:84:b9:2b:c5:52:ba:46:4b:28:89:4e:0c:
                    03:d7:a5:10:1c:cc:fb:c9:9b:d1:f8:44:70:51:98:
                    4c:93:66:43:24:eb:a5:09:24:4d:ff:4b:94:dc:43:
                    34:98:07:18:ef:ad:25:18:4c:b9:21:8b:0d:31:2a:
                    f0:93:8f:95:a7:bf:52:31:d7:8f:28:95:e7:e1:9b:
                    0e:85:93:36:e4:e4:1f:89:29:1a:10:79:89:ac:71:
                    7c:39:a8:30:6a:d5:9e:7d:be:23:31:8d:9c:84:c3:
                    07:ba:2d:4d:86:f6:d2:7c:0d:ab:86:48:51:b3:c7:
                    79:1d:be:8b:a3:3c:67:c4:16:88:cf:14:cf:84:62:
                    49:82:27:69:97:a4:f9:a8:0e:82:7b:40:f6:01:6e:
                    d9:f0:7b:fa:a7:1b:87:50:b2:78:59:ba:21:c4:52:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:97:77:E6:38:E7:11:C4:2B:E3:AD:C9:D2:9E:78:AE:A0:25:87
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:de:d4:14:79:71:29:41:45:2e:a2:b9:b9:e4:7f:00:a2:
         a9:33:1a:7f:68:a2:b1:2c:ad:de:3b:37:89:d5:6c:a7:4f:f0:
         20:82:fd:d0:4e:19:5f:60:60:15:c4:c2:3c:64:1f:16:55:33:
         18:e6:b2:e4:ad:2d:21:be:0d:08:94:9a:50:02:3c:3b:1f:67:
         ee:66:ab:51:35:9c:ba:16:dd:a5:aa:80:69:82:bb:7a:84:d0:
         e0:32:af:00:92:59:35:32:4f:78:d6:60:02:1d:e3:fe:cc:50:
         ef:93:4e:15:13:33:7f:4d:59:3c:65:ec:5b:ca:93:a6:0f:4e:
         be:70:08:d6:df:2b:89:ac:05:13:c0:21:6b:03:cd:ed:44:16:
         12:38:d5:e6:a8:10:27:f2:0e:38:90:f6:05:dd:70:d1:ba:09:
         49:15:cd:32:a6:19:38:75:55:7b:8a:97:a5:1f:82:e3:ad:00:
         9b:ac:9f:78:28:c8:f4:a1:f2:a7:e0:b7:b8:a9:11:28:a0:0c:
         a7:1a:ea:ed:3e:e6:b3:5b:90:e6:65:b8:74:aa:6b:fb:cb:be:
         c7:c8:e2:c9:2b:68:c1:6e:29:cc:6c:f5:ad:50:f2:a0:e7:0e:
         90:8f:72:68:3b:2d:5d:a7:e9:d3:9b:e3:5b:07:9b:bb:a5:dd:
         3e:96:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:56:41 2025 by rpki-client