Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
File:                     OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft (raw, json)
Hash identifier:          7Lag6ZoOIWraDHNOL/EGji0fgTUzo10Q53NwItInjrw=
Subject key identifier:   9C:36:24:85:72:9F:E0:50:97:AE:DB:26:9C:86:53:F8:1C:6F:66:49
Authority key identifier: 39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
Certificate issuer:       /CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Certificate serial:       0199221EA8CC5E6B6AAB4943EC5D9718A7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
Manifest number:          056B
Signing time:             Sun 07 Sep 2025 03:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:58 +0000
Files and hashes:         1: OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl (hash: uvmiJGR/KtBkRv2ANhLsr7Gt3ptfsooZZIJ2O2L5SsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:a8:cc:5e:6b:6a:ab:49:43:ec:5d:97:18:a7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
        Validity
            Not Before: Sep  7 03:00:58 2025 GMT
            Not After : Sep  8 03:00:58 2025 GMT
        Subject: CN=9c362485729fe05097aedb269c8653f81c6f6649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:c3:b6:1f:c3:9f:4a:ce:d9:ba:14:52:7b:
                    1c:3b:c3:d2:5d:ef:dd:8b:5a:0d:05:5c:de:c4:fa:
                    ac:c8:fb:57:03:73:37:e1:9d:62:62:29:67:a2:60:
                    8d:2e:6b:f2:67:ce:ff:01:bb:44:5f:6a:b8:a9:6f:
                    d7:73:86:51:44:92:18:28:08:56:b7:57:47:c3:13:
                    5c:9a:b5:59:4e:8c:53:4c:6d:a2:39:a5:11:ed:55:
                    9e:f7:2b:4e:85:51:09:6e:90:93:ae:f2:66:03:75:
                    b4:30:e3:d0:45:78:cf:06:21:8f:28:01:a4:a7:bc:
                    f4:46:7b:72:a0:1b:fa:cd:79:bd:3b:56:80:e8:21:
                    52:dc:53:23:21:b3:8d:e8:10:9d:1a:77:a3:97:1b:
                    4b:11:91:31:ed:d8:e9:ca:b8:28:f1:51:99:9a:7b:
                    db:fb:d4:79:cc:e4:bd:e3:15:b6:c7:dd:e3:3e:44:
                    e8:c1:7c:71:b4:75:e9:95:22:ed:a0:4a:df:37:97:
                    86:e0:24:7b:86:8e:95:65:e8:87:9a:ba:45:a9:87:
                    06:43:22:a1:0b:89:60:08:9a:17:12:42:9d:ad:27:
                    f0:ac:1e:89:67:8f:eb:b1:40:ae:d5:d7:4c:12:23:
                    04:bc:61:65:8c:ac:23:d8:b8:ba:0b:54:3d:3e:82:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:24:85:72:9F:E0:50:97:AE:DB:26:9C:86:53:F8:1C:6F:66:49
            X509v3 Authority Key Identifier:
                keyid:39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:d5:b6:a1:ed:0b:82:17:23:a9:e2:f6:f7:78:f1:61:14:
         46:aa:f8:eb:db:4a:f5:60:a3:61:00:83:1c:03:d6:dc:90:66:
         45:97:76:06:0a:bd:7d:ce:94:c8:f9:b6:ae:35:d5:f3:0e:c1:
         7d:7c:8f:f8:10:ae:18:96:ab:c6:e0:45:20:9a:8a:5b:4e:e8:
         97:ae:37:59:b9:6f:0d:d2:81:7b:af:66:aa:c1:a7:f1:00:0a:
         83:30:5a:f4:84:8d:03:85:32:6a:6f:bf:5e:e4:93:8c:49:a0:
         7a:57:51:98:f1:3f:c2:71:a2:29:03:fb:21:d6:27:5a:53:85:
         8c:53:b9:f6:76:25:d3:2e:98:9f:b9:4b:5a:04:e3:6d:8a:6d:
         02:e5:ba:72:b7:24:ef:2b:e9:52:cc:25:1d:b2:76:85:0b:b9:
         c1:ff:01:ad:24:f6:fd:a3:e7:b5:71:78:34:02:8b:dc:b9:2f:
         50:0c:80:b0:37:96:64:49:fe:6d:b6:35:63:f5:22:66:98:15:
         99:ce:42:16:4d:20:3d:eb:96:f4:4e:07:52:27:a6:57:57:3d:
         ca:54:86:4f:3d:a8:70:72:9c:1d:b6:fc:d6:4f:2a:5c:ee:b4:
         88:0c:ea:89:98:c1:aa:00:5f:7d:12:09:f3:a1:37:a9:75:10:
         9c:d7:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:49 2025 by rpki-client