Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File:                     OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier:          bsA4dWgGXqqtw491zYd1FqdXfP+q1a0u2U07liUvOYE=
Subject key identifier:   0E:97:65:5A:B1:6E:90:85:B6:F3:42:F7:7C:83:1C:F2:25:E7:E0:1F
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer:       /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial:       01984AAEE07317E06B1AC670B17B6CBD8374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number:          0CB7
Signing time:             Sun 27 Jul 2025 07:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:31 +0000
Files and hashes:         1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: SftEyg/UyanY9b3y+eWmq1ymGPTEh3Vvm4RNlhXzKNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:e0:73:17:e0:6b:1a:c6:70:b1:7b:6c:bd:83:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
        Validity
            Not Before: Jul 27 07:00:31 2025 GMT
            Not After : Jul 28 07:00:31 2025 GMT
        Subject: CN=0e97655ab16e9085b6f342f77c831cf225e7e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:d9:e2:e4:54:7b:a9:1b:92:88:04:e3:65:
                    a3:03:fd:3a:c4:6a:a7:5c:69:e1:d2:1c:a4:1d:c7:
                    e6:5f:71:43:47:e7:05:02:9d:91:f7:d2:f3:8c:45:
                    77:5c:1b:a2:b0:95:9c:a7:8d:3e:d4:35:94:ca:63:
                    0d:e8:a3:45:5e:2a:cf:d6:a9:57:0d:a0:32:85:9c:
                    d0:4d:1b:c7:f6:37:ee:29:34:a2:cf:4d:b2:da:b7:
                    8b:ae:1b:70:39:67:57:72:c5:4b:db:bf:c6:6e:8e:
                    5e:c5:b9:56:6c:83:ed:d8:5a:44:4e:36:87:b8:5d:
                    3c:0b:eb:b5:17:c8:0b:52:3e:bb:d4:e1:ad:b2:24:
                    64:59:87:ff:3a:cc:98:63:5d:08:d6:22:75:7d:58:
                    fd:91:62:29:6c:3b:61:48:be:d8:c2:6b:a7:9b:07:
                    9a:26:72:ee:b2:97:21:48:82:f8:1a:49:2d:12:05:
                    82:41:20:0d:26:52:53:7b:3b:7f:dd:50:1a:f1:24:
                    79:59:59:cf:88:84:21:ef:d0:26:ad:d9:8b:b8:5d:
                    7f:2a:53:69:32:b1:81:61:e5:12:fa:f7:a6:fb:2f:
                    1b:b7:08:07:e4:1f:e9:f2:16:08:58:8d:e2:aa:ff:
                    08:57:3e:87:af:f4:bc:d8:e1:7a:dd:3b:48:e8:49:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:65:5A:B1:6E:90:85:B6:F3:42:F7:7C:83:1C:F2:25:E7:E0:1F
            X509v3 Authority Key Identifier:
                keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:19:37:ac:fd:36:d0:4e:7d:ee:52:17:94:16:8c:00:97:88:
         d7:6e:90:3a:8d:df:12:f9:5b:54:10:59:38:51:9b:6b:f2:e2:
         56:82:84:48:32:d6:a2:23:45:33:40:be:c9:e3:c8:31:f5:91:
         5d:92:af:ea:bd:ff:b2:c4:16:e7:90:db:87:63:48:bb:18:e2:
         63:56:6c:9e:8a:02:36:03:e1:f1:02:ba:6a:81:29:8f:46:85:
         1c:c5:e9:57:db:55:3a:12:c8:de:a7:d3:ef:a4:7e:84:ea:7b:
         00:de:06:e8:32:f5:fd:23:9d:74:b3:02:a9:03:f6:1d:9c:05:
         bd:bc:d8:6c:78:a2:1e:7e:22:c4:e9:86:85:49:68:f5:51:36:
         a3:fe:a4:36:8f:04:3d:13:9f:10:78:1d:10:45:7c:07:8b:1d:
         e5:90:3e:4a:0f:d5:bc:74:c9:43:ae:5a:19:97:02:3f:0a:ea:
         ba:4e:dc:2a:95:81:1d:0e:44:ec:3d:44:48:75:85:d0:b6:3c:
         c6:ec:eb:ff:aa:c2:23:a9:9c:cb:63:58:04:3b:53:0e:47:63:
         3e:a8:5f:3d:7e:90:99:b2:67:40:60:9f:38:30:cc:73:88:87:
         f1:c0:31:cb:1d:8a:7c:80:10:18:cb:32:5b:e9:30:19:2c:0d:
         7a:9f:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:45 2025 by rpki-client