Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File:                     oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier:          IO69GalGLtU14GnHXhBA1axWc/d5wMuENh0o+Mll0zw=
Subject key identifier:   15:FF:40:44:86:FF:76:21:39:6F:1F:81:79:37:E6:7C:3E:00:82:3D
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer:       /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial:       0198477716447DE326A5BF7DA56E30712BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 16:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:43 +0000
Files and hashes:         1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: t/GPDYPHUdUQlh1hknDIKkDhs5TtjJ3ZSyxeHbOTxDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:16:44:7d:e3:26:a5:bf:7d:a5:6e:30:71:2b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
        Validity
            Not Before: Jul 26 16:00:43 2025 GMT
            Not After : Jul 27 16:00:43 2025 GMT
        Subject: CN=15ff404486ff7621396f1f817937e67c3e00823d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:a6:07:25:09:d5:4e:b2:ab:31:a1:d1:18:
                    62:47:36:16:e3:86:46:5e:b3:92:11:75:3f:bc:b4:
                    82:c3:15:75:e4:9a:9a:2a:25:17:9d:a1:07:f8:b4:
                    43:c7:3f:70:bb:14:84:80:2f:41:41:75:95:38:15:
                    3e:e7:2e:0d:61:f8:e9:8c:29:df:c0:e7:ae:b1:09:
                    b7:a3:48:f3:ed:a0:11:0a:b5:9a:a7:12:87:02:5a:
                    1f:ef:5b:b1:d9:47:f9:fa:72:f9:19:34:7a:94:df:
                    bf:5e:10:56:16:6e:0f:aa:0d:62:48:a8:c1:b4:2f:
                    bd:71:06:3e:16:b1:01:9e:8e:e6:94:d4:21:3c:b2:
                    94:7d:31:3d:a8:d1:56:89:1e:e5:4c:b7:f4:c1:f2:
                    5a:d9:0d:5c:95:9b:51:9e:29:97:9d:e2:5b:16:fc:
                    72:05:db:14:3e:40:c5:28:e3:3c:10:a9:fd:d2:5b:
                    d2:8f:c0:fb:0e:af:90:85:a0:4a:39:80:9a:48:95:
                    4d:d3:12:d3:7f:c6:b1:73:1d:ab:f3:ec:0d:64:33:
                    65:7b:ff:60:a2:f3:72:73:bd:f0:af:f3:00:38:f4:
                    f2:0a:0f:37:29:5e:a2:c3:bb:a8:bc:36:d9:6e:e2:
                    0f:ff:31:4b:d2:5e:3a:fd:08:a2:48:e0:af:b4:da:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FF:40:44:86:FF:76:21:39:6F:1F:81:79:37:E6:7C:3E:00:82:3D
            X509v3 Authority Key Identifier:
                keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:3c:a7:94:85:62:e6:1d:0b:f0:a9:94:e1:f4:96:36:4b:
         2b:93:c3:f9:86:f1:28:9f:97:37:27:ff:bf:b3:e2:fe:33:1a:
         a3:02:26:7e:84:45:ec:25:b9:15:d5:a8:f4:52:4a:b5:7d:fa:
         7a:f0:92:e8:e7:80:2b:10:0b:b4:5c:c6:5c:af:ae:2a:0b:20:
         58:80:4c:3d:14:ef:37:3b:71:c3:a5:7e:1f:f3:1b:1b:83:92:
         83:41:2c:1b:97:ce:16:f4:5f:50:d0:c3:58:ed:84:ea:13:66:
         3b:fe:a0:da:f8:ec:6f:92:28:59:fd:e4:ba:85:4c:c7:6e:23:
         bf:b3:71:8a:59:d4:27:5d:d7:41:25:24:b2:2e:35:1f:ff:8d:
         6d:32:2a:a3:e8:da:fa:8e:45:e4:40:d4:c0:a7:4d:3e:94:fa:
         bc:9e:3e:c2:f7:8d:c2:cf:88:f5:11:24:ef:93:5b:9d:e2:3c:
         f9:50:f9:df:43:c7:9e:67:e5:73:f7:a8:fa:97:87:13:27:50:
         57:3a:58:dc:fe:c4:2b:f8:23:32:01:ef:3d:67:c1:c2:33:e9:
         cf:70:39:bc:92:59:a7:0d:79:0f:bb:ab:b8:67:6b:06:02:4f:
         51:48:18:aa:e4:79:30:69:0b:d0:0d:2d:56:b3:a2:f1:e2:49:
         87:19:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:10 2025 by rpki-client