Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File:                     oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier:          mJoJip8p8J/eDLP4JbyquFTlVbaeVUvVVs9iuPl2XlM=
Subject key identifier:   BD:F7:91:A6:BE:36:9B:6B:15:E7:7A:FF:06:DD:A2:FE:EC:DA:09:AA
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer:       /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial:       019922C31475F7A2D191DA11DF885C561583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number:          106D
Signing time:             Sun 07 Sep 2025 06:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:34 +0000
Files and hashes:         1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: WmTBJeDL7FDtr7Mf/V7lWOcucKPRzqv9KF6Anan1las=)
                          2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:14:75:f7:a2:d1:91:da:11:df:88:5c:56:15:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
        Validity
            Not Before: Sep  7 06:00:34 2025 GMT
            Not After : Sep  8 06:00:34 2025 GMT
        Subject: CN=bdf791a6be369b6b15e77aff06dda2feecda09aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:e1:d2:db:f8:5e:2d:3b:9b:70:c9:be:92:
                    f4:aa:c5:a4:dd:d8:b3:73:a2:8f:b5:4f:09:eb:33:
                    4b:b4:22:89:dc:87:5e:a5:78:d2:08:b8:05:d2:3f:
                    c4:00:41:aa:1b:68:49:1d:52:86:1b:80:d8:c7:55:
                    5d:2c:6d:f8:1c:78:c8:33:60:8b:da:8f:67:f3:f6:
                    11:82:2e:96:24:47:b9:5f:7a:b4:68:ca:6e:bc:65:
                    fe:83:04:99:ba:a1:6b:5f:fa:d4:94:9e:43:06:85:
                    cb:ee:ef:35:2f:da:e6:10:40:c5:f1:51:c8:ce:68:
                    56:79:46:4f:6c:e6:26:4a:7c:ed:5e:d7:5d:98:97:
                    d3:3c:69:9e:21:e9:94:c0:e9:c2:4a:83:be:9a:0a:
                    98:a6:80:52:fd:b5:11:8d:72:f0:fe:90:7d:82:01:
                    42:d0:46:cf:d4:9b:1e:17:b7:a9:b7:e3:8b:3f:1c:
                    97:3b:e9:da:64:05:6a:38:02:b5:d4:d8:f1:20:61:
                    67:b5:5d:bd:0a:6c:8f:84:9c:46:76:f0:bc:b3:96:
                    38:70:51:8e:da:6f:47:19:24:69:16:7b:d6:0d:0f:
                    97:e0:e1:1e:7c:ae:e8:99:89:0e:fb:2a:45:9e:07:
                    dc:fa:c5:7a:ae:9b:c3:86:06:c5:3d:fe:fd:48:34:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:91:A6:BE:36:9B:6B:15:E7:7A:FF:06:DD:A2:FE:EC:DA:09:AA
            X509v3 Authority Key Identifier:
                keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:43:b1:60:04:06:e3:3b:a8:39:2a:9f:40:e0:b8:be:53:
         20:c3:9f:f1:bf:bf:00:d6:37:69:d8:ce:60:2c:13:01:51:23:
         58:6c:69:c6:49:90:a1:c8:da:ce:d0:db:30:83:9d:5a:99:47:
         d5:05:bd:7c:6f:29:f9:55:0e:61:e4:30:41:ce:3a:9d:1e:29:
         82:a2:56:27:63:92:58:15:59:5e:05:73:66:de:ef:51:91:18:
         46:b5:70:5c:0c:f5:73:93:2b:bc:b8:ef:f5:b7:9d:d9:ee:6e:
         08:cc:fe:d2:be:e1:3a:ac:a1:8c:72:21:6e:70:3b:6c:79:b8:
         a6:9b:ba:dc:00:c0:97:5f:00:2e:ab:57:4a:0f:d7:58:ac:1e:
         ff:3e:bd:79:92:10:f0:80:52:99:35:16:ae:83:4d:b3:5d:50:
         9d:e0:97:97:73:f4:ec:0d:82:05:ee:dc:ba:b4:00:58:0c:9c:
         8b:67:ac:6e:0e:f5:2d:a7:c4:87:6f:90:e7:de:3f:7d:ca:8b:
         6b:93:36:82:e5:26:5a:6e:29:51:c8:4c:6c:43:69:0b:1d:20:
         8b:41:a2:b7:29:14:89:69:48:9b:b1:80:ab:fc:b8:9f:4c:a5:
         be:1b:d1:6a:c5:cf:88:9a:1e:20:8e:da:82:5a:3d:01:81:bb:
         ea:c3:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client