Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          0cVFQS8xk8ur82eAB8mLr/Y7JsPq//2Y8mqXIcaAkmw=
Subject key identifier:   48:81:67:D9:BD:0E:7F:AE:60:91:18:AA:D2:E0:C8:D5:7C:B9:A5:D9
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       01984DE68DAD6A8881930C3B3B88D07519A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          1353
Signing time:             Sun 27 Jul 2025 22:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 22:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 22:00:11 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: 8PAsvUhFeqyvYPhuQhGKVWL8i8ILxyzUZf4jfCuK1PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:e6:8d:ad:6a:88:81:93:0c:3b:3b:88:d0:75:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jul 27 22:00:11 2025 GMT
            Not After : Jul 28 22:00:11 2025 GMT
        Subject: CN=488167d9bd0e7fae609118aad2e0c8d57cb9a5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:9b:af:22:e0:a5:86:18:e2:16:6d:38:bf:
                    da:2b:60:e5:3c:e3:43:51:3b:2c:44:d8:62:cf:5c:
                    9a:93:43:af:e7:c4:35:69:3f:fe:1f:ca:1e:42:75:
                    52:97:f8:ad:cb:05:ec:b0:61:b2:b1:3e:e7:d7:66:
                    1a:9d:8f:14:ee:80:7c:53:f2:0f:b8:d2:63:cc:61:
                    37:7c:fc:45:e9:50:2e:a4:66:48:b2:68:3e:f6:87:
                    0a:e4:ac:fb:b8:a7:ea:ee:ed:28:62:6f:17:23:37:
                    5d:0c:0c:d5:56:65:6a:2e:d2:c9:d0:84:e6:c9:fc:
                    5a:7a:24:59:7e:66:cf:61:61:34:b9:86:0d:24:72:
                    b5:37:7b:1f:30:0c:09:6f:0b:90:7c:63:85:30:98:
                    3a:1c:e6:d6:54:09:8f:51:55:b5:48:38:12:3a:00:
                    1f:21:0e:27:a8:35:00:d3:73:18:58:fb:2d:10:83:
                    94:a4:8a:63:58:8f:fe:0c:b8:13:36:3a:8a:b6:ff:
                    d7:3c:a6:2e:ab:89:b0:ce:75:dd:c6:eb:42:7a:4c:
                    b6:5b:00:80:04:fb:50:0d:d9:bf:bd:4f:a4:ab:7f:
                    ba:e3:3b:dd:df:d0:0c:f3:68:5c:c8:cd:b3:c6:2d:
                    d3:af:5a:02:f0:0a:59:0e:de:c6:a9:96:81:4d:1b:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:67:D9:BD:0E:7F:AE:60:91:18:AA:D2:E0:C8:D5:7C:B9:A5:D9
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:45:46:9d:32:f8:a8:cf:7c:6e:f2:b0:b2:1f:f4:24:5b:32:
         da:6e:ec:12:67:89:84:fe:e1:19:e4:e5:23:59:af:96:71:cf:
         c3:9b:6f:12:6b:b7:61:35:9d:71:77:06:fc:27:f0:25:56:4b:
         0b:86:e7:61:bf:2a:48:d8:9a:29:cc:5a:28:7a:40:d4:e3:ea:
         be:25:15:e0:c7:1c:1a:9b:5e:d8:6e:76:97:45:b5:ac:33:de:
         36:dc:9e:fd:36:8f:a2:77:3f:5d:25:47:52:e5:91:fc:1c:09:
         ad:4b:74:87:ee:02:ee:65:c6:97:9e:f4:29:94:fb:f8:b4:db:
         66:71:72:ad:b8:1a:e7:b4:90:64:6b:6a:c3:0e:bc:3a:e8:89:
         64:c5:5b:11:14:86:47:a2:be:53:e6:1f:eb:3b:ea:f6:5b:81:
         6c:b3:35:ec:62:c3:15:6d:3c:7f:14:46:1a:a9:3c:6b:7c:7a:
         59:00:2e:f5:52:3c:33:c8:02:c1:c1:da:d6:b9:14:4a:39:a8:
         24:ce:a4:b9:1f:9f:96:ee:68:4c:c4:e4:a0:71:c1:2d:66:d6:
         2a:8c:27:33:49:72:df:72:3f:e2:3d:6e:7e:ec:ec:14:b2:9d:
         ce:28:ef:4c:ac:26:c3:6d:8d:8e:98:e7:d4:83:2a:9d:27:87:
         bb:44:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:53:03 2025 by rpki-client