Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File:                     OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier:          5sOQWBpWUai/HbvGFrNpIXB71DduaKi2z5G4VZa3FFI=
Subject key identifier:   79:42:06:72:03:68:C5:88:A9:EA:DA:3C:D6:91:67:79:49:1A:93:70
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer:       /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial:       01976884F28B3D7423FED0F59031803C5C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number:          04F1
Signing time:             Fri 13 Jun 2025 09:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:32 +0000
Files and hashes:         1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: rIz6QFizchJCWVdi7Rl/HX1LwPUjtTCjhbIDkQTNceo=)
                          2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:f2:8b:3d:74:23:fe:d0:f5:90:31:80:3c:5c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
        Validity
            Not Before: Jun 13 09:00:32 2025 GMT
            Not After : Jun 14 09:00:32 2025 GMT
        Subject: CN=794206720368c588a9eada3cd6916779491a9370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:6c:65:39:4c:97:16:b9:49:b6:89:4a:13:
                    e6:fe:a4:67:f0:35:31:15:f0:ad:a9:90:d8:2f:35:
                    91:7b:bd:d1:15:de:ec:f5:61:d2:35:ff:26:c8:09:
                    cf:f1:80:a8:cf:69:ec:4f:24:9e:67:bd:2d:14:13:
                    de:9a:af:98:10:b0:b0:0e:e4:e7:d5:30:1b:69:a3:
                    69:7e:f9:7c:a8:ab:92:8e:73:aa:c4:e4:15:d0:ae:
                    06:0c:c9:74:bc:0a:82:27:97:4d:80:1a:1a:f2:a7:
                    1e:c1:ae:80:84:b9:d0:cb:79:b1:d1:4a:22:e7:41:
                    5f:30:af:c6:30:f8:c4:ad:0d:c3:5c:4a:f6:2a:93:
                    20:de:ef:7e:cd:84:94:9e:0b:1e:40:0a:00:4c:0c:
                    ef:a4:4f:28:c5:52:a1:9c:aa:97:36:64:7f:ff:27:
                    ed:fb:01:17:bd:90:9f:62:d3:4e:7e:a9:31:6d:24:
                    bf:c0:e3:79:e0:f0:38:a2:c5:3b:7b:12:75:f9:b1:
                    95:46:f5:da:98:8c:bb:29:4e:4d:d5:8c:d3:4a:94:
                    19:00:61:ed:d5:00:5c:d3:48:97:5b:95:f9:20:e9:
                    b5:4e:ca:d3:06:79:36:55:3f:18:79:f5:e4:16:ef:
                    ea:bf:bf:64:35:bc:dd:19:9c:1d:bf:40:71:0f:b7:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:06:72:03:68:C5:88:A9:EA:DA:3C:D6:91:67:79:49:1A:93:70
            X509v3 Authority Key Identifier:
                keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:97:1d:de:be:88:f8:c9:9b:65:3b:c8:ba:0f:0a:63:a7:5d:
         9a:30:39:82:5e:13:0b:d2:06:db:b7:f0:08:c8:06:b4:9f:9a:
         4c:cf:e9:40:67:72:48:81:ff:36:ae:b2:c9:f8:66:ca:d4:03:
         38:06:66:09:4d:ba:11:7b:32:44:5c:41:4b:9f:27:dd:51:97:
         54:17:ff:f7:63:bb:bc:c4:17:61:9f:9c:86:0d:b7:48:66:82:
         8c:c1:19:d0:c5:21:8d:e6:3e:e5:8a:99:33:67:a0:5f:5e:5a:
         aa:c0:97:b8:48:29:83:50:b4:48:a5:14:bd:8d:ea:6d:9d:0c:
         af:5a:09:a8:f8:c8:cf:ee:1a:e5:d9:08:dc:fa:81:c6:61:dc:
         d1:41:cc:68:f2:d2:c4:60:db:20:fa:7e:e1:23:a9:11:f7:72:
         63:71:63:d4:6e:da:c1:20:88:a3:21:bf:79:41:74:01:1f:ef:
         c6:0e:c8:21:e6:7a:0a:96:89:be:f0:d9:af:ad:19:1c:50:be:
         84:1d:1b:d5:71:ef:8f:03:16:25:c6:2d:01:5f:4d:a4:cb:b4:
         a9:11:b3:ef:85:be:ef:24:75:99:7f:10:14:71:9f:48:5c:f6:
         7e:91:ab:ab:4b:77:68:8b:cf:60:b1:7d:76:c1:3b:1e:5a:95:
         2e:1b:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:14:19 2025 by rpki-client