Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          5sVz57RsDYPfi49tG4HLEza+AdaEtuXHOqXBcG+jd5I=
Subject key identifier:   3F:EE:50:B2:CF:8E:E3:0B:CC:5A:0B:05:16:D6:B2:47:C1:A2:8A:1E
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       0198530ECB9AFADA76F64E85A9A607DFD7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0B5F
Signing time:             Mon 28 Jul 2025 22:02:15 +0000
Manifest this update:     Mon 28 Jul 2025 22:02:15 +0000
Manifest next update:     Tue 29 Jul 2025 22:02:15 +0000
Files and hashes:         1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: i5weYyPFj5n1Er8UL4gSXVJ1P6x3/LLp0Zjaf2ZQnLE=)
                          2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:cb:9a:fa:da:76:f6:4e:85:a9:a6:07:df:d7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Jul 28 22:02:15 2025 GMT
            Not After : Jul 29 22:02:15 2025 GMT
        Subject: CN=3fee50b2cf8ee30bcc5a0b0516d6b247c1a28a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:31:5f:3a:c1:03:36:57:c4:93:62:0a:cd:
                    e5:7e:86:7c:90:4b:88:05:83:b4:3d:5d:c3:15:b1:
                    c1:ae:d1:db:0e:e2:aa:55:a3:97:58:60:6f:e8:fc:
                    85:ef:b3:1b:88:fd:90:7a:bb:75:13:ec:92:fc:90:
                    bc:b1:21:07:2d:35:1e:df:7e:7c:1a:2a:d1:d3:3c:
                    3f:59:19:64:4c:87:39:a3:38:36:92:9f:99:be:ca:
                    80:d2:be:05:4f:bb:90:6f:32:98:ff:41:f9:3a:f7:
                    c5:69:fa:54:4f:92:5c:ac:2d:99:98:ab:e3:46:fb:
                    72:30:49:21:6c:1b:79:a8:ea:8c:3e:0f:28:3b:46:
                    34:d6:13:b2:a0:6b:a7:d2:0a:d2:ae:25:33:0c:d6:
                    04:67:79:cc:32:3c:ca:84:16:c9:62:cf:2e:5f:c3:
                    1b:37:49:bb:fb:2b:0d:80:f2:1d:16:9a:17:23:ee:
                    7f:2d:d2:ee:2f:b8:9a:b7:1c:7b:22:25:2f:86:0a:
                    f1:ac:33:68:4e:54:eb:57:f8:82:bc:1f:05:a3:11:
                    f7:bd:66:6b:03:12:f3:28:fe:87:10:b4:23:fa:96:
                    78:9e:be:4d:cb:e1:eb:f0:ee:15:75:29:12:5e:a2:
                    d1:82:a6:7e:c1:45:bf:4c:ae:3c:02:ec:30:6e:f3:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:50:B2:CF:8E:E3:0B:CC:5A:0B:05:16:D6:B2:47:C1:A2:8A:1E
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:80:9a:db:88:ce:15:93:f7:2d:bf:03:df:e6:13:7c:35:54:
         9d:97:34:76:a1:b1:de:e3:bc:03:cf:ff:cb:1a:ff:09:e5:64:
         fc:4f:ce:3a:3f:e8:de:09:19:08:63:94:7b:f7:46:c7:8b:ca:
         60:75:0d:1a:9c:19:d2:98:ea:20:82:0d:71:7d:d4:be:cb:55:
         7c:3b:37:99:67:bf:9c:dd:2c:f4:f8:bd:c7:b1:ed:28:66:73:
         6a:39:25:e6:73:78:79:fa:44:a5:1c:01:9d:fd:51:3f:76:cf:
         a7:22:57:9e:c5:2e:fa:1b:0b:62:b9:61:08:a5:3e:f4:aa:31:
         90:c3:0b:40:8c:d3:b3:2b:f3:2b:50:64:94:05:f8:33:10:03:
         49:37:db:1a:b0:5e:d6:cd:02:61:58:29:23:e6:5a:a4:af:83:
         ba:5a:63:2c:9a:c1:85:6d:12:61:f1:08:82:24:95:a6:eb:5b:
         2a:7d:00:61:45:ba:18:65:b4:8e:e7:4c:85:bc:46:bf:23:00:
         37:6e:0c:85:a7:ae:90:1d:b1:3e:d5:3f:c1:6d:58:24:9d:4b:
         f3:b0:ac:f8:02:5c:3d:05:62:ba:29:45:91:d9:89:39:ce:1a:
         9e:b7:7d:d7:56:7f:71:8c:5a:06:d8:5d:a7:f3:b5:fa:52:13:
         a3:91:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:38 2025 by rpki-client