Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File:                     O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier:          aaHnoYr+tY5eVUIApFcFenCGMw4oj2F4nFxSF41oe74=
Subject key identifier:   65:E0:93:C6:1A:48:4F:22:0C:38:90:19:29:3C:6D:72:D1:D1:E6:43
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer:       /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial:       019839F33ADFCA376FD57591FA11094C86F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number:          0C9E
Signing time:             Thu 24 Jul 2025 01:01:38 +0000
Manifest this update:     Thu 24 Jul 2025 01:01:38 +0000
Manifest next update:     Fri 25 Jul 2025 01:01:38 +0000
Files and hashes:         1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
                          2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: Qf0s5kiMj6B2KTMuK+CCSawInIdtboGtp/dOcUXZu/s=)
                          3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
                          4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:f3:3a:df:ca:37:6f:d5:75:91:fa:11:09:4c:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
        Validity
            Not Before: Jul 24 01:01:38 2025 GMT
            Not After : Jul 25 01:01:38 2025 GMT
        Subject: CN=65e093c61a484f220c389019293c6d72d1d1e643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:d1:63:e7:8e:12:34:6f:fa:1d:70:60:6c:
                    d6:03:06:1a:91:82:0e:f4:4c:5a:67:55:cc:6f:b9:
                    c3:cd:ca:63:f5:21:6c:a2:cb:9f:2d:a5:cd:f3:58:
                    67:9a:5f:7f:9d:9d:1c:48:df:b2:58:e8:a2:c6:d3:
                    8e:d6:bb:7b:b2:19:de:42:33:a4:db:d0:4e:f6:68:
                    dd:14:75:aa:ce:dc:64:56:38:76:ae:f9:2b:35:0e:
                    2f:ef:e7:9b:03:8e:bc:96:bc:ea:51:86:b4:35:e1:
                    f4:70:b6:7e:70:0e:a4:c2:d0:51:ea:fd:ab:06:e2:
                    53:97:4d:7e:4d:bd:b3:e5:41:68:94:07:5f:11:38:
                    91:70:5d:d8:f5:95:18:a0:1a:83:e7:2f:75:3a:c1:
                    f4:1f:48:57:4d:16:2a:eb:6b:f1:77:f9:41:93:0f:
                    cb:e3:dc:32:0a:43:a6:39:0b:cf:43:13:ae:cd:b6:
                    f9:13:25:08:9a:86:18:4c:2b:77:7b:4b:ce:61:f8:
                    f9:1e:5b:16:79:69:5c:5b:a0:01:b6:7b:ff:83:eb:
                    17:27:62:32:f7:9d:93:f5:5d:88:c8:32:8b:a2:2e:
                    9f:a9:23:83:b5:02:54:94:84:68:44:04:5f:58:2c:
                    71:00:dd:10:e3:cb:44:52:ec:a2:19:47:c3:9d:ce:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:93:C6:1A:48:4F:22:0C:38:90:19:29:3C:6D:72:D1:D1:E6:43
            X509v3 Authority Key Identifier:
                keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:93:5a:da:d0:95:a9:2e:ff:fb:d3:83:94:c5:0e:f8:cd:
         10:91:af:ac:9e:17:a1:c2:80:5a:57:c4:48:67:ef:fc:d4:0c:
         f8:16:22:84:65:f8:ce:59:68:38:cc:2a:f8:07:e9:6e:d2:f5:
         56:fa:64:67:96:21:0e:23:cb:d9:0a:0a:26:60:37:49:a2:d4:
         1e:c8:d0:22:41:1d:d8:2a:5d:c8:bf:3b:42:51:0f:6a:b8:2b:
         c6:12:93:29:e8:62:ad:5b:aa:c1:65:b0:99:cc:6d:58:c9:1b:
         c0:65:19:51:50:00:d3:ca:04:aa:25:9e:f0:09:b0:43:86:d2:
         44:e5:c2:f6:ac:a0:38:2c:a8:8e:4d:99:e7:9f:3b:fc:11:93:
         1a:e4:17:db:6a:27:12:f7:b4:20:5e:4f:e0:31:aa:bb:5d:c1:
         74:c9:f4:c4:01:e8:7c:a4:ce:8f:02:d9:f2:50:3e:49:2f:16:
         b6:79:e2:14:ca:5d:78:84:d5:42:5c:f2:e6:b0:c3:b7:85:76:
         1c:2a:47:3a:fd:f9:62:32:77:6b:5a:6f:62:43:1f:d4:72:c6:
         cd:42:a5:66:3b:64:ff:2c:11:66:ea:d3:02:80:72:30:5e:4a:
         1d:95:dc:38:ea:83:b4:63:2f:30:7f:71:ce:9b:42:9a:d7:7a:
         53:b9:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:51 2025 by rpki-client