Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File:                     OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier:          f1RYNYf64rIzit1GzvYY1rdpWPGfz1aA97tatLVAg6w=
Subject key identifier:   FB:21:6E:F1:A0:69:7F:3F:8C:48:C6:9A:CC:31:2C:29:98:F9:32:BA
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer:       /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial:       019922557DD4312694CAC70CF1BD211297C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number:          0CEB
Signing time:             Sun 07 Sep 2025 04:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:51 +0000
Files and hashes:         1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: l6y6GPDlYtTR3OC2xjrkBCRnFP6N7o0KCVrjvJ6y5fk=)
                          2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:7d:d4:31:26:94:ca:c7:0c:f1:bd:21:12:97:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
        Validity
            Not Before: Sep  7 04:00:51 2025 GMT
            Not After : Sep  8 04:00:51 2025 GMT
        Subject: CN=fb216ef1a0697f3f8c48c69acc312c2998f932ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:2d:29:c2:d5:99:c1:01:2f:e5:05:a6:43:
                    3d:7d:28:2d:f9:67:4d:5b:74:43:b8:1c:5a:3b:43:
                    4d:42:8c:97:15:f2:cf:25:83:bb:58:f4:43:07:e0:
                    d9:79:d9:7f:f4:3a:67:fa:9d:de:60:32:19:20:81:
                    d3:e2:e5:77:e4:9b:ea:1d:5e:96:43:5c:cb:97:0b:
                    fa:c6:a7:e2:b6:9a:a4:50:05:b6:79:53:bd:f8:2a:
                    de:6f:70:dd:fb:50:67:81:d2:5c:52:01:7d:05:9c:
                    6f:a8:26:4b:7e:bc:e0:88:aa:1f:2a:c0:7a:ee:c1:
                    86:89:dc:64:e5:ba:d0:27:6a:36:17:a7:2f:9a:a1:
                    2d:77:aa:9f:92:b7:da:39:2f:63:bc:54:f6:18:83:
                    a5:39:6d:c8:e0:2f:1d:0a:e4:f9:c3:4c:74:2f:49:
                    e1:73:0a:45:1a:28:4c:f1:ca:ac:ba:86:06:8a:d3:
                    88:a9:4d:cf:b5:c9:fe:5a:cb:d5:2d:af:a8:3b:00:
                    02:50:e0:61:e0:4e:c7:4c:9f:20:db:63:08:ee:59:
                    d4:30:c6:30:db:c6:ad:15:df:dd:4d:9b:e8:50:f7:
                    58:65:80:19:0e:c3:95:3f:ca:31:a4:36:ac:5f:d9:
                    9e:f3:15:53:12:19:09:4f:ee:f4:c8:cf:bd:8d:6d:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:6E:F1:A0:69:7F:3F:8C:48:C6:9A:CC:31:2C:29:98:F9:32:BA
            X509v3 Authority Key Identifier:
                keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:61:55:71:1e:f1:62:db:63:e2:3f:28:a5:3b:66:15:b0:
         ab:99:18:50:d1:e7:7c:4c:59:ba:fc:26:f1:21:71:17:38:4a:
         31:1a:59:99:63:c4:bf:8b:b0:95:4c:50:fa:cb:04:74:ac:2a:
         50:a6:7b:0f:a3:b7:e6:8c:11:25:6a:be:9a:1d:3e:22:e1:4e:
         d1:58:97:1b:3a:70:6f:8d:e8:cb:0c:ed:0f:31:67:0d:cc:1b:
         69:06:24:45:d0:b9:fb:1a:75:89:7d:aa:fe:e9:b6:d4:11:9a:
         2f:0b:af:9e:c1:ca:7c:d2:da:51:58:d3:29:72:a0:21:2f:75:
         91:5b:bf:ad:1e:3c:09:18:4d:70:c6:af:cf:08:90:32:e1:e0:
         34:36:e9:42:04:fc:65:12:cd:50:d3:70:d3:78:20:77:34:3f:
         1e:c8:20:6a:fc:9e:94:23:8f:e0:0c:a2:3f:38:0e:f8:d3:01:
         fd:21:ee:2e:6c:7d:b1:fb:ce:4e:80:d3:d6:14:8f:31:50:69:
         ae:32:1a:61:8a:8a:e7:cd:23:ae:cc:8c:6f:3f:6a:51:8f:f0:
         4f:cb:2e:d9:46:47:51:b0:80:fb:36:8b:c5:92:3f:13:b3:37:
         19:3d:ed:80:76:da:d0:c8:18:eb:45:2e:e0:6c:7a:4e:03:6c:
         91:88:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:38 2025 by rpki-client