Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          VWUrMdMtQ5t8BOe0GysChqGDwoSgHOBM31/KCj3T910=
Subject key identifier:   B0:F5:CC:D4:92:02:8B:B5:24:6A:00:15:9B:A8:DE:9E:22:53:CE:B9
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       01992FA334F13574846D60C70747DE493C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          167A
Signing time:             Tue 09 Sep 2025 18:00:49 +0000
Manifest this update:     Tue 09 Sep 2025 18:00:49 +0000
Manifest next update:     Wed 10 Sep 2025 18:00:49 +0000
Files and hashes:         1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: cnadm9Utjn8F/erjQLAvfwHjdt4TmQ8YKNvJ8I9pOhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:a3:34:f1:35:74:84:6d:60:c7:07:47:de:49:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Sep  9 18:00:49 2025 GMT
            Not After : Sep 10 18:00:49 2025 GMT
        Subject: CN=b0f5ccd492028bb5246a00159ba8de9e2253ceb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:f4:43:60:c2:d9:d0:5d:db:22:58:3f:a0:
                    3a:51:c1:5e:ab:89:e0:20:10:03:5d:25:7a:14:9e:
                    c0:18:d2:f0:3e:7c:b2:68:f2:99:42:0f:47:b2:18:
                    44:f9:99:41:04:c8:4f:7e:0e:12:50:29:48:e3:89:
                    72:4f:4d:f1:38:40:0b:bf:4b:bc:be:ea:f9:18:f1:
                    fc:82:f0:f3:e6:b7:e1:ba:59:5e:c3:08:93:76:6a:
                    ff:ed:88:26:74:62:91:89:4e:47:e7:7f:c6:0b:bd:
                    08:e1:ef:71:21:f2:38:bf:c8:da:25:7f:4d:b2:08:
                    be:4e:56:78:8f:39:98:b3:d7:3f:f6:08:2c:5f:ba:
                    15:6d:19:d3:1a:69:b6:8a:da:28:e9:a5:a8:29:0e:
                    d5:08:c7:4e:b0:ed:56:89:6a:72:38:78:cd:09:20:
                    f6:32:f8:25:51:70:37:e8:fd:23:de:eb:39:86:a7:
                    ba:a7:e2:46:87:b9:36:10:62:6b:53:f1:ce:1e:fd:
                    c2:e6:c8:cc:21:38:3f:93:96:7a:8f:1e:0a:d9:b0:
                    13:00:bb:ab:ad:da:98:97:07:94:c4:08:9c:fa:3d:
                    af:e9:e3:b8:40:c3:8f:da:12:0d:d4:ad:c4:06:dc:
                    c5:7c:d0:f0:9b:ae:94:44:52:0c:3b:a7:54:22:2d:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:CC:D4:92:02:8B:B5:24:6A:00:15:9B:A8:DE:9E:22:53:CE:B9
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:17:ad:ba:6a:0a:b6:5b:72:bc:f7:d1:f5:a1:58:c5:fe:
         4b:c1:b6:41:59:d6:af:2e:a6:c7:a1:a3:10:f3:83:0c:77:6c:
         72:e6:d7:12:de:22:ca:0c:85:4f:a1:5d:66:74:b8:1e:00:9d:
         af:f5:45:20:41:39:d0:3f:99:77:f7:75:7f:1e:10:b2:7a:d4:
         bd:9a:35:5f:7b:81:3a:b8:1d:26:1a:a7:5b:60:e3:39:f0:09:
         16:43:36:94:ad:c8:b0:38:7c:d8:f6:34:c7:34:0a:0a:6d:cc:
         01:72:21:1d:8a:7b:0e:69:6f:fd:69:f2:46:cf:13:4f:34:86:
         db:db:80:a2:05:db:32:3d:15:d6:f9:d7:72:f0:ef:8c:f2:47:
         61:40:a0:c4:e0:3f:c3:a7:35:2b:92:2f:8f:63:e9:e8:af:50:
         91:81:dc:0c:a6:a8:4c:87:2c:2f:5c:c7:49:42:3c:a6:0c:2e:
         23:6f:9c:68:e4:6f:9c:49:11:de:1a:11:ad:6f:11:6d:da:c4:
         21:75:90:15:2a:2c:84:06:a1:17:60:d0:46:43:fd:bd:2b:24:
         3b:e8:43:af:a5:02:bc:bc:83:60:cd:2f:fb:9d:f4:22:4d:f4:
         d9:cb:a4:fe:06:5a:d9:9f:a5:6c:5c:1b:7a:e8:37:cd:37:8d:
         da:7f:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:59:58 2025 by rpki-client