Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File:                     olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier:          WUjLyFPV7OD2qQ1nqH4YWXNNqw/2DH9i8WobVEq3qxo=
Subject key identifier:   90:7B:55:5F:FC:D8:12:81:23:C0:3A:B5:82:E8:29:EF:E4:EE:81:DB
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer:       /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial:       01985155B474F722289B585AB0A791C1991B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number:          1000
Signing time:             Mon 28 Jul 2025 14:00:27 +0000
Manifest this update:     Mon 28 Jul 2025 14:00:27 +0000
Manifest next update:     Tue 29 Jul 2025 14:00:27 +0000
Files and hashes:         1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: yBwuOp0waJcRZjIY1Nk/t6VJ0qkA6mIJ5aU/RJQVytA=)
                          2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:55:b4:74:f7:22:28:9b:58:5a:b0:a7:91:c1:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
        Validity
            Not Before: Jul 28 14:00:27 2025 GMT
            Not After : Jul 29 14:00:27 2025 GMT
        Subject: CN=907b555ffcd8128123c03ab582e829efe4ee81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:14:24:17:df:b4:89:8c:ba:a3:41:d1:31:
                    27:5c:54:4e:da:79:81:8f:5b:f3:66:4c:d3:42:00:
                    4a:59:07:31:00:d2:1c:65:28:0f:1b:50:aa:1c:3c:
                    98:7d:6e:07:76:1f:44:0f:56:f7:b5:e6:d3:21:55:
                    ce:70:55:7f:c3:32:56:cf:f1:e4:5e:64:fb:21:68:
                    8b:ae:b1:74:78:43:9d:c8:5b:ba:22:18:99:52:da:
                    88:f6:c6:47:47:78:69:6e:cb:a8:36:16:7f:03:e6:
                    a4:e4:3d:77:35:35:3f:a0:f9:7d:09:3a:ef:04:64:
                    e1:10:d3:b8:13:be:6d:1a:da:af:16:ac:96:0d:ab:
                    a2:7c:91:25:41:41:6c:01:bb:85:09:43:84:ba:ff:
                    dd:c3:a8:66:0d:66:6e:f2:84:a0:49:8b:d2:65:7e:
                    47:b4:97:b6:42:26:a8:3b:14:6b:fd:3c:97:d9:a2:
                    78:80:e1:af:c6:71:c1:ec:fa:8c:de:f5:9d:9a:d3:
                    8a:4d:da:b3:48:91:1a:4e:fa:c6:ed:bb:ba:f3:d1:
                    51:cb:28:c4:94:ba:9d:95:15:80:d2:5e:eb:47:74:
                    c0:28:eb:f9:73:e2:cf:ff:36:b4:33:9b:b4:b9:14:
                    40:f1:7b:6d:be:ed:f1:1f:0f:9a:50:8e:9e:e9:b8:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7B:55:5F:FC:D8:12:81:23:C0:3A:B5:82:E8:29:EF:E4:EE:81:DB
            X509v3 Authority Key Identifier:
                keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:01:37:e3:ee:e2:6e:7d:a3:96:62:10:0c:17:b8:c6:03:
         d6:77:4c:03:ce:33:8f:09:82:6a:d8:13:c6:98:3b:fb:ab:b9:
         cb:1d:cb:a8:63:ce:d9:1e:da:f0:54:17:66:87:bb:ed:63:7b:
         93:06:e4:c1:83:e9:ae:db:26:e7:1d:4f:59:84:24:c7:c6:b1:
         91:bb:bd:66:66:32:d6:e8:3d:44:6b:0e:76:2d:d6:14:a5:6e:
         9c:d3:e5:11:43:3a:5a:ed:6e:aa:c7:8a:3d:fa:61:c6:44:60:
         78:da:ed:1e:dc:76:2b:3e:17:cd:86:79:d9:ec:bf:cc:87:bd:
         80:49:a0:f3:cc:6f:dd:4e:33:3b:7a:a1:ba:b1:2a:9d:d0:51:
         e2:ca:ee:d2:ff:0d:c5:e0:cb:22:37:97:02:fb:26:3a:0b:3b:
         07:13:13:dd:62:51:31:84:5f:f1:bc:02:4b:30:41:ce:41:a9:
         34:6e:87:11:fb:22:b8:8f:45:1e:26:2b:5e:59:a0:57:ef:3b:
         8d:08:56:a6:93:10:07:35:9f:0f:4c:23:a5:36:4f:6f:2b:33:
         c1:43:b8:37:87:07:e1:1b:8a:82:88:4f:f8:f2:41:2d:0e:35:
         23:58:2a:e6:29:c9:4a:77:ce:cc:d9:c0:61:78:83:2d:cf:eb:
         c1:5a:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:12:16 2025 by rpki-client