Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          XxDjmp9LjPlKebwRKuHkNAAWth9Fe48IAzOUXi76DRc=
Subject key identifier:   2F:E3:24:45:3D:83:4F:0C:D3:17:E3:BE:BC:2E:6F:4F:22:AF:F0:3E
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       01993425041E4DD17F5445FB1C920AC96E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 15:01:04 +0000
Manifest this update:     Wed 10 Sep 2025 15:01:04 +0000
Manifest next update:     Thu 11 Sep 2025 15:01:04 +0000
Files and hashes:         1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: 6C90YejVnpSX1LFS7olG3dM6G1y7u/Yb78xrIFdp6Kw=)
                          2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
                          3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
                          4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:25:04:1e:4d:d1:7f:54:45:fb:1c:92:0a:c9:6e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Sep 10 15:01:04 2025 GMT
            Not After : Sep 11 15:01:04 2025 GMT
        Subject: CN=2fe324453d834f0cd317e3bebc2e6f4f22aff03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:6f:66:14:f6:bb:25:c4:af:04:e8:bb:b8:
                    ad:ed:47:0b:30:ca:40:c1:9f:69:df:5b:d8:9e:8a:
                    ad:c2:2c:f9:3b:71:89:b9:8c:0f:a1:4e:8a:b4:46:
                    13:cc:76:fa:7b:74:07:ec:fa:2f:ba:51:74:a7:22:
                    4d:b1:4d:1b:0b:ad:41:11:6d:a7:58:82:fb:94:bf:
                    b5:71:5e:7b:32:c3:8c:27:5f:42:e7:b8:d2:0b:88:
                    02:40:95:42:50:08:0e:62:fa:ae:ec:22:be:21:e3:
                    9a:8c:6d:9a:b9:7f:da:4a:f8:29:76:89:03:c5:5a:
                    07:f8:84:5c:4a:3a:71:e3:9c:46:a4:a4:48:01:6a:
                    8b:95:d0:1b:73:ba:14:59:d5:d4:58:27:a4:b9:a4:
                    b5:9b:be:26:7f:d4:c7:89:bc:00:d7:43:ca:c2:c4:
                    c9:47:49:8f:e2:d4:25:a6:35:4f:1a:de:14:cf:22:
                    7e:9a:ce:d7:89:6e:ee:61:33:a5:8f:04:17:91:92:
                    f7:85:8c:ae:fd:b1:6e:34:8e:d7:0e:80:1b:26:28:
                    45:2b:3d:bd:a3:ff:eb:85:98:46:a6:12:a6:0e:ef:
                    fb:44:39:97:93:16:dd:16:91:91:9c:56:77:10:85:
                    ae:ac:4a:9c:01:b7:bb:5e:ce:11:05:05:49:26:61:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E3:24:45:3D:83:4F:0C:D3:17:E3:BE:BC:2E:6F:4F:22:AF:F0:3E
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a2:f3:7c:25:d2:68:6b:88:32:59:73:43:5d:ed:82:3d:67:
         b5:7b:27:e5:f3:11:71:35:f8:03:71:12:d2:06:bb:4a:ff:b4:
         b0:b6:f4:b7:a7:5e:4d:a1:53:ab:ea:22:35:ce:b3:cb:07:5a:
         93:5d:1a:8b:76:e0:75:d1:ae:3e:45:70:c0:dc:09:19:d0:a9:
         82:40:08:02:5f:00:78:67:c2:34:2f:c6:11:2f:2c:34:90:c7:
         4f:3d:c9:b4:7e:d4:f5:7f:e8:57:e1:70:74:46:d0:b4:08:e9:
         45:b9:76:99:11:35:34:aa:cd:2a:a1:41:84:e4:1a:e4:73:0d:
         f7:53:49:26:c7:45:47:7d:e6:44:cc:3c:34:1a:3a:d6:81:0f:
         bc:05:e2:bd:70:b3:3e:09:81:01:95:f9:ba:80:14:5f:84:a1:
         83:1a:4f:23:fb:a1:46:bd:cc:1b:2b:09:2d:d8:a6:e0:ee:a5:
         0d:e8:b5:61:f9:94:ad:0d:57:7e:42:a5:50:9e:cc:a8:9d:63:
         cd:8f:30:b3:4d:be:19:3b:8b:c4:f6:76:20:77:0f:13:3c:7e:
         7a:79:40:26:00:3f:11:7e:ac:21:49:fc:28:ae:d0:0c:89:1d:
         38:4e:35:59:0b:08:d1:4f:0d:db:6d:6c:19:a0:72:c2:0b:a8:
         ad:07:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:10:05 2025 by rpki-client