Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File:                     OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier:          os9ShYvQMkPlRjYvZIybYRD6gII/jINWOHOmNJDfTIU=
Subject key identifier:   8B:34:1F:E2:B5:32:BA:72:30:5F:E1:25:15:B9:C1:36:6A:64:67:9F
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer:       /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial:       019749D5FE96EF906A8FF09AD8DA475B7D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number:          0538
Signing time:             Sat 07 Jun 2025 10:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:50 +0000
Files and hashes:         1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: 8zxLi//u9CCzHw4/LwCw1Ul8i7O3cKAshDMla4UYKVU=)
                          2: YKP2-mUbLqVt8YjjDalCzO3YP4U.roa (hash: Yz1Fy2JsuM7B/qCN027yJ5VSafRq6NaaRWcEtGjJrwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:fe:96:ef:90:6a:8f:f0:9a:d8:da:47:5b:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
        Validity
            Not Before: Jun  7 10:00:50 2025 GMT
            Not After : Jun  8 10:00:50 2025 GMT
        Subject: CN=8b341fe2b532ba72305fe12515b9c1366a64679f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:3b:d2:1d:93:4a:f8:01:7c:a5:e2:ce:5b:
                    76:07:73:4b:0a:25:e3:f5:4f:c2:2a:a1:21:31:62:
                    50:97:6a:24:83:5a:e8:3f:d1:68:29:27:ae:01:db:
                    fc:3e:d1:fb:6c:03:6e:6d:19:cb:b7:36:ff:8a:c8:
                    bd:9e:c5:23:d5:3b:f5:64:e2:2d:2f:24:6f:43:3c:
                    da:2d:42:58:92:4d:3d:a8:4a:af:ba:f0:38:79:01:
                    c7:ea:b4:f5:3a:64:7e:b0:fe:44:9d:e8:67:3b:bf:
                    a2:d5:ea:3a:1e:9b:44:bd:2d:ea:93:c3:8e:0e:43:
                    19:6d:64:9c:c3:37:45:63:34:a4:b2:37:c6:c1:5f:
                    3a:a1:6c:e2:81:c4:40:17:88:31:a9:09:65:97:2a:
                    b5:83:e6:0e:4f:21:ab:2d:da:6d:d1:b1:72:7c:64:
                    55:0e:b2:73:5e:b6:d9:4d:b1:90:5e:4a:96:07:5e:
                    cf:93:5c:07:fe:1e:9c:fb:47:81:b8:1f:0d:ac:b2:
                    81:f3:17:d2:6c:f2:6b:4f:a9:b0:f1:01:ac:dd:56:
                    d9:38:89:70:04:7b:17:15:96:c1:85:50:af:30:02:
                    00:7b:0c:db:52:32:05:a3:0a:c9:ef:99:6d:19:83:
                    d2:d0:9c:f1:de:28:f9:0b:5a:54:a9:83:32:8d:3a:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:1F:E2:B5:32:BA:72:30:5F:E1:25:15:B9:C1:36:6A:64:67:9F
            X509v3 Authority Key Identifier:
                keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:40:75:0b:26:be:00:3e:09:ca:1b:f8:b6:49:0f:20:85:
         c0:ac:c9:18:d6:47:e9:75:66:ee:bc:61:01:b9:98:ba:f6:52:
         ae:08:d3:eb:85:8d:d6:93:d8:45:f2:1b:af:6c:4a:7d:32:ae:
         df:61:67:29:7d:9c:7d:a6:70:b0:7a:67:b5:c2:db:7c:0b:bd:
         35:e2:f3:3b:d3:3c:04:70:b5:33:45:4a:85:04:41:ab:b6:ce:
         ac:de:78:23:f6:0a:a1:1f:6f:7f:82:50:7e:74:c4:e3:7d:1d:
         69:a7:92:d0:a5:0d:eb:48:9a:76:a4:e0:16:4e:79:3e:14:3a:
         66:6e:9a:b7:3b:77:fe:e2:27:bd:e0:65:d8:24:9d:02:ff:67:
         5f:90:53:f7:54:8e:b9:5a:9f:5a:6b:b9:64:36:38:08:c5:bf:
         bc:95:4d:0a:9b:6f:15:e0:73:33:90:60:a3:7c:6d:ab:18:ff:
         ea:9f:ca:1c:85:57:e1:89:e5:69:a3:ae:a9:72:b6:e3:4a:4a:
         9a:89:36:47:aa:0c:ce:80:90:01:ba:13:b8:5b:8c:91:c3:0b:
         71:1f:fb:a8:dd:37:ee:52:8d:16:95:7d:99:49:12:d5:ec:31:
         6e:5e:ff:fc:9d:23:1d:05:01:75:18:28:ae:d2:f5:69:6a:63:
         f1:53:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:00:21 2025 by rpki-client