Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File:                     o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier:          8414iRlr2GYs0XGCmtDece6UlG7WmC00EYJGYpBZsIw=
Subject key identifier:   33:5E:8D:6D:E4:E9:13:6A:E8:AC:FB:8F:C4:D1:DE:0F:BA:F1:46:D6
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       01984664AB7E814E425CA215AE92216714FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number:          1605
Signing time:             Sat 26 Jul 2025 11:00:59 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:59 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:59 +0000
Files and hashes:         1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
                          2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
                          3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
                          4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: ZcApVDty8XMof6qMeEuIbCfHqnLfqYYNqTZ0mlcunkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:ab:7e:81:4e:42:5c:a2:15:ae:92:21:67:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Jul 26 11:00:59 2025 GMT
            Not After : Jul 27 11:00:59 2025 GMT
        Subject: CN=335e8d6de4e9136ae8acfb8fc4d1de0fbaf146d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:41:75:3f:3e:76:bc:20:9e:44:49:13:24:
                    b3:6a:19:54:79:b5:ed:70:6b:2a:2f:ce:a6:89:c0:
                    2f:41:67:f0:df:80:91:8a:07:6f:e8:21:be:a0:2f:
                    f9:ae:90:88:c3:45:db:2d:b5:cb:0d:03:a9:74:09:
                    7c:12:3d:ba:45:7a:a4:e3:2e:e9:21:00:32:3e:80:
                    72:d4:13:56:5a:25:da:e6:f6:78:cf:e9:fd:81:72:
                    08:e4:52:ea:d6:ec:f3:2c:13:e7:57:8a:18:09:d8:
                    cd:27:72:48:45:3e:68:40:e8:ad:ab:92:90:cd:59:
                    92:69:b6:9b:1c:5c:84:cc:19:d5:2a:fd:e3:b4:4c:
                    9c:bc:49:20:07:63:c9:9c:1a:db:cd:16:46:1b:3f:
                    7b:07:b5:4c:8b:1b:70:92:d0:12:1a:c3:bc:f2:6b:
                    36:5a:0c:c2:0b:55:9e:51:c2:ec:50:0e:39:64:6f:
                    a9:4d:73:7a:7b:46:c2:ed:33:db:15:60:a7:a7:a2:
                    34:e6:20:0d:74:44:f8:5e:35:c3:47:ff:22:2e:4c:
                    46:d6:db:18:71:fe:76:5a:df:5c:e6:75:7a:af:d1:
                    fc:c9:bc:56:9b:75:aa:5d:f8:76:6b:27:19:05:e8:
                    21:08:0e:32:94:dc:5e:94:c6:5d:9f:c6:ef:ac:66:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5E:8D:6D:E4:E9:13:6A:E8:AC:FB:8F:C4:D1:DE:0F:BA:F1:46:D6
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:87:50:c8:36:16:98:a5:f3:f8:33:70:d8:09:49:05:28:23:
         f0:f9:43:36:42:41:07:6a:03:65:d6:4b:b1:89:58:e0:93:2f:
         e9:07:fa:1a:5a:fb:cb:4d:22:8f:ad:14:b6:f9:3a:72:ef:6c:
         45:b2:d6:88:d7:52:48:03:a7:8a:2b:45:28:fb:5e:15:35:90:
         fe:4d:36:3b:e9:8c:cc:9a:f2:01:05:08:20:c4:89:2e:24:7b:
         86:88:1e:2c:c5:43:22:45:93:cc:4b:95:20:a4:6d:2d:99:e0:
         7a:5a:1f:5e:3d:b6:f6:06:42:81:1c:40:f2:35:5e:7d:94:a3:
         af:4c:45:be:c0:41:60:a3:76:0a:fb:35:89:89:06:16:d1:c1:
         49:a4:95:61:7f:9a:a2:1a:fc:9b:dc:8f:3a:a4:31:55:12:77:
         cb:58:bb:e3:9d:15:50:14:da:4b:b8:14:c3:0e:c3:8c:84:62:
         f4:21:3a:12:8b:d9:2c:fa:d6:9f:3c:00:af:6e:b5:4b:f0:09:
         20:03:4c:4a:a5:a3:85:85:6c:9e:8f:30:46:53:98:72:e1:cc:
         e3:82:3b:03:ea:ab:ae:b7:da:99:b0:c8:f6:02:c1:55:08:32:
         1a:38:3d:da:47:1c:8f:82:6f:73:01:a7:c7:11:c9:3c:9b:16:
         95:7c:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:42:48 2025 by rpki-client