Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          OgLEBSp1TruOv3LaaO7OA8oTBN84NyX6SFrZqpKCF9k=
Subject key identifier:   10:32:4F:E9:13:EB:DB:CF:7A:09:6E:32:C9:83:2F:99:57:43:1B:BE
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       0198443E9FF1F9805D04170D6F4C9CE899C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          0534
Signing time:             Sat 26 Jul 2025 01:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:11 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: sBTS5b111h2YIFHrD4L+iHPtb4GUOrG4JhepcDJcpec=)
                          2: 3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa (hash: TuUCEIehwsxsHM+kSQ6AOE1w0z+0lDBW+yhlCQiJ8u0=)
                          3: 5MPTrLSfLX6fRObwynHPfSAAM0o.roa (hash: adOAZtbI6TpJQzuqE4yqnUFKX9EAaJkaZ7TpRSqv1kc=)
                          4: jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa (hash: rjEJpSgCWwFovtBLax9fmGlzA4/RiwDw0hJijdvo6KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:9f:f1:f9:80:5d:04:17:0d:6f:4c:9c:e8:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Jul 26 01:00:11 2025 GMT
            Not After : Jul 27 01:00:11 2025 GMT
        Subject: CN=10324fe913ebdbcf7a096e32c9832f9957431bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:f9:74:06:81:18:a4:a4:53:d9:04:ee:10:
                    33:63:98:b3:3d:b2:de:95:c2:a8:9a:7f:48:86:05:
                    db:ae:43:42:69:b1:8b:f9:05:e7:b2:49:05:fa:4b:
                    87:f7:fc:30:97:d0:8e:8f:c0:f2:15:13:54:62:48:
                    4e:3a:18:e6:c8:e6:23:27:f4:3a:ac:74:94:3a:12:
                    22:ec:f1:5f:3c:d5:99:df:34:e9:54:0c:c3:0f:d0:
                    4d:45:cb:a3:6b:14:79:fe:b4:04:91:30:26:36:95:
                    bc:7a:ee:09:1e:27:f8:9f:f8:18:cf:e6:ce:05:aa:
                    1a:9a:b4:80:e1:54:b7:ea:cc:6e:ea:37:45:a8:87:
                    8d:b5:e9:7f:18:c0:88:7b:2d:41:e2:9c:62:b6:a9:
                    1e:dc:27:a2:d1:e1:a6:23:1d:29:b7:14:d2:0b:a8:
                    bf:5a:03:5a:55:46:fb:47:7a:04:ae:93:b9:c2:4e:
                    49:e2:8a:ed:8f:85:aa:98:ee:05:82:bb:84:5e:13:
                    c1:09:37:e2:38:e4:2b:c0:64:85:f4:ff:af:8f:35:
                    d5:4a:5b:27:ce:8e:82:25:80:5b:ad:3e:3b:6d:4a:
                    bb:98:98:05:40:7b:d7:e5:d8:db:22:d6:32:7f:81:
                    f8:b4:3f:02:e5:76:76:4b:e1:86:6b:05:8e:79:d6:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:4F:E9:13:EB:DB:CF:7A:09:6E:32:C9:83:2F:99:57:43:1B:BE
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:29:ad:60:fb:3f:37:e1:bd:bc:39:94:14:73:f0:c8:4e:21:
         38:6b:3f:30:c1:cd:35:03:e5:ec:f0:f0:29:f9:09:db:e7:99:
         43:e0:1b:99:15:be:0c:de:69:15:a1:21:f6:ba:dd:48:9c:72:
         44:f2:15:43:e4:5b:34:73:0c:9b:3b:f4:11:df:d5:d7:b6:70:
         50:84:0b:bb:92:ca:a7:8f:e3:bb:cd:47:01:90:59:5a:b2:c9:
         1c:b2:68:ba:f8:be:31:67:5f:a1:38:97:41:4a:5e:11:a0:db:
         a1:f7:44:59:f3:28:3b:2d:e0:d4:44:17:f0:d0:bf:a7:b3:8a:
         2d:66:76:11:ab:d3:d0:bc:8c:8f:5c:1d:8d:f2:5e:3a:85:f4:
         fe:76:e7:8a:fb:e8:47:d4:d3:36:c2:07:6b:f6:98:56:4e:5d:
         d4:60:f4:b7:8d:cb:e3:61:9c:b9:f0:59:e6:19:e2:c9:95:de:
         b5:eb:5d:5e:a2:82:14:78:9a:8a:dd:5d:91:c7:1f:04:d3:80:
         9b:12:69:9a:ce:b4:58:b3:52:d0:89:0a:c7:0d:ad:c7:ba:e1:
         ac:0a:e9:f0:d4:ce:01:64:d2:7a:c3:cf:9b:ff:d9:2a:06:a6:
         e4:97:49:7c:c2:7b:6f:ae:a7:8f:d8:d3:45:87:61:0b:83:79:
         7f:c5:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:55:18 2025 by rpki-client