Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File:                     OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier:          0m5hyI6l0uy8sWW8jiOrxt6uZ0FrgUwF6ihnOMV4sl8=
Subject key identifier:   2C:0D:7E:C9:23:E2:8B:57:4C:5E:87:89:50:21:54:B9:B3:8B:27:53
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer:       /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial:       0199165159F7C5B28923F3DD19A0774316AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number:          1085
Signing time:             Thu 04 Sep 2025 20:00:54 +0000
Manifest this update:     Thu 04 Sep 2025 20:00:54 +0000
Manifest next update:     Fri 05 Sep 2025 20:00:54 +0000
Files and hashes:         1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: mR8wTRju55M6oILar11wqfM6bJ9Wb3XSsOzok5hsyYw=)
                          2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:51:59:f7:c5:b2:89:23:f3:dd:19:a0:77:43:16:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
        Validity
            Not Before: Sep  4 20:00:54 2025 GMT
            Not After : Sep  5 20:00:54 2025 GMT
        Subject: CN=2c0d7ec923e28b574c5e8789502154b9b38b2753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:05:ff:8e:b9:2a:41:df:e2:10:f6:15:63:15:
                    e3:eb:42:b8:aa:65:79:0c:c7:c9:a9:f1:b5:a4:16:
                    6e:1f:8e:cf:af:87:74:c2:cc:59:8f:0f:13:89:c2:
                    c9:5a:33:68:ab:8b:59:8b:1a:ff:cd:4e:11:2a:d9:
                    7d:cc:34:82:5e:c0:59:49:30:6c:20:44:09:8e:64:
                    4f:aa:7e:41:42:21:4b:63:d5:1e:1d:70:e2:1f:24:
                    a1:91:3b:89:12:73:7f:d8:4b:30:62:da:c6:0c:a0:
                    da:d6:1c:d9:bb:89:af:b9:4d:04:cc:80:b7:24:90:
                    6e:f2:65:b4:3e:9f:e4:92:ba:74:8d:67:88:ca:0b:
                    2d:55:d3:ae:c5:04:b1:63:7c:02:51:2d:a9:fd:44:
                    05:3f:d3:a7:37:4a:03:a9:a2:e9:ed:5d:69:59:43:
                    2a:33:ba:13:f1:69:11:0a:2a:0a:31:b4:06:08:98:
                    b0:6e:75:85:75:b6:b8:29:59:de:4a:c1:3b:44:db:
                    ec:77:f7:f3:fa:ac:b6:fa:9f:0d:5d:2b:40:ce:d3:
                    32:89:4c:82:d3:50:49:64:e9:7f:1e:da:86:0d:c5:
                    92:22:e5:dd:b3:f7:8b:a6:aa:cb:18:2c:cd:32:b0:
                    e8:68:d7:60:0f:89:f4:60:3d:02:86:4a:f4:1c:5e:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:7E:C9:23:E2:8B:57:4C:5E:87:89:50:21:54:B9:B3:8B:27:53
            X509v3 Authority Key Identifier:
                keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:cb:2e:3a:14:a2:0e:d3:22:ea:3c:b7:77:67:fe:f7:53:
         af:25:c3:7e:50:58:29:cb:86:d2:6b:53:b3:2b:02:b9:27:08:
         c8:af:12:0d:3a:2d:31:67:8e:2b:16:6b:6a:b4:7b:32:79:18:
         95:8c:d2:e7:46:ff:7a:0e:18:a3:82:18:63:93:98:0c:e2:db:
         2c:18:60:fd:31:62:46:35:8b:9b:23:e7:53:9b:1d:9d:88:9c:
         49:d1:b4:cc:37:ba:17:3c:0c:a8:75:81:87:6e:26:22:42:a6:
         a2:92:47:90:02:6c:5c:21:12:8e:88:38:82:76:de:83:2d:1f:
         2f:02:ee:91:9a:13:d5:91:44:e0:6b:21:17:be:be:9b:6d:2c:
         ba:85:2f:54:d6:0d:ec:40:0e:cf:8d:6c:cb:c2:a0:77:86:7d:
         88:55:92:2f:12:ea:30:5e:ef:d8:a1:48:6c:82:b2:76:3e:7d:
         1b:8a:8d:fb:36:e0:1f:2c:b9:6e:73:29:2e:39:dc:68:e4:e8:
         bb:48:ae:35:97:8f:50:8d:52:f6:64:6d:c9:63:45:85:02:f4:
         3d:b9:87:0c:39:74:d5:9c:aa:fc:69:56:34:07:21:e8:c4:9f:
         dd:fe:38:8d:12:6d:50:fb:78:7d:22:93:93:88:25:56:03:1c:
         03:09:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:20 2025 by rpki-client