Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          mYa7Xvd4qOtGOPBdjd3z3kbYCFhvxQKvaISbJaU0BFg=
Subject key identifier:   97:BC:B5:E0:29:32:1C:24:95:D6:8C:0B:1B:62:F1:39:2A:CA:1A:14
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       019933EE24488237F1E3D2EF27404E61DEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          1480
Signing time:             Wed 10 Sep 2025 14:01:08 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:08 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:08 +0000
Files and hashes:         1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
                          2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
                          3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
                          4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: RXeIW1iHfy+xnAj0luLFcBCwBc7IrfJ6WtzKGjpwZmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:24:48:82:37:f1:e3:d2:ef:27:40:4e:61:de:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Sep 10 14:01:08 2025 GMT
            Not After : Sep 11 14:01:08 2025 GMT
        Subject: CN=97bcb5e029321c2495d68c0b1b62f1392aca1a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:a4:ce:31:f1:85:97:ff:71:af:02:3d:56:
                    2e:2a:c1:81:f4:56:27:57:f8:fa:34:7f:5c:ab:03:
                    56:85:78:c1:d9:94:4e:bb:cb:a4:99:6f:2d:e4:2e:
                    6b:06:46:0e:a3:c8:1b:0d:aa:ac:4c:07:52:ff:a6:
                    a6:e0:61:8b:6f:38:68:45:41:5c:dd:6b:c7:fe:b3:
                    1c:d2:8e:2f:92:2c:0c:34:78:a2:c3:41:6c:25:0e:
                    c2:a2:23:36:ff:07:0f:1b:88:8d:51:d4:27:2a:e6:
                    9c:c5:30:61:28:b3:d7:5a:a4:5d:74:9a:67:73:fb:
                    ef:5f:9e:1d:57:66:03:34:21:b4:a7:49:b9:7e:59:
                    f0:2b:d4:68:45:02:b1:e5:20:38:1e:ff:aa:aa:8b:
                    48:65:7e:a0:fb:48:36:83:fc:da:51:aa:c7:25:d5:
                    b2:49:2f:94:9a:66:bb:64:2a:6e:da:99:de:27:75:
                    c5:3c:3e:61:e9:dd:9a:25:ae:64:1e:f4:6b:a0:f0:
                    5d:55:b8:f4:22:71:1f:e3:e5:5b:d5:48:f0:15:12:
                    84:ff:a3:5d:da:74:60:a3:9e:e4:b3:37:58:56:2f:
                    ba:c2:52:ec:cf:3d:d1:5d:3c:a1:10:df:fa:c9:13:
                    d8:64:f4:b8:ac:1b:78:01:7b:b5:d3:27:e1:65:0f:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BC:B5:E0:29:32:1C:24:95:D6:8C:0B:1B:62:F1:39:2A:CA:1A:14
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:dd:57:90:f7:c4:d5:98:35:a0:84:de:c5:45:42:fb:b0:
         77:73:e2:99:97:90:0e:0a:b0:b4:bb:94:d8:e5:18:4a:06:e5:
         16:9b:ca:cc:0e:ab:35:7c:d6:63:a7:bc:f5:21:40:a9:d2:0c:
         93:49:34:a0:cf:d1:92:ad:7d:b1:10:2a:c3:36:b8:44:cd:aa:
         7c:ad:4a:a1:f6:bb:a9:af:f8:cd:2c:42:65:83:ec:a7:80:2e:
         e7:c8:01:47:21:29:f5:1b:7f:85:58:ec:f2:52:9d:dd:c9:64:
         66:5d:18:0a:3a:2b:3b:2c:08:ca:7c:87:f1:b1:1b:f0:32:e7:
         b5:5f:f7:7a:ea:d6:74:4d:d1:7e:e3:f7:85:61:bc:7f:7f:f8:
         74:da:55:e1:97:00:31:c3:e0:60:22:68:af:ab:39:6c:51:89:
         71:0e:81:50:12:f8:9b:0e:8c:79:c5:2b:b1:8a:94:31:71:2c:
         a1:0d:5b:a3:8a:fb:56:ad:56:5c:8c:3b:4a:ff:a3:66:4e:51:
         6a:5a:84:3f:7b:1b:41:c2:6f:b3:2b:4a:33:92:72:f4:8b:1d:
         23:4e:7b:3f:b0:f9:48:32:79:52:b5:a1:31:5f:25:04:b7:9a:
         c9:4d:91:88:ed:72:a7:98:9c:b8:d7:6b:a9:2e:5e:12:d3:52:
         27:1e:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:03:24 2025 by rpki-client