Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          rF5TLMTR3H5DbvEL4fmUzyNOBvex0cQq/V6X4oj/TXQ=
Subject key identifier:   8D:1E:26:55:01:49:68:28:A8:06:4C:D8:D9:19:56:03:88:4B:CB:46
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       01983CF2DD5A9BE460116B91C2FE2EE19634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          1324
Signing time:             Thu 24 Jul 2025 15:00:05 +0000
Manifest this update:     Thu 24 Jul 2025 15:00:05 +0000
Manifest next update:     Fri 25 Jul 2025 15:00:05 +0000
Files and hashes:         1: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (hash: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=)
                          2: 4HzcAwAp_NPUTKmqOpFk6fNukP8.roa (hash: MU7p381OLfrUgZeXEX4ypzzCidzVAcWbQDWLKu/+t9s=)
                          3: QJH1xkQhD8ZqrUTpIxRVC-9iWsg.roa (hash: k8wK85RayUQhoeFyh00R6U1ww1Aske+9ky6WjpJEXWs=)
                          4: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: J0Q92b4mIft1RBKHZmjESKEfRJmOnwBz6ftnVAA/TR0=)
                          5: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (hash: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3c:f2:dd:5a:9b:e4:60:11:6b:91:c2:fe:2e:e1:96:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jul 24 15:00:05 2025 GMT
            Not After : Jul 25 15:00:05 2025 GMT
        Subject: CN=8d1e265501496828a8064cd8d9195603884bcb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:9f:cd:33:ac:dc:56:27:51:3b:48:34:45:
                    9a:1c:a5:82:fc:01:02:e7:e1:2d:1c:5d:1b:fa:fb:
                    f4:5b:24:78:e8:a3:7c:6a:66:27:5c:4e:39:8d:82:
                    7f:87:86:36:f7:4f:a8:66:fa:73:51:ed:fd:5a:85:
                    8d:02:d4:aa:8b:c2:6a:57:13:63:92:c7:8d:84:bb:
                    2d:1a:a9:78:e8:4a:ef:8e:1a:d7:a4:cb:21:f7:89:
                    58:b6:4f:14:89:93:d9:ad:d2:5b:1d:dc:b6:fb:21:
                    cc:d1:cb:a6:22:26:38:2d:23:ae:e6:fa:a5:c5:02:
                    0c:2d:ae:37:30:81:e1:5a:fa:d3:ad:f8:71:cc:0c:
                    55:2e:ac:8b:16:46:de:99:3b:4f:98:d9:04:5a:01:
                    c7:c1:37:82:a1:68:36:80:f9:cb:d3:74:00:88:54:
                    df:17:d6:f9:a3:32:df:dd:c3:b7:a9:59:b5:45:b3:
                    f7:67:69:ff:be:b6:fb:db:41:da:36:43:bd:dd:f5:
                    2e:8e:b2:e9:aa:46:57:49:bf:a6:f6:e0:42:a0:9c:
                    2e:6f:2f:58:7d:58:a8:30:1e:a2:b0:a2:b0:55:34:
                    55:e4:7b:61:f0:b2:41:ae:da:91:72:b6:d4:8f:45:
                    f3:1d:12:19:e4:69:9b:2e:e3:97:8b:d2:26:91:83:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1E:26:55:01:49:68:28:A8:06:4C:D8:D9:19:56:03:88:4B:CB:46
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:26:df:8b:98:e6:3c:9b:c2:f3:6e:b0:02:24:78:91:db:e6:
         a6:97:77:48:5c:06:09:c4:19:e7:e8:3d:3f:9c:4f:73:a6:f6:
         a5:14:3f:6e:d9:a2:37:64:46:30:a9:44:50:55:7e:86:f2:6f:
         70:ef:3b:f2:4a:d9:e1:6c:06:6a:f3:6e:d6:10:52:16:94:97:
         ab:0b:81:9d:d8:0c:6c:a7:52:0e:2e:d7:62:14:db:c3:f4:38:
         4e:40:21:a0:93:5c:b6:5d:28:cc:63:47:df:a9:d2:06:f7:62:
         04:f3:f1:82:26:25:59:3f:85:d1:27:8e:ae:9c:fc:00:dc:b8:
         d1:5f:f8:74:c6:13:1e:44:54:a6:c4:b1:3c:b0:26:bc:8a:27:
         57:c8:a0:1e:8d:7a:e6:41:72:9b:b4:3f:a8:aa:1f:31:0e:42:
         6e:e3:cd:22:f1:30:29:08:7f:c9:a5:b6:db:f1:f6:38:8c:41:
         13:43:1b:60:7e:b5:3b:fb:88:f3:a2:04:36:fa:f0:9b:91:35:
         fe:4a:a1:7c:61:57:9f:00:24:44:34:e9:24:38:42:04:61:13:
         aa:a1:2e:f1:61:9d:c0:2a:16:37:67:71:48:6c:6f:f5:9d:bb:
         1d:26:ea:d0:e5:4b:dd:94:65:4e:56:e4:f2:05:5c:ac:1b:d5:
         77:1d:97:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg88t1am+RgEWuRwv4u4ZY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM5NzFhMzJjMDY5MmM0ZTM0MmU5MTE3OTA2NjI0NzBj
ZjMxYjIwHhcNMjUwNzI0MTUwMDA1WhcNMjUwNzI1MTUwMDA1WjAzMTEwLwYDVQQD
Eyg4ZDFlMjY1NTAxNDk2ODI4YTgwNjRjZDhkOTE5NTYwMzg4NGJjYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40ufzTOs3FYnUTtINEWaHKWC/AEC
5+EtHF0b+vv0WyR46KN8amYnXE45jYJ/h4Y290+oZvpzUe39WoWNAtSqi8JqVxNj
kseNhLstGql46ErvjhrXpMsh94lYtk8UiZPZrdJbHdy2+yHM0cumIiY4LSOu5vql
xQIMLa43MIHhWvrTrfhxzAxVLqyLFkbemTtPmNkEWgHHwTeCoWg2gPnL03QAiFTf
F9b5ozLf3cO3qVm1RbP3Z2n/vrb720HaNkO93fUujrLpqkZXSb+m9uBCoJwuby9Y
fVioMB6isKKwVTRV5Hth8LJBrtqRcrbUj0XzHRIZ5GmbLuOXi9ImkYMzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0eJlUBSWgoqAZM2NkZVgOIS8tGMB8GA1UdIwQY
MBaAFL/jlxoywGksTjQukReQZiRwzzGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUt
YzRkY2M3ZjZiN2RmLzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUtYzRkY2M3ZjZiN2Rm
LzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSbfi5jm
PJvC826wAiR4kdvmppd3SFwGCcQZ5+g9P5xPc6b2pRQ/btmiN2RGMKlEUFV+hvJv
cO878krZ4WwGavNu1hBSFpSXqwuBndgMbKdSDi7XYhTbw/Q4TkAhoJNctl0ozGNH
36nSBvdiBPPxgiYlWT+F0SeOrpz8ANy40V/4dMYTHkRUpsSxPLAmvIonV8igHo16
5kFym7Q/qKofMQ5CbuPNIvEwKQh/yaW22/H2OIxBE0MbYH61O/uI86IENvrwm5E1
/kqhfGFXnwAkRDTpJDhCBGETqqEu8WGdwCoWN2dxSGxv9Z27HSbq0OVL3ZRlTlbk
8gVcrBvVdx2XSA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:12:48 2025 by rpki-client