Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          NdhIa6sxjVM8x1B0p3J9y+rH5CBjPNlrhhSv7ydwdho=
Subject key identifier:   B4:B8:0D:E6:AE:EC:61:A9:61:3C:16:F9:22:8D:DA:D8:BE:CA:A9:3D
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       019849656BC5254BE8368481152165795AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          0ACB
Signing time:             Sun 27 Jul 2025 01:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:40 +0000
Files and hashes:         1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: lKrukI7YWydooug8NyK94PHIaECsoLVKR74gVSUAvEc=)
                          2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:6b:c5:25:4b:e8:36:84:81:15:21:65:79:5a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: Jul 27 01:00:40 2025 GMT
            Not After : Jul 28 01:00:40 2025 GMT
        Subject: CN=b4b80de6aeec61a9613c16f9228ddad8becaa93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:9a:b5:d7:b9:3b:d3:8b:96:32:90:5f:a3:
                    b9:59:8d:f1:9f:f5:eb:59:88:cc:69:32:94:c0:03:
                    a6:43:5e:10:e6:c1:17:fd:e9:df:3e:7a:6e:88:0d:
                    fa:0c:e8:cb:b2:7a:7c:b9:38:79:c5:7b:80:ee:72:
                    4d:67:27:c4:07:06:8a:cd:1c:be:0f:78:a9:97:d1:
                    17:49:ae:da:02:3a:f9:ee:53:a4:f5:d1:2c:18:76:
                    42:8b:cb:22:c0:37:37:a4:e7:d2:c3:62:33:6c:e6:
                    c1:3b:7e:15:db:c2:d0:ae:e2:3e:89:1e:65:94:88:
                    12:15:ff:77:d1:87:a4:b8:14:f1:75:6e:04:b4:80:
                    bf:07:91:5c:20:51:c8:31:35:d3:f2:2d:8c:5a:21:
                    9f:5a:17:c6:1c:7c:da:54:47:20:6d:8c:3f:2e:ed:
                    57:59:1b:e1:d2:20:b3:68:e9:70:01:a4:07:5a:77:
                    a3:22:d5:dd:fb:ca:8c:a5:98:e1:1a:7f:66:60:d0:
                    de:2d:44:2b:21:cb:e7:3f:6d:49:bb:4f:ea:e3:2e:
                    9b:05:15:97:87:75:05:61:32:64:31:a9:42:f2:8e:
                    7c:91:25:ca:84:58:70:fc:2c:63:1b:4f:ad:1c:87:
                    13:e3:4a:97:b3:09:71:72:34:10:6a:6d:2a:2a:06:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B8:0D:E6:AE:EC:61:A9:61:3C:16:F9:22:8D:DA:D8:BE:CA:A9:3D
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:1b:af:59:95:a0:11:5f:3d:85:98:02:59:44:64:2a:fe:
         eb:73:f7:e2:4e:69:c6:85:57:ec:76:e9:b7:4d:4b:97:c3:04:
         4e:d5:1d:bb:5b:74:7e:bf:da:1b:77:fc:7a:0f:8e:9b:29:b6:
         bb:02:a7:13:f1:42:58:34:ab:19:08:4b:30:a9:b0:32:b6:4f:
         7d:ca:74:44:86:d1:42:4b:a7:1d:8b:ad:7b:fa:50:93:76:28:
         07:62:1f:9e:6e:27:dc:7c:aa:63:f5:14:3c:96:3b:41:76:81:
         2f:37:65:25:d8:f6:c0:03:dd:bc:6f:49:db:79:30:f9:fd:91:
         2f:8a:a9:87:9f:1c:28:4c:9c:90:e5:00:da:0e:e2:26:9c:34:
         4d:56:96:2e:62:f1:5f:38:f2:76:87:10:f8:1e:52:6f:db:e6:
         f8:af:76:83:89:81:bd:99:2a:18:b6:46:0d:69:24:92:42:1b:
         4a:2f:eb:c2:bb:2f:c6:85:22:5d:db:38:85:fd:2d:1c:15:51:
         38:8e:17:ef:2c:78:63:53:c2:1a:27:61:9b:67:aa:f2:4b:84:
         27:dd:f6:27:92:56:e7:56:aa:15:81:ab:16:66:b4:8b:ed:ff:
         b4:be:fc:1c:7c:d1:4a:05:c6:20:f1:18:0d:9c:90:ad:c3:c2:
         fe:eb:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:51 2025 by rpki-client