Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File:                     OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier:          LG1K0HpPXPz9D85G689LF8+c+kYsiIi7LnVpqV27D7k=
Subject key identifier:   C0:E8:E7:59:E5:BD:D6:A9:78:1C:CA:D9:AC:D3:3E:ED:10:6A:47:F2
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer:       /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial:       0198665E3531E421B8613F5BB66C01FC42D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number:          1610
Signing time:             Fri 01 Aug 2025 16:01:46 +0000
Manifest this update:     Fri 01 Aug 2025 16:01:46 +0000
Manifest next update:     Sat 02 Aug 2025 16:01:46 +0000
Files and hashes:         1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: uc80Gp7JcIh9/2v+CgFqvqKK63G3c1Forzjq6BDlP8w=)
                          2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 Aug 2025 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:66:5e:35:31:e4:21:b8:61:3f:5b:b6:6c:01:fc:42:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
        Validity
            Not Before: Aug  1 16:01:46 2025 GMT
            Not After : Aug  2 16:01:46 2025 GMT
        Subject: CN=c0e8e759e5bdd6a9781ccad9acd33eed106a47f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:a5:a1:17:a1:3d:af:28:99:f9:bf:d0:b3:
                    5d:0a:fa:86:7d:88:29:9e:e4:37:6a:91:51:df:ec:
                    d4:0d:52:b5:f3:30:bd:b9:68:42:ac:39:11:1c:6a:
                    00:57:5e:20:1b:de:ec:59:9b:36:e7:19:39:41:4b:
                    d6:01:27:0c:5c:e0:27:da:41:88:e4:14:36:71:84:
                    ab:a2:b0:06:67:4a:7f:08:d5:ce:36:f5:6e:a0:c8:
                    d5:01:4e:77:55:d4:7c:61:b2:24:55:e3:7a:79:05:
                    0b:f0:e0:8d:03:60:1e:e0:cd:21:62:40:50:24:b4:
                    24:23:10:4c:54:d2:1e:22:33:7a:4d:1c:76:19:f9:
                    9e:83:dc:27:38:a1:61:78:79:59:65:5f:f5:39:51:
                    28:ed:68:df:8f:bf:dc:52:80:e0:d7:cf:97:d6:2b:
                    74:ab:48:ed:9d:08:18:d0:0c:5b:02:57:0f:7f:ed:
                    f8:a4:f7:9a:f9:f1:da:ca:3f:35:26:c8:a3:78:a3:
                    fe:90:e7:13:9f:c1:d7:70:63:80:3b:61:83:49:7d:
                    1a:41:03:3c:31:b5:73:66:dd:6d:d6:53:80:1d:90:
                    71:e8:46:6e:15:5f:9b:38:5f:75:cd:b2:3e:d1:fc:
                    be:90:8d:9c:a0:f3:34:cc:59:77:30:cc:ca:72:5c:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:E7:59:E5:BD:D6:A9:78:1C:CA:D9:AC:D3:3E:ED:10:6A:47:F2
            X509v3 Authority Key Identifier:
                keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:41:4f:7a:82:7f:b7:db:c0:3d:26:f0:af:8a:91:51:37:
         d4:97:aa:ed:5b:76:5b:db:88:91:bd:29:f3:82:1f:e8:d2:bc:
         37:dc:25:48:9c:59:57:78:44:29:f1:84:68:8b:19:a9:5b:53:
         e5:d1:c7:62:b7:80:65:5d:09:87:7c:4b:8e:c3:7d:19:fe:4a:
         89:4f:3e:16:ec:b8:3e:6b:4c:26:cd:88:85:dc:62:64:b7:78:
         e6:6d:fc:e4:38:91:ad:d9:1c:1a:a5:1a:e4:a4:0f:68:d5:7d:
         59:12:41:da:4a:fc:43:11:a6:27:60:94:2e:ac:04:06:7a:de:
         ac:73:de:00:bc:5a:b7:ea:d4:36:5b:1d:48:9c:b3:1d:e2:8a:
         2d:3e:33:81:b6:1f:9c:aa:85:4f:48:3e:23:09:e1:d9:e7:7c:
         e9:82:68:65:c7:3b:1b:fc:5f:a8:ec:37:e5:c4:37:50:0c:ac:
         ed:6b:bb:f9:28:eb:05:84:46:42:23:da:e3:37:c1:8c:3d:db:
         97:f8:cb:b1:94:aa:d6:81:fc:82:02:6d:94:c7:04:9e:23:88:
         b9:cd:cf:77:d3:30:c6:df:0f:80:02:c7:df:cc:35:c5:3a:10:
         e0:de:51:e9:6e:e0:f2:06:ba:91:2f:e8:0c:4c:b8:71:20:80:
         12:f6:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:19 2025 by rpki-client